Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/5HwDaNuaFnUsAsTNr92C8q4CLeM.roa
File: 5HwDaNuaFnUsAsTNr92C8q4CLeM.roa (raw, json)
Hash identifier: p81QRSjFV2ngF2QIWnWNjc4FOewx93gE5U1L4Lo7NAo=
Subject key identifier: E4:7C:03:68:DB:9A:16:75:2C:02:C4:CD:AF:DD:82:F2:AE:02:2D:E3
Certificate issuer: /CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Certificate serial: 0192C34B7D22D862C3D8F7FA8FCF123AA85D
Authority key identifier: 78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/5HwDaNuaFnUsAsTNr92C8q4CLeM.roa
Signing time: Fri 25 Oct 2024 10:49:17 +0000
ROA not before: Fri 25 Oct 2024 10:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0d:cdc5::/32 maxlen: 32
2a0e:eec3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:4b:7d:22:d8:62:c3:d8:f7:fa:8f:cf:12:3a:a8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Validity
Not Before: Oct 25 10:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e47c0368db9a16752c02c4cdafdd82f2ae022de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:83:3c:e8:24:bf:12:94:c1:57:6d:dd:b6:
14:61:a1:97:c4:7e:67:2f:c3:aa:07:2b:f5:95:a8:
ac:dc:8c:3f:25:83:a3:c0:35:91:fa:fd:51:3f:f2:
03:c1:98:c8:da:26:75:81:ea:07:50:5e:52:ac:5f:
8d:50:6b:41:72:99:4e:a1:5b:79:5e:21:a4:ac:0c:
13:91:de:bf:28:ec:9b:3a:2a:95:a8:a3:3b:ee:83:
73:a2:2e:ae:07:c2:c6:08:9d:42:53:64:b5:b0:76:
3a:23:1a:b8:00:c5:c1:be:16:d4:88:4a:e5:7c:bc:
6c:a6:4f:ac:4f:7e:21:68:d1:5e:01:22:8e:60:6d:
d6:fd:61:b2:42:7b:ab:29:a7:92:e3:e5:bb:2f:db:
0b:d0:54:86:0c:08:c1:90:bc:e1:0f:23:2d:82:3a:
8a:e0:bb:5d:ba:63:af:d0:27:5a:a6:d7:c7:f2:37:
c7:54:50:c1:60:10:e2:61:34:2a:e3:5d:07:6c:8e:
0a:ba:77:0d:bb:be:88:cf:17:ba:2c:df:ea:42:e0:
77:2c:29:0e:2b:c7:63:30:4b:16:af:53:8d:6e:24:
a6:1a:40:6c:22:da:d5:3a:af:eb:4f:79:05:b6:bb:
70:de:b8:5d:d5:c8:cd:45:35:d2:8e:33:67:89:b4:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7C:03:68:DB:9A:16:75:2C:02:C4:CD:AF:DD:82:F2:AE:02:2D:E3
X509v3 Authority Key Identifier:
keyid:78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/5HwDaNuaFnUsAsTNr92C8q4CLeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:cdc5::/32
2a0e:eec3::/32
Signature Algorithm: sha256WithRSAEncryption
58:29:d0:f5:b7:fd:12:0f:33:4f:25:70:44:b8:c5:f3:aa:ff:
9a:9a:1f:72:69:09:37:24:85:d4:ae:a2:fb:c1:19:94:ed:78:
5a:2a:6e:87:b3:1e:6c:ec:6b:2a:a9:5c:59:31:87:94:48:55:
3b:2d:c5:01:37:55:36:4f:15:25:b3:00:0c:7f:8c:bf:b1:e7:
ac:38:5e:88:d0:f6:ff:fc:8d:f7:37:e4:69:6e:18:b4:a7:89:
60:b9:f0:95:8b:d2:2c:0c:2f:5a:16:7b:2c:31:23:d8:e4:c0:
a3:52:33:6f:93:fa:3b:d3:e7:1a:b2:3d:6b:8c:23:e6:ff:b7:
ec:9c:85:dd:3a:1e:c6:b6:1e:05:02:a1:e9:9a:a8:6d:1c:6d:
b0:58:6b:37:b9:9d:03:60:49:37:6d:15:27:c6:84:8a:13:b5:
0b:d5:cd:c1:f3:f7:47:6a:c0:98:b4:e5:6e:42:19:73:7e:4e:
56:95:2e:d6:13:f1:c4:6f:eb:ed:9f:0e:28:b4:d0:1c:00:6e:
9b:d9:f9:38:48:b9:f4:13:4e:46:4e:a9:66:83:52:27:b3:70:
2d:dc:dd:f4:49:c0:d1:72:c0:78:5d:8c:51:28:5a:3e:8b:b4:
45:24:85:4d:58:51:2f:cc:45:8f:2a:aa:d9:1c:64:85:2a:26:
0e:0c:b0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:42 2025 by rpki-client