Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/FC2wmfkTdI_nxV7MY-Fh9aBzh1g.roa
File: FC2wmfkTdI_nxV7MY-Fh9aBzh1g.roa (raw, json)
Hash identifier: yCweTSReEHWZRrVaj7cVVocmPSYFCOA2BSa4SyQXv+o=
Subject key identifier: 14:2D:B0:99:F9:13:74:8F:E7:C5:5E:CC:63:E1:61:F5:A0:73:87:58
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0194206837B4D89060CF73C70472925C4F3F
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/FC2wmfkTdI_nxV7MY-Fh9aBzh1g.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215113
IP address blocks: 5.42.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:37:b4:d8:90:60:cf:73:c7:04:72:92:5c:4f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=142db099f913748fe7c55ecc63e161f5a0738758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:39:cf:73:3f:f7:f2:e4:2d:18:48:a2:54:
62:13:16:d6:53:49:c3:8a:16:53:57:38:71:74:f9:
f1:2f:6f:1b:3e:d6:d4:5a:d1:49:df:17:af:4c:2f:
85:a5:d4:86:42:7d:43:58:98:fc:78:82:00:50:2e:
2c:a0:31:dd:5f:53:e1:fb:2a:0d:94:2d:7c:c6:b0:
04:c3:8b:20:bb:e5:6a:48:42:cf:d8:8e:fb:9c:bb:
21:d4:c2:98:9e:1e:fe:34:03:29:62:3e:c5:3d:5e:
c4:0a:25:20:20:ec:a4:21:f8:5f:b1:fe:90:9d:d4:
01:61:c1:bd:e4:e9:53:a5:d8:f7:d1:9d:07:0e:2f:
3e:af:ee:41:ee:3f:5f:fe:76:3b:9e:01:dd:2c:59:
3b:8b:f9:c3:3f:17:c2:55:02:e7:67:8e:ee:11:a3:
83:9d:d3:65:45:55:b0:a9:ae:7d:f9:2c:fd:ea:bc:
e1:21:a8:01:cb:ca:bd:e6:4e:16:0e:56:de:43:38:
0c:4d:c1:e5:78:0b:d8:7a:eb:2e:43:f5:91:f4:b7:
b7:02:40:92:3e:d9:a7:16:e2:12:c8:19:8f:27:2b:
6a:72:5b:be:43:88:bd:6c:9e:3c:27:59:7b:b4:84:
b7:15:26:87:88:27:f8:ca:76:c1:bf:15:fd:95:32:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2D:B0:99:F9:13:74:8F:E7:C5:5E:CC:63:E1:61:F5:A0:73:87:58
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/FC2wmfkTdI_nxV7MY-Fh9aBzh1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:6c:b5:05:4d:62:d9:83:a6:fd:e9:83:d4:50:44:3d:5a:35:
71:b6:ae:c2:46:18:1b:50:a6:64:41:e0:96:23:51:e0:ca:b1:
1b:fb:79:97:cd:44:53:65:9d:43:a1:8a:7e:02:7f:11:35:98:
ba:7a:37:9a:2a:60:00:62:5a:2c:1f:72:b6:bc:74:6e:f8:76:
43:dc:93:21:f5:ab:21:3b:58:1a:0c:ed:aa:c8:94:7c:4e:3e:
48:4f:3b:8a:91:f7:e4:39:85:55:6b:be:c4:03:23:49:bd:84:
5f:74:eb:1c:24:39:32:45:09:d0:00:62:7a:7e:5b:f8:f7:a4:
28:be:8f:1d:be:7d:f7:87:c6:17:46:12:e3:49:1b:d0:7d:91:
1d:09:c1:4a:de:d1:c2:9c:0f:d9:d5:de:ae:da:65:70:1a:cf:
66:c7:90:10:84:2d:a3:4e:56:4b:ce:09:4c:19:a6:2f:96:cd:
27:cf:cc:22:cf:81:ee:16:37:73:23:2a:4e:d8:68:f6:40:3a:
ca:b4:48:f3:31:08:b5:60:41:e2:34:cc:f5:37:10:2e:9b:6f:
5e:b0:cf:9b:a4:be:5a:68:08:69:fa:04:2a:b7:3a:6d:bf:e9:
0b:8c:2e:7b:7b:9a:c6:f0:b2:d0:89:3d:4e:f4:62:f2:47:0a:
66:05:50:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:15 2025 by rpki-client