Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa
File: 5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa (raw, json)
Hash identifier: kqtxwSPKoLsi1ph5t4VnO3iKewevISmebmIE1RpFWLg=
Subject key identifier: E4:92:05:0A:05:D6:1A:6B:30:D4:70:39:26:D0:03:17:E6:F5:78:9E
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 01942823E83DCE4F9A06096DBFC2F6192CC5
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa
Signing time: Thu 02 Jan 2025 17:50:29 +0000
ROA not before: Thu 02 Jan 2025 17:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8405
IP address blocks: 193.188.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:e8:3d:ce:4f:9a:06:09:6d:bf:c2:f6:19:2c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Jan 2 17:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e492050a05d61a6b30d4703926d00317e6f5789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:0f:30:2d:07:2a:44:84:e8:77:7c:c2:ef:
3b:7e:71:c7:d0:90:6c:28:d9:7f:5a:28:73:94:d4:
8a:34:92:0c:df:8a:ee:2f:09:2f:59:8e:a9:5f:62:
18:ec:b8:5b:6f:e9:0a:fc:42:c6:f1:b2:d1:51:2e:
02:49:a7:ce:93:7e:c5:01:d4:a0:08:da:ef:17:38:
ee:bf:f7:62:0a:f9:be:75:aa:ac:4c:bf:6b:cc:8b:
76:98:b2:9e:5b:9b:15:62:ab:2a:b9:03:8a:b7:07:
ef:25:a5:d2:86:53:5b:6d:b0:25:80:d5:ff:03:30:
cd:38:51:f1:46:ce:ce:50:a4:e2:9e:49:23:7f:fe:
e8:a4:55:c0:46:ad:5f:02:f3:ee:1e:f6:80:96:7d:
71:f6:55:a3:8f:2d:14:27:c6:f7:73:95:38:fb:06:
65:78:52:e1:a9:44:9a:28:db:74:4e:8d:a1:2d:be:
fe:6f:04:be:a4:63:9f:9c:eb:0c:0b:68:6e:b6:1e:
55:a2:ab:66:2b:b8:16:df:18:8d:d5:a4:35:de:cf:
a1:55:55:08:74:48:6f:28:c0:f8:1f:54:95:52:40:
a8:a8:2e:38:23:da:f4:5e:23:9d:1f:05:c5:20:a1:
cc:6f:d3:36:35:c7:ec:0e:71:f6:e8:f4:de:14:56:
c6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:92:05:0A:05:D6:1A:6B:30:D4:70:39:26:D0:03:17:E6:F5:78:9E
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.154.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:f7:23:ed:29:86:d1:b2:16:78:c1:88:a3:9f:57:31:00:05:
cc:74:5b:e0:ad:64:d1:c9:c7:2f:e0:32:a9:58:71:91:c8:4d:
f4:86:03:21:44:d2:f6:9e:6b:d9:37:58:20:6b:4b:af:3b:7b:
c1:4a:3d:b2:6e:d7:ff:7f:d4:60:e5:b2:5d:02:ec:c8:ec:50:
1d:39:b5:e7:e2:e2:cd:7a:5c:a1:40:67:2d:ef:4c:f8:bd:99:
cb:9a:1d:c6:c1:d9:74:e2:5a:d4:e3:09:73:b5:98:86:7e:b2:
da:97:6e:e4:17:1a:28:10:de:62:2a:2c:a2:e3:2d:f5:b0:42:
66:73:10:31:84:96:2a:37:02:17:75:a3:ae:1b:bb:c2:a9:f4:
b0:68:84:2c:c9:a4:66:6a:c3:6e:05:e0:11:9c:83:8f:fe:ed:
1b:64:0f:38:18:67:93:55:6d:87:24:53:61:c4:5d:27:82:fb:
ed:fa:40:38:59:4c:d7:ca:4c:ce:a6:bd:4e:48:65:0f:08:b2:
18:c6:47:c8:05:11:1c:a4:9c:64:ee:e9:61:6b:19:cc:f6:63:
bb:60:85:be:3b:7d:1a:f2:f4:1d:22:55:d1:56:83:5b:0c:04:
a5:e8:a5:3f:90:bc:c9:10:1b:6b:7a:6d:a4:bc:57:ac:9d:b3:
b4:c0:70:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:46 2025 by rpki-client