Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/EnxQ1LuAbAuXkerOe5KE9uE3wCQ.roa
File: EnxQ1LuAbAuXkerOe5KE9uE3wCQ.roa (raw, json)
Hash identifier: tzccX5CHoAGnBBko9N4+ZNSNhLwC1hHWzSOJkKpQ5f0=
Subject key identifier: 12:7C:50:D4:BB:80:6C:0B:97:91:EA:CE:7B:92:84:F6:E1:37:C0:24
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 018CCA29DC6BAC28CC899098D48FE67AA0FB
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/EnxQ1LuAbAuXkerOe5KE9uE3wCQ.roa
Signing time: Tue 02 Jan 2024 12:33:10 +0000
ROA not before: Tue 02 Jan 2024 12:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 5.42.80.0/21 maxlen: 21
5.42.94.0/23 maxlen: 23
5.42.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:dc:6b:ac:28:cc:89:90:98:d4:8f:e6:7a:a0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 2 12:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=127c50d4bb806c0b9791eace7b9284f6e137c024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:98:6e:fe:4f:99:a5:46:d8:3d:e6:82:d2:
03:43:c4:01:60:ee:a4:1d:f7:5b:0c:fa:01:de:57:
69:57:58:ab:89:eb:04:20:73:2a:b8:a0:79:00:6f:
a7:cb:83:d0:84:46:6b:20:ee:1a:61:07:5f:34:8d:
a9:a6:39:ba:f8:3a:e4:9a:53:ef:b1:20:0f:5a:45:
64:c9:77:2c:ee:50:83:29:50:ad:f6:07:46:b5:40:
9a:ac:61:b1:1c:b3:8f:c7:ed:13:a0:ee:d9:54:f6:
72:99:a8:e8:d9:b9:ee:59:93:66:6a:e2:da:2b:ea:
ae:31:33:d4:92:85:e0:96:38:3c:8b:fa:e7:38:ac:
23:53:61:ce:1e:6e:e3:a8:34:e0:ea:a5:eb:39:e6:
b2:18:0a:7c:25:07:ab:dc:a8:1e:8d:31:82:19:fe:
42:7a:89:44:07:0f:d8:d7:37:87:ad:89:aa:87:ab:
b8:bf:9d:c9:5b:44:53:f0:80:3e:0c:af:99:28:30:
64:4a:6e:b4:56:76:98:79:d9:26:6b:3f:89:28:5f:
ff:6f:8b:f5:00:5e:47:a6:4c:e8:d5:89:8a:39:df:
b6:55:74:5a:07:b8:87:37:00:66:43:26:7c:9d:f7:
82:f0:ce:6d:21:88:f0:96:f4:20:71:3e:d4:c1:9b:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7C:50:D4:BB:80:6C:0B:97:91:EA:CE:7B:92:84:F6:E1:37:C0:24
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/EnxQ1LuAbAuXkerOe5KE9uE3wCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.72.0-5.42.87.255
5.42.94.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:05:e8:0c:c9:ca:59:85:99:06:f6:75:d0:11:e2:e4:81:3f:
aa:7e:5f:99:0c:82:df:02:a9:ef:4f:ff:3f:ba:96:7d:90:a4:
14:20:f6:fb:e3:7d:98:e4:7d:1f:e5:1d:f4:9e:34:b4:6d:6f:
e5:f2:47:f0:7e:94:8c:1b:88:f8:fd:be:50:35:b0:2b:5d:52:
af:ca:1d:71:27:8f:56:0e:61:38:81:2f:d2:a1:3e:54:19:b3:
0b:31:41:9a:f1:12:38:1c:31:67:cb:5e:74:1b:eb:c9:9e:96:
a2:21:b5:77:be:62:11:b9:0b:c6:62:e5:e8:fc:3f:eb:4f:d7:
b7:3a:f2:27:54:8c:ac:ff:22:1f:5f:35:1c:37:eb:2d:00:94:
db:7f:f8:a6:8a:51:de:11:b1:e1:72:39:f9:6c:09:6f:b2:7a:
af:70:fb:f9:96:47:b5:db:5a:c6:b9:dc:9d:7c:1a:6d:ee:d2:
4e:31:dc:18:99:fe:65:66:c5:b8:0d:bc:91:cb:53:e4:86:ef:
36:f8:c9:f8:00:04:34:8d:79:7e:90:d6:79:ec:ec:5d:01:89:
69:25:81:84:8a:96:fc:bb:73:2c:fa:c1:94:1c:c5:5b:0e:15:
4c:28:f2:2e:be:5f:c2:ea:dd:35:a7:be:e6:2e:ac:1e:c6:2e:
22:cc:26:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:16 2025 by rpki-client