Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/5NFcVQOlS2SfRA9_dseHho-9-mc.roa
File: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (raw, json)
Hash identifier: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=
Subject key identifier: E4:D1:5C:55:03:A5:4B:64:9F:44:0F:7F:76:C7:87:86:8F:BD:FA:67
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 01942220180431D5F679394197A7A9D82D53
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/5NFcVQOlS2SfRA9_dseHho-9-mc.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139341
IP address blocks: 86.51.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:18:04:31:d5:f6:79:39:41:97:a7:a9:d8:2d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4d15c5503a54b649f440f7f76c787868fbdfa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:00:fa:2c:5b:fa:d8:19:49:2c:52:c2:dd:
f6:be:08:a0:bf:ee:56:a3:30:b0:dc:75:91:ed:e8:
9e:79:46:8a:ff:45:16:f6:a2:90:d0:ef:63:62:d1:
81:46:33:61:2e:7b:37:2d:03:b6:fc:e2:f3:da:8c:
a7:99:61:1c:c9:d0:d9:fb:80:de:bd:c1:47:a1:65:
67:d1:bb:68:8f:ae:f7:dd:31:94:d3:82:f0:1f:01:
d1:48:12:98:86:50:40:62:39:c0:55:42:a6:c4:4d:
95:3a:e3:52:49:4e:34:6b:af:2e:59:03:80:eb:4e:
67:40:20:2c:b5:c6:c1:7d:1e:d6:cd:2e:22:ef:4c:
09:c3:4f:ac:d6:ee:67:6f:87:a8:f7:55:4f:24:d4:
20:d6:a7:58:a9:54:cb:ad:40:e3:40:a9:01:d4:c3:
66:f6:5d:1d:4b:07:30:d4:f7:33:c2:d6:96:34:43:
dd:aa:ee:f4:84:ad:d5:f3:b8:a9:45:85:be:b6:b5:
8a:08:e3:ef:cb:12:90:6c:2e:f8:5a:c1:11:81:73:
5b:56:72:cb:53:40:6e:0e:71:5e:55:b2:f0:8d:6a:
dc:01:69:ce:cd:f2:0c:1c:66:d2:04:91:0d:f7:34:
40:e5:86:0c:8d:b8:8e:ff:7c:ed:25:5c:ac:c2:de:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D1:5C:55:03:A5:4B:64:9F:44:0F:7F:76:C7:87:86:8F:BD:FA:67
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/5NFcVQOlS2SfRA9_dseHho-9-mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.51.92.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7b:64:37:4b:d6:83:01:ed:90:37:51:55:4b:5d:a4:07:3d:
07:9e:7f:6d:2f:b0:33:d0:47:48:22:a9:fc:32:20:1b:b3:38:
b9:69:d7:e1:35:98:27:7f:f8:1a:e3:9f:f2:7f:fa:e6:5c:52:
55:54:eb:17:97:46:e6:c3:05:08:e5:f1:a5:72:60:d4:f6:d0:
78:21:7a:e7:0f:e0:80:16:68:e2:5f:81:8a:2f:ef:61:60:f4:
a5:6a:82:d2:56:49:91:cb:00:29:10:4c:52:c0:7a:bf:ae:9a:
2a:cd:61:5e:72:15:36:5b:21:c9:9f:05:5c:04:85:5b:5f:ad:
c8:72:85:b6:e3:1a:55:a6:54:6e:91:bb:5a:5d:1c:dc:c2:b6:
bc:a7:87:38:8a:05:9c:0a:3a:60:83:34:d0:3c:e6:86:fd:54:
cc:4c:fc:c6:43:d7:df:d7:50:3c:b5:18:a6:bc:4e:d1:5f:4c:
58:0a:11:80:04:86:9e:8c:e5:98:bc:d9:c9:31:3c:68:d0:fe:
90:f5:e2:70:55:16:7b:cf:12:ef:ef:00:88:b0:1a:ec:47:ff:
f0:7f:15:a9:00:da:d9:53:36:50:c8:fa:5f:b8:43:ad:03:38:
ba:a5:79:6d:cc:7f:fa:30:ec:2b:df:87:54:9e:6f:eb:72:4e:
99:0c:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:09 2025 by rpki-client