Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/5PoR_En9kU41kvnqRMYZk65Rs8g.roa
File: 5PoR_En9kU41kvnqRMYZk65Rs8g.roa (raw, json)
Hash identifier: 9NfRj3r+3LaNwy0zqy7UU/Sj7PUP5lubii8h9pDJl1s=
Subject key identifier: E4:FA:11:FC:49:FD:91:4E:35:92:F9:EA:44:C6:19:93:AE:51:B3:C8
Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial: 018570F098D97788E35CF8C4FCBBA0056F14
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/5PoR_En9kU41kvnqRMYZk65Rs8g.roa
Signing time: Mon 02 Jan 2023 05:24:53 +0000
ROA not before: Mon 02 Jan 2023 05:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49178
IP address blocks: 185.237.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:98:d9:77:88:e3:5c:f8:c4:fc:bb:a0:05:6f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Validity
Not Before: Jan 2 05:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4fa11fc49fd914e3592f9ea44c61993ae51b3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:d7:ef:09:db:4a:12:ae:b9:71:20:97:77:
e1:b2:55:f1:0a:83:94:f7:31:91:08:fc:06:1c:1e:
ff:b1:2d:79:c2:d0:ca:47:78:66:e9:46:e6:f0:64:
d0:21:63:e8:22:26:ce:87:e4:47:e0:f9:2e:03:51:
2f:b2:50:3c:5e:3a:58:2a:4a:23:78:4b:26:04:6d:
d2:18:54:35:d8:a7:ae:47:ab:38:5f:1d:da:b5:3a:
f6:93:47:3b:0b:df:43:3b:fd:f0:6c:0e:73:87:2f:
c6:b6:56:ba:5f:69:31:d5:d7:b0:f4:11:fb:07:95:
d1:c4:a2:79:b9:02:98:bb:8d:ca:95:3b:b4:7a:13:
bb:37:7e:bb:74:9b:ae:27:9e:28:45:fc:5c:a1:f2:
69:0e:f1:6c:0e:a5:7c:1e:33:9d:ff:62:23:84:09:
7e:57:66:9e:ff:71:59:43:9d:69:84:8e:dc:5f:73:
ec:bd:b1:d8:ff:5a:61:05:2d:0b:7a:f4:95:16:34:
3a:91:11:d8:ae:ef:2b:c6:7c:c6:16:71:5e:32:7d:
78:95:0b:40:03:d8:f7:17:17:2c:f8:bf:01:2b:53:
82:5c:79:53:04:75:1b:dc:a4:d6:61:e6:8a:9a:c2:
11:f2:04:40:d3:c9:22:82:b3:1e:1e:ac:5a:bd:de:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FA:11:FC:49:FD:91:4E:35:92:F9:EA:44:C6:19:93:AE:51:B3:C8
X509v3 Authority Key Identifier:
keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/5PoR_En9kU41kvnqRMYZk65Rs8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.180.0/22
Signature Algorithm: sha256WithRSAEncryption
73:7f:c9:7b:3a:64:24:12:af:bb:3f:0d:88:cc:87:25:b5:1b:
05:77:f7:7d:97:3d:99:83:cc:de:93:ac:1a:0d:e0:14:f0:fd:
86:2d:7e:91:80:d4:51:3b:05:41:5b:42:7d:5f:48:04:fd:3d:
e7:46:96:1d:77:ff:d0:b3:9f:1b:88:07:7d:35:1a:af:6d:7e:
70:d6:79:2f:ee:95:e4:b2:e5:1c:0a:65:5d:45:af:c7:5f:83:
a1:af:41:de:fc:0c:04:dc:65:0d:94:70:83:2c:dd:da:f6:68:
73:49:87:33:0e:66:44:f6:55:69:d4:85:49:8d:d2:9e:a2:4c:
aa:e5:49:c1:fa:49:2e:19:71:46:56:45:dc:1c:64:50:17:65:
83:c1:e6:e4:6b:51:0a:11:ef:b7:cc:fc:45:d5:85:5e:e2:6c:
b0:a8:49:54:0a:f3:a6:c9:c0:a4:39:4b:63:f2:6a:01:3c:32:
63:73:b6:82:8d:cd:a4:69:8b:65:18:da:3f:af:bc:16:3e:39:
f7:5d:53:32:d2:a7:91:24:15:ba:1e:43:16:e0:20:8b:ce:c0:
c9:e2:e1:35:22:d0:cb:c4:a7:10:ee:00:87:79:25:e2:d4:59:
29:6a:2c:66:8e:bf:57:10:7a:0a:17:0a:37:36:9a:77:29:40:
10:06:50:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:02:32 2025 by rpki-client