Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/54vV0mVBMwv6D8gfJ8Xvkvv_J54.roa
File: 54vV0mVBMwv6D8gfJ8Xvkvv_J54.roa (raw, json)
Hash identifier: LdT2pkgO1B72aA56kmjLSxEb4CTleEYXlMvyy1ZBKmk=
Subject key identifier: E7:8B:D5:D2:65:41:33:0B:FA:0F:C8:1F:27:C5:EF:92:FB:FF:27:9E
Certificate issuer: /CN=98bf80eef0c592d5bfb7862623c3bc670af65909
Certificate serial: 01856CEF450F7FC749D2FE72B93D7E194507
Authority key identifier: 98:BF:80:EE:F0:C5:92:D5:BF:B7:86:26:23:C3:BC:67:0A:F6:59:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mL-A7vDFktW_t4YmI8O8Zwr2WQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/54vV0mVBMwv6D8gfJ8Xvkvv_J54.roa
Signing time: Sun 01 Jan 2023 10:44:58 +0000
ROA not before: Sun 01 Jan 2023 10:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41167
IP address blocks: 84.38.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:45:0f:7f:c7:49:d2:fe:72:b9:3d:7e:19:45:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98bf80eef0c592d5bfb7862623c3bc670af65909
Validity
Not Before: Jan 1 10:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e78bd5d26541330bfa0fc81f27c5ef92fbff279e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:40:06:82:15:c6:5c:71:17:8f:a3:2f:10:60:
8a:a4:c9:a9:c2:97:f8:bc:58:99:41:c6:d0:06:43:
2a:5a:f3:a3:7e:e4:d9:db:c4:70:06:e6:e4:0c:ad:
af:ae:f8:d0:bb:bf:b0:45:1e:d0:c3:7d:11:f2:67:
26:9d:b3:d3:77:60:68:62:b6:d5:69:10:36:19:ae:
6f:f0:05:12:cc:93:a1:a8:e8:9e:f0:81:99:55:7b:
8b:b2:ec:22:3b:c7:41:69:e6:93:dc:45:ec:84:df:
ce:4a:81:cb:21:4c:d4:fc:27:78:0e:8d:28:df:68:
cd:b9:12:71:0b:f2:b0:51:3a:7e:c0:40:09:f6:8c:
c7:87:b2:ec:a8:be:10:46:61:f0:22:94:ad:85:c2:
3e:eb:64:9e:23:58:96:8a:b2:6d:94:43:07:17:3f:
b0:75:be:ef:fc:f5:2f:53:74:b7:d4:a8:4a:65:df:
50:28:71:04:34:51:80:ba:2d:b3:7b:06:7c:8d:05:
2d:5e:24:b9:ed:ac:51:10:7a:da:5d:81:50:05:8a:
80:a7:8c:92:dd:98:33:d0:a9:29:eb:18:47:e0:29:
09:d1:b6:e2:eb:63:67:ed:56:51:a6:1c:be:16:a0:
53:d9:34:1f:94:4f:07:e5:13:ce:63:4d:32:aa:1d:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:D5:D2:65:41:33:0B:FA:0F:C8:1F:27:C5:EF:92:FB:FF:27:9E
X509v3 Authority Key Identifier:
keyid:98:BF:80:EE:F0:C5:92:D5:BF:B7:86:26:23:C3:BC:67:0A:F6:59:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL-A7vDFktW_t4YmI8O8Zwr2WQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/54vV0mVBMwv6D8gfJ8Xvkvv_J54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/mL-A7vDFktW_t4YmI8O8Zwr2WQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.192.0/20
Signature Algorithm: sha256WithRSAEncryption
97:90:ad:53:ce:e2:87:9c:46:0e:c8:65:1b:07:fa:67:bc:02:
20:97:b2:6d:96:c6:f2:07:29:40:17:cb:e8:b5:d1:a2:65:59:
a0:e3:29:b8:3c:78:a1:9f:c9:b6:d7:01:da:14:78:3a:3a:f0:
32:b0:23:49:f8:4e:83:ec:e5:88:e9:b2:20:6f:94:90:f0:27:
c1:d1:27:a2:b5:fc:20:ec:73:d1:ff:fc:1b:4e:24:13:dd:cd:
41:ea:dd:c3:27:cf:f2:8f:c9:e3:64:6d:93:52:b2:e1:7e:1d:
a0:32:9d:76:a7:5c:91:e4:f1:da:b4:af:48:59:ec:32:1d:67:
2f:5f:d7:8a:69:c3:a1:21:8b:58:c8:05:ff:76:9e:37:3c:df:
6e:d9:0d:75:9c:6a:b6:6f:3d:76:f9:7a:c7:90:19:15:8c:4c:
53:1a:4e:70:21:8c:dd:f9:05:fa:d1:3f:44:94:b0:ec:fa:a8:
30:95:ff:a3:78:c5:93:f9:d3:92:d9:e7:23:8a:09:be:78:14:
15:59:51:0e:34:15:a2:0d:82:84:1f:55:dd:37:6f:44:47:55:
00:40:ee:7d:de:64:60:0a:4e:cd:9f:84:47:a9:f0:91:11:d8:
33:e1:9e:fc:cd:40:4c:36:8f:d6:df:d7:b5:03:c0:30:e7:8d:
3e:15:90:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:33:31 2025 by rpki-client