Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/1-5E16TjsOANJlRnCbxtz8Eh7LD8.roa
File: 1-5E16TjsOANJlRnCbxtz8Eh7LD8.roa (raw, json)
Hash identifier: i0hdHKKPGW6BYil2exsJSlKGWN9/uHVHU9i8EntZ8TY=
Subject key identifier: FB:91:35:E9:38:EC:38:03:49:95:19:C2:6F:1B:73:F0:48:7B:2C:3F
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 0188694DC6A3E9C1FEB95FFA210D19872192
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/1-5E16TjsOANJlRnCbxtz8Eh7LD8.roa
Signing time: Mon 29 May 2023 20:58:04 +0000
ROA not before: Mon 29 May 2023 20:58:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3209
IP address blocks: 84.56.0.0/13 maxlen: 24
195.50.128.0/18 maxlen: 18
185.2.132.0/22 maxlen: 22
85.238.224.0/19 maxlen: 19
195.158.128.0/19 maxlen: 19
2a00::/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:69:4d:c6:a3:e9:c1:fe:b9:5f:fa:21:0d:19:87:21:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: May 29 20:58:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb9135e938ec3803499519c26f1b73f0487b2c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:76:f5:96:fc:e0:26:e7:4b:e3:b6:eb:cd:5c:
41:55:5c:27:e6:23:41:45:13:3d:48:82:c8:5e:e0:
e7:9f:d7:57:33:af:2c:4f:65:ea:a6:15:33:54:6b:
f6:aa:a4:d3:bd:94:fa:ca:c9:1d:56:44:3c:08:25:
bd:c7:b3:dc:03:b9:92:d4:a6:8a:fb:2b:ff:47:cf:
f4:2c:87:eb:bc:c2:be:3a:b4:70:08:a0:93:ca:7e:
31:2b:9c:84:d5:55:bb:f5:c6:92:c6:e2:d5:2a:36:
b1:4d:eb:88:c5:d0:34:e9:61:17:e3:3f:8b:e4:da:
a4:0f:be:37:fd:1b:3a:bf:f7:6b:28:ad:9d:90:47:
fc:b6:e8:bf:2b:7a:60:3f:ec:14:d8:60:df:ee:3a:
aa:f5:fc:72:e7:7e:1f:ea:f7:bf:1a:99:5c:27:6d:
cb:c3:b4:f3:79:75:c1:4f:8d:e6:92:6e:39:2c:43:
11:0a:1f:31:d1:2e:a5:d4:b0:b3:9e:1b:3e:40:91:
ea:81:57:d7:ef:19:11:79:d7:9f:67:c7:15:78:a8:
15:51:24:8a:13:de:79:bc:11:58:41:dc:1b:f7:d7:
a9:57:92:20:90:66:c1:44:14:0e:68:7a:be:9b:d4:
e0:30:e6:35:e8:28:bd:0e:86:ef:e8:ac:10:40:13:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:91:35:E9:38:EC:38:03:49:95:19:C2:6F:1B:73:F0:48:7B:2C:3F
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/1-5E16TjsOANJlRnCbxtz8Eh7LD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.56.0.0/13
85.238.224.0/19
185.2.132.0/22
195.50.128.0/18
195.158.128.0/19
IPv6:
2a00::/22
Signature Algorithm: sha256WithRSAEncryption
84:a3:99:87:3c:76:03:6e:88:7a:7b:fc:e5:53:b8:92:2a:f1:
69:52:0b:7a:f3:02:f7:2a:14:6d:40:4c:3d:93:c5:ce:70:b3:
e3:aa:e2:93:aa:4a:a0:35:d4:d7:59:e8:d9:f5:32:55:cb:a0:
56:de:95:4e:9f:14:87:26:85:a5:ad:29:13:e7:1d:7c:13:ec:
d5:47:0f:67:b1:0c:e1:a0:e1:33:2d:be:aa:43:99:12:c3:31:
a0:cf:c1:a3:50:7c:7b:de:cc:df:8c:9b:80:da:71:e6:49:e6:
20:c1:bc:b2:aa:6b:49:82:e6:93:dd:d5:ff:22:7e:81:fa:c6:
70:51:d1:c8:04:6d:a6:72:b7:5b:b8:7c:d3:d5:5e:cb:74:0e:
c9:54:8e:df:8a:4c:06:e6:6c:13:ef:44:43:28:4a:a6:ee:49:
c8:89:f3:d9:0f:3d:7b:e2:7b:1e:b5:14:06:97:8d:c0:90:29:
27:d5:94:75:2d:01:6c:b4:31:20:4c:c5:32:33:81:8b:49:31:
3a:1d:a3:bf:ca:a1:43:6b:14:c4:73:8d:ac:27:a4:c6:03:95:
a1:2c:c6:6c:b5:72:f3:cd:02:89:a3:84:e2:ec:47:eb:c1:fb:
31:9f:53:15:d1:b0:2d:67:c0:aa:e5:34:33:88:99:2a:33:7b:
33:4d:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:44:22 2025 by rpki-client