Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/7rHJFdCoCvmFdl9GIdWZTdwfpsw.roa
File: 7rHJFdCoCvmFdl9GIdWZTdwfpsw.roa (raw, json)
Hash identifier: 9rJwPy2q/cz6TGpo43K6o6kNxEoi2ROhNtbhkj1QNvw=
Subject key identifier: EE:B1:C9:15:D0:A8:0A:F9:85:76:5F:46:21:D5:99:4D:DC:1F:A6:CC
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 019420683760631A770E670798C21148394C
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/7rHJFdCoCvmFdl9GIdWZTdwfpsw.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 5.42.90.0/24 maxlen: 24
5.42.91.0/24 maxlen: 24
5.42.93.0/24 maxlen: 24
2a13:5980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:37:60:63:1a:77:0e:67:07:98:c2:11:48:39:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeb1c915d0a80af985765f4621d5994ddc1fa6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:fa:8a:6e:76:61:ed:a7:e8:26:a1:fa:41:
53:69:af:73:f5:a4:d9:05:9c:61:b4:c8:09:a3:39:
27:c5:9e:b4:9e:86:58:92:41:c3:81:50:1b:4c:60:
bb:0e:9f:1b:c5:34:cd:55:7f:80:56:27:90:b3:ee:
86:92:b1:96:d5:d1:85:0b:b3:13:61:f0:f0:34:ac:
a8:a5:7e:cf:83:53:f1:4a:9e:fe:b4:d9:b6:95:4e:
7f:aa:eb:14:bd:f2:88:db:0b:ba:22:b9:ef:7c:9c:
73:f1:e8:b0:59:c1:21:6b:3b:3b:0e:0f:5f:c4:ce:
28:eb:31:45:6c:3a:57:7a:12:cf:2b:3e:d8:57:cc:
1d:73:ac:0b:87:f8:16:85:41:3e:cd:c0:d2:8f:e3:
c0:2c:8f:98:32:f1:43:0e:3c:84:db:dd:66:17:db:
de:e6:cb:eb:88:39:13:a3:86:60:bb:86:ad:df:f8:
8c:c1:47:9f:6c:ae:a8:5d:d7:c5:61:73:97:d3:a2:
b9:f1:5b:7e:10:81:a9:1b:b8:4e:4b:c9:38:19:ee:
d6:be:49:fb:e3:ae:fb:18:63:88:90:83:c6:37:85:
cd:60:fa:01:7f:f4:6f:d7:7d:af:e3:a2:6a:a5:f8:
cf:45:59:b3:ef:2e:7d:29:b3:c4:e4:f5:f9:be:f5:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B1:C9:15:D0:A8:0A:F9:85:76:5F:46:21:D5:99:4D:DC:1F:A6:CC
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/7rHJFdCoCvmFdl9GIdWZTdwfpsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.90.0/23
5.42.93.0/24
IPv6:
2a13:5980::/29
Signature Algorithm: sha256WithRSAEncryption
b7:00:96:d5:24:dc:09:60:d1:05:c6:46:13:38:ac:d6:17:13:
27:12:f1:f8:b2:71:c6:54:81:1f:5d:99:3e:61:0a:bc:9c:7e:
f5:bd:26:f8:a4:2d:eb:99:58:c3:d2:84:01:c1:f5:ac:95:22:
d0:6c:61:94:78:07:22:0e:62:ee:48:19:3d:d9:31:6e:a7:8b:
d9:d1:18:85:26:b3:5a:8d:18:3b:f2:87:47:54:c0:4b:46:3c:
9c:d9:a8:fc:12:ac:8c:ea:46:b0:3f:c9:ae:fa:10:05:d8:08:
d4:dd:36:3a:b9:47:ab:0e:7c:e5:ae:a7:a8:d5:96:a8:60:a3:
fc:c7:11:30:3c:13:ec:2d:69:32:6e:14:a0:ac:78:80:f2:2b:
bb:69:75:10:ef:3f:5f:ed:dc:3b:36:d0:f4:4b:ce:02:da:8a:
df:99:3e:fe:ac:ef:cf:e0:44:8a:4a:56:22:58:31:64:65:b4:
fc:85:63:d5:64:6f:28:fa:c0:64:f1:4b:1b:37:16:0c:ec:6c:
a8:e6:88:88:2a:b7:0b:cb:85:40:16:ea:6f:c2:1f:98:39:f9:
17:ba:f0:d3:37:1f:6b:2e:3a:8c:2c:b1:9c:87:36:cc:e9:96:
ce:30:4c:9e:0a:2a:bb:a5:65:38:09:8d:72:69:9b:29:7a:65:
2b:e6:b8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:55 2025 by rpki-client