Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/5aDG7pCYyxrbZjMpOApNgbcaJRA.roa
File: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (raw, json)
Hash identifier: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=
Subject key identifier: E5:A0:C6:EE:90:98:CB:1A:DB:66:33:29:38:0A:4D:81:B7:1A:25:10
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019425FD6A65683F3F79AC55969D1D3F87C3
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/5aDG7pCYyxrbZjMpOApNgbcaJRA.roa
Signing time: Thu 02 Jan 2025 07:49:12 +0000
ROA not before: Thu 02 Jan 2025 07:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203974
IP address blocks: 193.56.24.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:6a:65:68:3f:3f:79:ac:55:96:9d:1d:3f:87:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5a0c6ee9098cb1adb663329380a4d81b71a2510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:ac:ac:2f:c1:bb:61:b2:d3:87:a0:65:fd:
dc:97:f9:0a:a4:70:da:57:ed:96:86:92:5b:fa:76:
f4:39:ba:1c:11:6a:6e:bc:64:24:5e:53:27:4b:10:
71:4d:ce:1b:b3:52:ca:e7:4a:8a:bb:f4:b9:3d:9f:
53:2c:db:d8:b6:4e:e1:18:3b:b8:8b:64:66:40:18:
d9:fb:cb:72:69:25:0b:42:28:31:02:a9:bd:65:61:
87:d6:ab:5b:a8:8a:5a:1a:28:61:f3:06:20:b0:c6:
a6:fb:ea:af:20:4b:cb:be:cf:01:a2:f2:a4:78:48:
7e:42:3c:55:79:dd:a3:9b:68:cb:3d:c0:ab:62:6a:
83:ed:c3:19:67:ac:5a:b0:ad:b2:eb:ef:71:4f:62:
92:2e:1b:bb:62:82:36:d4:c6:d2:73:dd:92:34:a5:
8e:a9:5c:34:3a:7c:1d:49:ac:3d:91:c4:e4:e7:47:
7c:39:ca:20:f3:ba:e6:b0:2d:18:b9:cb:ed:a9:ac:
89:cd:dd:74:38:2b:30:63:26:17:25:0f:0a:66:e1:
83:e8:5f:2c:c3:32:f3:bd:8e:20:0b:ae:19:03:47:
87:ab:0f:f1:20:cb:51:83:e5:b8:4f:1f:dd:9c:94:
10:25:b7:04:5d:b4:6f:1a:91:04:3b:c7:f7:05:ed:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A0:C6:EE:90:98:CB:1A:DB:66:33:29:38:0A:4D:81:B7:1A:25:10
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/5aDG7pCYyxrbZjMpOApNgbcaJRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.24.0/22
Signature Algorithm: sha256WithRSAEncryption
05:1c:63:be:72:c4:a4:29:64:95:8e:2d:8a:ad:4e:1d:46:8a:
09:30:e6:24:c2:cc:9d:d4:c7:5d:58:dd:1b:9e:b6:7d:0b:5c:
80:a9:b5:f5:7f:53:bd:65:5b:13:d2:cf:bd:b7:c3:10:b2:2a:
e0:a7:dc:3f:ce:33:f6:a3:1a:f1:fa:1f:75:34:4a:2f:4e:e4:
41:80:92:ac:7b:9c:d1:2f:85:bf:27:80:c2:b9:38:7c:09:e5:
47:58:7b:c4:0b:dc:ab:cf:c8:76:13:fa:83:79:26:f3:e4:0b:
5e:68:07:0c:68:48:c2:ca:a3:09:b1:36:f8:be:5a:61:f2:2c:
1c:49:45:ac:5e:c0:f9:1a:c6:37:27:d7:cb:0d:50:f3:9e:9d:
29:93:0b:bd:fd:eb:15:58:6d:29:57:54:2c:4e:da:ee:8b:af:
0b:a5:dd:75:4c:d5:bd:b3:38:d4:f4:9d:a3:f5:d7:1b:32:d0:
7b:b6:fc:77:b8:e6:4e:eb:7e:c2:a4:42:c3:de:ae:fc:e4:bc:
df:b9:16:3a:08:a8:1c:c0:a6:9c:c9:3f:77:15:17:10:eb:2a:
f2:56:eb:79:b0:0d:6e:32:00:e8:3c:59:f1:d3:a9:7a:d7:54:
e7:d5:23:8d:1e:ae:64:01:b7:04:b0:5f:16:1e:9e:0f:82:97:
6c:14:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:42:39 2025 by rpki-client