Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/5IhsmjoHzwobCffyh5nYMlZhguo.roa
File: 5IhsmjoHzwobCffyh5nYMlZhguo.roa (raw, json)
Hash identifier: c6Ybh7y4/ziPQYBMn9CaK2q/SWBTvN4bI1mR4UJ2ed8=
Subject key identifier: E4:88:6C:9A:3A:07:CF:0A:1B:09:F7:F2:87:99:D8:32:56:61:82:EA
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D709B431141F6335CA45D14CFEF69D
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/5IhsmjoHzwobCffyh5nYMlZhguo.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61135
IP address blocks: 213.238.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:09:b4:31:14:1f:63:35:ca:45:d1:4c:fe:f6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4886c9a3a07cf0a1b09f7f28799d832566182ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:ff:3a:9a:0f:33:53:c1:bf:b4:97:25:b0:
b9:f1:d8:e8:00:db:37:2c:00:c8:20:7e:a8:bc:54:
d4:c6:89:23:98:6e:e4:a0:d9:5a:2f:fd:4d:e5:b7:
42:b3:88:4b:77:db:99:36:c5:e4:3f:a2:e4:0f:f6:
01:40:7d:99:69:bb:5e:c1:9a:c0:24:7d:f1:cb:65:
4a:29:80:b0:c2:85:70:85:04:56:22:80:1f:29:4d:
ee:9a:42:5b:6d:26:42:6f:4a:f4:53:8e:9c:28:de:
c7:23:b7:62:dd:b2:fd:3f:7a:03:2a:1a:c8:54:f1:
56:9a:8a:22:49:db:92:dd:da:1f:42:66:83:a2:b0:
a2:02:fa:42:56:04:70:62:38:c5:c9:03:7b:f7:19:
b3:89:d5:6c:d1:3e:26:b7:48:03:3f:20:be:f5:43:
3e:a9:2f:91:eb:8f:9b:e4:7d:01:b0:09:12:13:84:
28:28:c8:1b:77:ed:f2:90:0c:2d:22:ff:e1:28:2c:
99:3b:6b:1a:b9:8b:0a:1e:d8:05:c8:6c:41:4a:0b:
ae:b5:af:95:a4:f0:d3:ec:49:cb:fd:fd:81:79:ba:
0a:40:05:1c:67:e2:38:22:b4:53:22:38:cc:73:50:
02:78:c7:97:7a:57:3f:b7:3c:a5:78:29:e9:25:4e:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:6C:9A:3A:07:CF:0A:1B:09:F7:F2:87:99:D8:32:56:61:82:EA
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/5IhsmjoHzwobCffyh5nYMlZhguo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.167.0/24
Signature Algorithm: sha256WithRSAEncryption
31:06:01:0f:21:0c:54:6e:84:86:00:f4:f8:74:b1:38:02:55:
35:49:d9:99:05:ad:1f:7b:4a:81:94:ed:ac:61:78:e5:44:c6:
f2:44:53:af:a4:25:d2:0b:31:95:6d:b7:ed:24:9c:e4:5a:b2:
a3:f0:94:f5:0c:15:98:83:ff:0a:2c:1a:e8:52:d6:06:86:5e:
3b:85:57:9d:1a:47:d8:16:13:63:d7:29:f4:d7:c5:67:80:10:
21:a8:32:37:dc:b2:12:06:78:a6:df:87:d1:88:3f:be:53:18:
4f:36:91:ab:4d:e3:b3:84:2b:3d:c5:8d:9e:9a:39:89:0f:0f:
99:35:77:ab:37:7e:cc:60:80:d4:fb:1e:63:f1:58:cd:b7:c7:
cd:2d:09:60:44:e1:82:8c:b4:73:53:06:4e:3b:f2:33:0c:13:
ba:2b:1c:a1:84:36:54:37:b0:74:2e:31:b4:aa:88:cf:5b:d1:
11:d8:ab:df:54:85:74:c4:ad:d5:f5:80:b7:ff:94:24:50:8b:
22:f9:30:16:b8:36:53:80:5f:5a:17:4d:57:5e:36:a7:cb:53:
16:17:98:42:98:13:66:9e:56:de:69:30:dd:ac:66:6f:10:ea:
9d:58:32:08:7c:ed:e7:8b:3d:f4:e8:df:d5:e6:3b:84:a1:d7:
00:49:72:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:29 2025 by rpki-client