Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/5iC1C_l2xnIVtV_ynL6awoKgYMQ.roa
File: 5iC1C_l2xnIVtV_ynL6awoKgYMQ.roa (raw, json)
Hash identifier: c0Zm1e9RjgR5PBfasK6Q1TzGKpfYhKyszQz9aW+gUGA=
Subject key identifier: E6:20:B5:0B:F9:76:C6:72:15:B5:5F:F2:9C:BE:9A:C2:82:A0:60:C4
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 019425FDA7EF91717574A02666D2C38FC871
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/5iC1C_l2xnIVtV_ynL6awoKgYMQ.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48813
IP address blocks: 83.143.16.0/21 maxlen: 21
195.140.140.0/22 maxlen: 22
195.242.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a7:ef:91:71:75:74:a0:26:66:d2:c3:8f:c8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e620b50bf976c67215b55ff29cbe9ac282a060c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:3f:cd:ca:5f:fc:fd:26:4d:dd:db:34:73:
1b:7e:ae:1e:2b:f8:4d:bc:23:88:d4:d2:68:79:7f:
16:2f:f8:da:9f:50:df:80:d3:0b:50:9a:7b:74:84:
e7:8b:88:b1:b0:06:03:e9:42:6b:58:d8:17:43:e5:
3d:ef:4f:62:80:56:70:fd:ee:7b:3e:eb:41:09:6e:
0d:f6:f2:5a:08:a0:41:fb:51:12:f3:8c:df:44:d8:
83:66:01:b5:17:a7:47:31:17:78:1d:54:5e:c2:74:
18:80:f7:08:3a:be:ab:8f:4c:b8:b0:53:84:e8:b5:
f9:60:83:99:6e:67:b0:9f:3d:a1:6f:62:39:dc:20:
8e:dc:c8:32:e8:81:a5:82:77:f8:ca:52:bb:06:0c:
75:f3:51:08:19:51:52:ec:90:14:f9:7a:5f:3e:a8:
d4:47:e5:36:b7:30:c8:ba:59:7f:63:59:1c:6c:24:
30:6d:2c:94:1a:50:eb:12:57:c0:ca:b6:f0:68:12:
78:87:1f:ff:a3:60:e9:67:c2:a0:39:68:16:21:62:
ac:67:79:6f:66:19:35:96:4d:c2:33:f9:70:6b:89:
38:23:22:d5:c0:fa:9b:50:b8:6e:82:5f:7f:4e:bb:
91:64:fa:98:34:b2:ad:47:2b:21:71:ba:9f:3d:d3:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:20:B5:0B:F9:76:C6:72:15:B5:5F:F2:9C:BE:9A:C2:82:A0:60:C4
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/5iC1C_l2xnIVtV_ynL6awoKgYMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.16.0/21
195.140.140.0/22
195.242.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e8:da:16:54:f1:b6:f1:11:50:c9:3b:10:fc:df:84:a0:3b:
77:4a:13:d1:4f:59:a9:40:8b:e4:4a:06:bd:62:f6:ef:ba:27:
76:10:ec:c5:79:b0:b0:24:ea:ec:45:be:8b:5c:2d:31:a5:28:
fe:9e:df:0f:39:9e:bc:b0:d5:50:57:a2:11:fb:d2:72:fb:51:
9e:45:b9:af:bf:f6:2e:86:59:1c:19:ec:11:3f:67:f4:12:31:
35:b5:32:24:e3:9e:02:6f:cc:3a:32:07:2f:cb:d5:9d:d1:d6:
04:1a:aa:9e:97:40:b5:9c:4c:5c:75:c6:fb:c8:bb:e8:7c:10:
88:08:a6:63:81:b0:4c:b8:ca:09:2c:36:53:4c:22:37:ad:48:
7b:13:b8:7e:8e:97:72:89:6c:55:79:d2:78:ed:68:98:b7:85:
87:94:0c:ea:f0:e1:79:76:af:52:c6:e7:07:f9:b8:45:86:d5:
39:a4:02:7b:c0:c0:27:c7:5b:99:da:51:9d:0e:9a:4e:c3:81:
cb:e3:66:5f:ae:2d:77:3e:d7:11:7b:c5:17:59:82:47:9c:99:
78:c2:e2:bf:e3:59:a4:8e:35:23:97:75:4b:20:eb:ee:cd:c6:
f4:d2:75:30:04:d6:38:9f:b2:d7:d6:c5:d7:21:75:3e:21:92:
f7:33:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:11:36 2025 by rpki-client