Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/5SBTr2SOJGcD8QUU_e-94v0A084.roa
File: 5SBTr2SOJGcD8QUU_e-94v0A084.roa (raw, json)
Hash identifier: 2R4VjlXwVXmROr25b2eO9bqn6Cadk/ybWW4Tz9GfK8I=
Subject key identifier: E5:20:53:AF:64:8E:24:67:03:F1:05:14:FD:EF:BD:E2:FD:00:D3:CE
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 0193C0DF09A040818E22E60FDF6B1F32C9CF
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/5SBTr2SOJGcD8QUU_e-94v0A084.roa
Signing time: Fri 13 Dec 2024 16:34:22 +0000
ROA not before: Fri 13 Dec 2024 16:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214623
IP address blocks: 199.244.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:df:09:a0:40:81:8e:22:e6:0f:df:6b:1f:32:c9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Dec 13 16:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e52053af648e246703f10514fdefbde2fd00d3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e6:b5:a1:74:88:65:4f:11:e5:a4:7c:2d:71:
fb:b1:fc:d8:ab:43:ac:83:71:9b:d2:69:94:68:77:
e5:33:af:89:d1:c5:98:0f:00:d4:b2:b6:4a:30:a2:
7a:73:4a:35:43:86:44:4f:3f:49:e8:2e:95:c7:a5:
7a:a7:14:e0:80:f1:b2:77:dd:22:91:de:a4:a5:dd:
a7:6c:d7:53:56:07:ab:49:3c:39:d7:db:6d:59:21:
65:07:bf:79:f3:9f:50:0d:ad:42:6c:88:5c:bc:37:
6c:48:83:42:8c:59:e7:87:40:9a:4a:f3:52:c3:50:
4d:5e:cd:5e:2d:bf:19:51:3c:2f:9c:69:fa:1c:cf:
8a:d9:a0:34:53:67:ac:0b:34:86:75:4a:c0:13:eb:
65:08:a4:42:2c:25:c9:17:94:6e:e7:04:18:59:94:
6b:d5:0c:ab:67:41:ed:b3:5c:2d:51:b2:44:a1:13:
e5:da:2a:06:ee:27:71:9b:49:16:b0:f2:fa:ba:54:
83:4e:53:d1:5d:f9:a9:13:2e:f8:ac:20:8d:82:70:
d0:8e:f1:67:6c:32:93:42:eb:e2:72:91:22:91:49:
87:b2:10:c9:60:f9:b5:28:ac:d0:8a:d2:ca:d7:29:
90:49:e5:0d:88:fe:92:c4:8d:06:fa:0a:59:62:e9:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:53:AF:64:8E:24:67:03:F1:05:14:FD:EF:BD:E2:FD:00:D3:CE
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/5SBTr2SOJGcD8QUU_e-94v0A084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.244.103.0/24
Signature Algorithm: sha256WithRSAEncryption
56:86:87:49:4c:76:fe:8e:9f:88:be:06:7a:00:b0:c4:14:8d:
19:4d:df:67:f9:d1:46:0f:62:6f:7c:1a:20:1c:0b:92:81:f0:
0b:b4:89:4e:ad:63:2b:24:f6:33:b3:1b:98:0a:0c:e2:78:22:
c5:07:4c:86:eb:d3:c9:66:0d:6c:9a:bd:be:15:9f:14:af:4b:
f5:ad:6f:c7:39:d3:85:ec:55:26:19:75:02:b0:0a:d1:5e:59:
eb:c4:86:d9:60:df:3c:83:33:5c:bd:55:d0:b8:72:72:b4:3c:
ee:ab:7c:05:26:a4:56:c3:38:af:8e:2d:34:41:44:96:3b:b9:
2c:9c:93:9e:02:08:ce:45:ec:67:43:58:10:ea:86:98:8f:74:
dd:d2:f5:ed:ad:5d:a4:a5:6a:e2:9a:bb:49:d6:ed:af:e6:0a:
ae:f7:e6:05:dc:f9:6a:53:eb:eb:30:5a:c5:15:b0:89:f6:77:
3b:b0:65:9b:bd:c5:e9:1e:ef:19:fe:a2:39:58:8e:b5:53:6b:
a0:b1:f4:5c:7f:12:9b:05:bc:22:28:9f:94:7a:d8:43:a7:8d:
a4:cc:72:46:98:36:bd:e4:83:1a:a5:99:5c:dc:07:43:09:30:
ba:20:a5:ba:5d:93:8f:6f:d7:3c:04:c9:a0:89:af:88:f0:a7:
0f:c4:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:18:20 2025 by rpki-client