Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa
File: m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa (raw, json)
Hash identifier: LVhjeEqDTNmsxowkINJYXb6iHnRvgZx0ebSzKo74mzQ=
Subject key identifier: 9B:99:00:4B:DD:AF:C7:56:CD:97:E6:2D:14:AF:AD:80:9D:DA:04:57
Certificate issuer: /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial: 01942067C3F9DC40EEAB4CAC518F8E8E6C94
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.134.148.0/24 maxlen: 24
193.134.149.0/24 maxlen: 24
193.134.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c3:f9:dc:40:ee:ab:4c:ac:51:8f:8e:8e:6c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b99004bddafc756cd97e62d14afad809dda0457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:48:77:87:68:14:1b:e1:79:c5:a7:d6:1f:
b5:f1:8e:92:9a:d3:4f:34:bf:80:1e:37:87:2f:85:
3c:d1:f8:eb:5f:40:f6:13:64:34:74:b6:73:1c:fa:
6f:e1:7e:c3:31:7b:86:d4:97:d6:e1:be:8b:b9:87:
05:1c:1f:ed:a3:42:40:2e:56:79:84:8d:ce:43:3a:
43:54:18:a8:ed:ee:c5:c9:37:df:df:cf:8b:0e:46:
74:69:ff:7d:f0:14:c2:9f:d5:d6:c1:81:24:b7:a4:
dd:e2:94:7a:75:f7:45:12:69:8f:7a:be:35:b6:31:
3b:9d:91:fb:c7:2e:4f:ea:69:ce:72:12:58:d7:49:
5d:9d:12:86:f5:02:79:ff:78:9a:ac:2e:70:4d:3b:
93:40:ac:2d:6e:3a:c1:12:9c:01:ab:8f:c8:7c:8c:
ad:65:7a:3a:14:60:c5:00:09:0c:78:94:fb:bd:a9:
6f:a2:61:fa:8c:53:0a:6d:fc:63:ec:a6:8d:60:c0:
85:78:da:c5:0a:ea:7f:08:19:5c:66:84:bf:82:ec:
22:67:bb:3d:6d:9e:be:4b:34:38:d5:bd:86:ec:e5:
11:c0:ad:8a:8b:51:05:95:43:c6:62:57:8d:1d:f9:
e1:17:cd:31:5e:c9:e8:fa:61:12:d1:e6:9c:0c:c0:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:99:00:4B:DD:AF:C7:56:CD:97:E6:2D:14:AF:AD:80:9D:DA:04:57
X509v3 Authority Key Identifier:
keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.148.0-193.134.150.255
Signature Algorithm: sha256WithRSAEncryption
af:fb:c1:fa:05:fb:5b:b3:c7:ed:20:df:8b:0d:e0:7f:23:bc:
c3:c6:a6:15:81:ee:17:4f:bb:3c:22:63:6d:9e:88:d5:81:70:
9f:56:6e:0b:5f:ee:c9:0d:df:fa:9b:8c:98:15:4b:8c:6d:1e:
82:7d:93:6d:b3:e8:57:7b:9b:1e:9e:4c:b7:49:16:7b:06:37:
00:c9:97:65:05:73:60:3a:55:b2:d4:9d:bd:f6:8f:90:54:53:
5c:5b:5d:d3:ed:a5:c5:ba:98:df:0e:7b:3f:34:04:2e:3f:b4:
32:ad:4e:fa:7b:64:ba:8d:6a:a1:d0:99:3b:50:af:0c:ee:d1:
5f:9e:6c:f6:02:a0:8d:d0:46:9c:73:46:3f:bf:0a:9c:ae:50:
70:13:35:66:cd:6f:de:9d:d1:e6:46:1d:98:30:79:ff:b8:ae:
02:a3:9e:f9:30:03:d4:13:4b:64:35:51:0b:14:54:a6:48:76:
5d:5c:80:19:ff:36:6f:20:5d:ea:f3:c3:55:bc:4f:57:72:30:
68:55:f0:3b:53:de:67:fd:f2:b5:ba:1d:09:72:45:ed:a4:61:
cf:3a:82:e4:68:da:3d:ff:e6:91:b0:09:76:82:48:44:52:30:
86:b8:83:9e:e0:bf:41:c6:5f:34:7b:92:9b:38:9c:24:f8:56:
54:69:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:38 2025 by rpki-client