Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa
File: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (raw, json)
Hash identifier: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=
Subject key identifier: E5:5B:6F:65:46:67:3A:25:96:1C:EA:B8:07:3B:77:7D:1F:94:BE:D9
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B8220C22CA8702017F58FC5AC6D7E
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205370
IP address blocks: 84.38.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:82:20:c2:2c:a8:70:20:17:f5:8f:c5:ac:6d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e55b6f6546673a25961ceab8073b777d1f94bed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:a6:d0:57:2e:75:e6:e4:90:61:fa:c7:5f:
2d:a9:60:96:6a:8f:a1:6e:c6:d9:47:5e:3d:a0:88:
59:88:a0:08:49:5d:af:bc:cb:49:52:f7:65:19:da:
d5:f8:84:ea:73:77:66:2b:6f:5d:0d:bb:66:3a:45:
80:5e:18:67:3f:38:e2:32:30:44:0c:9a:0b:90:b5:
b3:93:07:dc:ca:7e:91:44:36:0b:c0:a1:af:1a:83:
8d:ae:81:af:59:5b:2f:71:4f:6d:bc:ca:8a:ed:2e:
35:fa:61:d7:d3:12:68:9a:df:35:0a:ac:78:dd:8e:
f9:c1:e4:23:d0:60:4d:2a:2d:6b:84:b5:73:54:1e:
1f:7e:51:98:59:12:b0:36:66:08:42:2d:a7:96:20:
7f:d3:31:04:2b:b9:af:a0:25:4d:58:b4:ec:fa:af:
0c:09:cf:23:e6:21:1e:f7:00:36:49:da:d4:7c:68:
15:cc:25:84:0b:6e:3c:74:40:e8:8f:ed:b0:a3:7f:
99:36:bc:21:25:e4:e2:98:88:00:75:6c:95:92:bf:
7f:06:d7:43:73:9d:e7:a6:46:b8:06:b0:a9:e0:48:
d8:26:61:be:5a:8f:33:3f:85:f8:3d:75:14:cf:35:
5a:49:9a:0b:13:67:4f:a5:4a:a3:a2:be:c7:82:74:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5B:6F:65:46:67:3A:25:96:1C:EA:B8:07:3B:77:7D:1F:94:BE:D9
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.141.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8c:72:76:72:d2:2c:c2:7f:e8:6a:59:be:b2:99:28:56:ac:
aa:c0:ad:20:87:96:f4:d6:58:f8:0c:19:c8:fa:9c:d5:e0:20:
5c:de:55:21:dc:0d:2c:2e:c3:0d:3f:8a:23:b7:42:82:69:34:
8e:a0:f0:21:3e:2c:6e:13:ff:a2:79:11:ac:c4:a9:a8:30:51:
93:62:13:16:25:cd:61:92:fd:0e:8f:41:a1:11:1f:72:b6:62:
a3:f7:9e:5b:f2:e4:b8:56:30:65:5e:74:c8:fb:9f:fa:d0:df:
e3:41:46:1c:a4:2f:f1:df:0e:e8:ea:49:a2:7e:3f:fe:b1:a3:
f1:f0:c3:b9:9a:a6:12:fc:38:25:f6:d6:e5:0a:67:c9:e7:9b:
e7:50:10:ab:bf:d8:2e:a8:eb:00:a4:7d:b0:92:8a:d7:1d:78:
c3:54:32:e7:91:ea:3b:12:ad:c8:a9:88:c7:e5:ab:d0:16:00:
34:03:01:a9:a9:78:9f:91:f8:a0:f1:59:0f:b8:bc:d6:6f:a5:
d9:c9:c7:7b:0b:77:35:26:3f:79:ce:e6:9b:35:a0:81:44:dc:
9e:27:90:d1:c4:42:35:60:e6:7b:5c:a7:c4:b7:61:eb:20:cc:
80:fa:c8:90:08:08:d1:07:64:60:0a:1c:ea:b2:15:9a:a9:29:
13:10:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:50:18 2025 by rpki-client