Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/a-v8WyOz_cTW_6JyiQkFMo171Rs.roa
File: a-v8WyOz_cTW_6JyiQkFMo171Rs.roa (raw, json)
Hash identifier: ZfZf+A/uUNFvQFc6ydp955VuoR17papsGVI97UcwyZY=
Subject key identifier: 6B:EB:FC:5B:23:B3:FD:C4:D6:FF:A2:72:89:09:05:32:8D:7B:D5:1B
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 019465143946EDC1A7820A4650CF3A665E77
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/a-v8WyOz_cTW_6JyiQkFMo171Rs.roa
Signing time: Tue 14 Jan 2025 13:50:11 +0000
ROA not before: Tue 14 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39493
IP address blocks: 5.42.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:14:39:46:ed:c1:a7:82:0a:46:50:cf:3a:66:5e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 14 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bebfc5b23b3fdc4d6ffa272890905328d7bd51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:75:6b:49:81:ae:8d:fa:97:10:1f:15:06:
65:13:90:9f:8f:4b:e6:d9:3f:41:25:b9:0f:2a:8c:
18:6c:a7:4b:2e:3e:53:70:3e:1a:15:92:09:ed:4a:
67:ca:b4:6f:28:5e:9a:85:96:e8:51:e8:d8:78:2d:
3a:59:72:56:7e:b8:b0:18:a6:05:2b:19:d9:62:f1:
78:81:2f:58:93:a1:d6:9a:2e:8f:a0:ae:ed:db:09:
38:f5:38:4e:6b:d3:4b:09:6a:6b:dd:c6:d3:6f:94:
12:35:38:34:fe:20:6a:00:66:d5:16:0a:44:ac:aa:
48:5e:46:df:be:ef:af:8f:1a:b0:f8:74:49:0b:72:
c5:ae:3d:76:a3:c1:56:c2:f5:42:d7:b5:41:70:cc:
86:65:27:4e:36:87:7e:02:6a:c7:bf:33:21:10:cb:
85:69:47:21:e8:da:e4:f1:d1:af:13:5a:01:f2:68:
8e:a8:30:44:f1:e2:66:08:e7:01:9c:88:cf:8b:46:
f0:65:b7:24:cb:b2:b8:79:43:84:af:64:d0:b1:0b:
4c:fc:92:c2:e4:ec:87:33:9e:9c:e8:bd:c3:4f:fb:
15:12:d1:e1:3b:89:b0:5c:4a:88:ba:2b:48:f4:22:
55:98:8b:f3:97:44:15:c1:95:7a:ee:04:db:27:46:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EB:FC:5B:23:B3:FD:C4:D6:FF:A2:72:89:09:05:32:8D:7B:D5:1B
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/a-v8WyOz_cTW_6JyiQkFMo171Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:07:67:cb:e4:c8:22:45:17:3a:0b:5a:94:96:76:ae:a7:b4:
d8:bb:0e:f5:b9:31:21:fa:2a:38:d7:93:86:69:f3:0a:e4:f9:
f3:5f:27:5b:b0:e0:c9:49:6e:26:e1:da:9c:6a:e1:a5:f8:11:
64:87:ab:01:89:8d:96:67:23:96:36:a7:b0:5a:df:6c:4e:08:
07:d7:77:ab:75:4a:76:e5:d5:97:b0:7a:da:3f:f7:16:3a:85:
06:d8:c1:19:eb:aa:6d:9d:50:32:ba:a1:72:4b:ea:13:c3:7a:
2f:51:82:43:04:32:6a:2b:77:6c:d4:f8:bc:e0:36:32:42:9b:
68:d0:c8:93:c9:dd:29:a2:a0:c0:6e:e8:ab:19:da:33:0c:3f:
2d:ea:73:f8:e1:7d:e8:ca:72:8c:5d:b2:6e:8e:71:61:12:9c:
cf:76:61:05:26:5c:f8:e0:1c:ae:05:b5:d4:ff:22:1e:67:7c:
fd:a4:59:9a:4d:cd:1d:0f:c2:01:7f:bb:26:f1:fa:fc:55:9b:
1d:5f:5a:fd:c4:62:29:a6:c8:ef:30:2a:66:96:1c:e0:4d:1e:
b7:53:a1:4d:ad:dd:71:27:00:36:3b:8c:bf:02:ff:e0:0a:d3:
c8:a5:e3:d5:2b:a1:47:7e:dc:2c:94:2d:c2:c2:c2:54:2f:e1:
a0:fe:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:12 2025 by rpki-client