Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/q-MWJJEmJ7BJcsrNH6LRtuebLig.roa
File: q-MWJJEmJ7BJcsrNH6LRtuebLig.roa (raw, json)
Hash identifier: fm4aG84ILaWHcSg7fVmcHPS9K45MXsm4Emm/Mb2IbfQ=
Subject key identifier: AB:E3:16:24:91:26:27:B0:49:72:CA:CD:1F:A2:D1:B6:E7:9B:2E:28
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 018CCA29DCA085D3BC09E92F55241B036442
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/q-MWJJEmJ7BJcsrNH6LRtuebLig.roa
Signing time: Tue 02 Jan 2024 12:33:10 +0000
ROA not before: Tue 02 Jan 2024 12:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 5.42.90.0/24 maxlen: 24
5.42.91.0/24 maxlen: 24
5.42.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:dc:a0:85:d3:bc:09:e9:2f:55:24:1b:03:64:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 2 12:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abe31624912627b04972cacd1fa2d1b6e79b2e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:56:87:52:ff:54:f2:f0:7b:e7:f7:aa:9d:
51:20:38:30:ea:e2:49:a4:11:c8:9f:c1:6c:7c:93:
d8:f8:97:86:02:52:82:b6:f1:f1:35:a4:8d:a2:21:
b7:56:02:73:70:98:0e:83:6e:03:6e:ea:9f:14:f4:
c7:bc:e7:21:a2:ca:14:07:76:47:54:0b:0c:f8:41:
56:31:92:76:33:fd:f7:a6:e8:b7:20:53:f0:4b:1a:
1d:56:23:0f:ec:63:97:bf:e3:f4:ef:61:f8:55:e9:
41:16:a5:59:5b:dc:a5:5f:6a:78:b9:d4:80:0c:25:
8d:49:a8:ba:3e:cb:6e:ce:36:20:07:32:36:0b:51:
d6:3b:e3:bc:31:45:01:c9:21:7a:6f:9f:9e:cd:65:
ab:3d:50:58:67:6e:32:61:33:ac:fa:75:32:c5:3b:
ad:b0:98:66:2f:9d:ba:28:f7:f6:49:4d:5b:78:d7:
81:de:c6:d2:fe:25:a5:e9:b7:0a:35:63:42:d8:58:
e0:0a:55:f7:7a:a8:1f:2f:5d:43:72:20:44:1b:b6:
36:05:d6:86:d8:aa:d2:53:32:1b:fa:12:42:8c:55:
2d:17:24:43:83:24:aa:46:66:be:5f:e3:84:70:33:
c6:89:30:bb:ed:19:2c:03:1b:7d:41:d2:2f:33:50:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E3:16:24:91:26:27:B0:49:72:CA:CD:1F:A2:D1:B6:E7:9B:2E:28
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/q-MWJJEmJ7BJcsrNH6LRtuebLig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.90.0/23
5.42.93.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5f:99:0f:e6:15:34:72:b6:55:56:de:f2:d0:74:56:42:d8:
43:98:4b:a8:fc:df:0f:a9:1d:d8:aa:c0:9b:2a:f9:c9:ad:99:
a5:e8:52:f4:29:db:2d:a7:2e:17:71:86:27:9f:d4:58:27:c3:
a0:09:d1:57:96:e9:b6:d5:72:3a:92:52:57:60:7d:f3:7f:4a:
4f:1d:73:35:85:fd:39:e9:36:8c:6e:84:c6:99:7c:36:89:90:
18:64:aa:45:6f:59:dc:c9:bc:82:c5:75:16:cf:ef:fb:e9:ab:
cf:0e:f8:3a:cc:9e:9d:96:d8:81:7d:b8:b6:34:ef:ac:98:0c:
81:32:71:e6:f0:bd:60:d3:fc:49:3d:3f:c7:8f:03:d4:e4:99:
7d:d1:55:cf:a4:1a:63:0f:9d:79:59:d3:fa:00:0c:48:66:91:
e0:89:3d:25:f7:f9:49:33:ad:17:cb:ce:e7:ff:71:79:bd:13:
97:2d:1b:73:59:e4:94:d6:c8:fc:b0:69:f3:e4:52:16:c4:04:
de:55:ec:89:61:f6:d8:e8:40:25:91:c4:d2:a5:93:b5:cf:1f:
04:20:58:9d:55:bf:6c:71:a2:b8:7f:21:65:b1:f8:ef:5b:5b:
f8:bc:8f:05:fd:48:33:0b:80:d1:b7:ab:2b:dd:09:d4:69:95:
b7:46:25:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:22 2025 by rpki-client