Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/5qJnyr-RSbHSFthUXsr-IrluDxo.roa
File: 5qJnyr-RSbHSFthUXsr-IrluDxo.roa (raw, json)
Hash identifier: qAoGrAaV+vOYpwatb9BYpr68Fx18j7StA9mOw2tTNns=
Subject key identifier: E6:A2:67:CA:BF:91:49:B1:D2:16:D8:54:5E:CA:FE:22:B9:6E:0F:1A
Certificate issuer: /CN=db988cd5db4bc702f44a0fca59c4fe1eb11a97d3
Certificate serial: 018570950EBBDCE14F0C7B75E794A1FA3E08
Authority key identifier: DB:98:8C:D5:DB:4B:C7:02:F4:4A:0F:CA:59:C4:FE:1E:B1:1A:97:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25iM1dtLxwL0Sg_KWcT-HrEal9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/5qJnyr-RSbHSFthUXsr-IrluDxo.roa
Signing time: Mon 02 Jan 2023 03:44:54 +0000
ROA not before: Mon 02 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51088
IP address blocks: 93.190.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0e:bb:dc:e1:4f:0c:7b:75:e7:94:a1:fa:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db988cd5db4bc702f44a0fca59c4fe1eb11a97d3
Validity
Not Before: Jan 2 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6a267cabf9149b1d216d8545ecafe22b96e0f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:69:b1:ff:14:c3:b5:3b:5b:fd:1a:5f:84:
e0:d1:3e:a3:90:9b:87:c1:fd:8b:56:36:0f:9b:1a:
50:25:30:dd:5d:55:d1:92:59:dd:ef:32:bf:78:64:
56:b5:c0:1b:32:0f:f0:ff:bc:f1:b5:4b:61:c2:e2:
7e:99:54:6a:e1:c7:58:c6:c2:15:07:4e:4d:ae:8b:
8f:67:4a:0b:8d:00:97:4d:68:d5:d2:f5:90:46:4b:
49:b8:b3:9a:11:da:85:4c:d8:38:17:32:87:ff:80:
39:28:a8:a0:8d:21:f7:9c:09:e8:9f:12:09:63:95:
ee:2f:17:d9:cf:ac:c3:0a:9d:01:ee:ed:e1:59:e4:
c4:a6:ef:67:94:92:75:70:d9:5f:fa:79:cd:70:3e:
4b:08:27:26:07:32:2d:74:27:41:f0:9a:66:66:5b:
be:a0:92:67:0a:c0:ee:be:8b:04:fe:b2:6e:6f:0e:
2c:58:30:3d:7a:f4:57:1f:f4:51:a5:dd:76:12:10:
78:72:2b:b1:d7:57:c2:e8:0f:35:18:07:cb:be:5b:
57:77:e8:03:a4:bf:2a:60:60:a7:22:58:cb:7f:89:
fd:4b:09:7b:d7:15:5a:ef:73:8a:88:c0:9e:8b:0d:
46:50:13:58:0c:60:e9:65:54:57:1a:52:b4:25:df:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A2:67:CA:BF:91:49:B1:D2:16:D8:54:5E:CA:FE:22:B9:6E:0F:1A
X509v3 Authority Key Identifier:
keyid:DB:98:8C:D5:DB:4B:C7:02:F4:4A:0F:CA:59:C4:FE:1E:B1:1A:97:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25iM1dtLxwL0Sg_KWcT-HrEal9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/5qJnyr-RSbHSFthUXsr-IrluDxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/25iM1dtLxwL0Sg_KWcT-HrEal9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.124.0/24
Signature Algorithm: sha256WithRSAEncryption
59:26:ad:c4:8b:52:3e:2d:57:31:d9:16:99:41:fd:90:ec:59:
5e:41:c0:9a:cc:93:2f:00:cb:c6:92:58:e8:4f:7a:08:4a:ca:
c8:46:43:d6:f4:24:38:51:69:fd:37:c2:8d:7d:fb:7f:e6:83:
fb:f6:27:cb:8b:a7:bd:0a:5e:9b:4c:0a:13:73:d3:55:27:f8:
a2:82:48:24:cc:45:4b:e8:43:ec:fb:4d:2f:5f:ac:ac:e9:69:
18:cc:b7:1d:1c:73:37:9e:d6:75:40:96:f2:b5:7e:fd:71:f6:
d6:f8:d6:a6:44:6a:c2:d3:62:24:ec:e3:75:85:9e:4a:da:57:
87:db:40:2b:25:dd:a8:3d:46:41:b0:a2:d9:5e:4a:e3:3a:58:
03:01:0a:78:b9:a2:14:99:fb:66:d6:5e:5f:a4:7f:ef:da:22:
fa:98:44:ce:05:65:e0:bc:9f:7e:f7:06:ea:cb:c2:5e:d6:cc:
64:92:52:a7:23:59:0f:0f:a4:28:5a:12:bf:86:ee:63:f1:9d:
05:1b:8f:54:d8:0e:99:c0:f4:5d:75:95:3c:91:4b:6e:9a:6e:
37:50:76:fb:84:ec:69:43:d9:68:e1:41:fc:3f:8d:57:c2:16:
31:eb:20:42:63:4a:b2:a7:56:5b:06:f3:27:f7:9b:0d:dd:bc:
72:40:50:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:40:12 2025 by rpki-client