Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5rn7QGa5M3PmRHg-uoVovOW6nCU.roa
File: 5rn7QGa5M3PmRHg-uoVovOW6nCU.roa (raw, json)
Hash identifier: 7iJLVepq1XGlGv1cwwAGABPvrs1FFz7Tayk+vQJC9E4=
Subject key identifier: E6:B9:FB:40:66:B9:33:73:E6:44:78:3E:BA:85:68:BC:E5:BA:9C:25
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B214EBAB3D3EDAF023E147E5B317BF
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5rn7QGa5M3PmRHg-uoVovOW6nCU.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35787
IP address blocks: 195.136.32.0/23 maxlen: 23
195.136.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:14:eb:ab:3d:3e:da:f0:23:e1:47:e5:b3:17:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6b9fb4066b93373e644783eba8568bce5ba9c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:76:5e:28:d3:95:b1:02:e5:fd:72:ad:98:
47:86:6c:10:65:97:0b:a6:bc:64:b9:fa:6a:95:3d:
b9:b8:3a:1c:a6:20:f1:4d:7f:c0:d5:d6:72:49:eb:
81:d4:3a:dd:07:84:7c:4f:73:4b:59:b6:50:9c:a1:
93:a1:f3:dd:9e:d5:0f:83:c2:07:31:3d:2b:c9:36:
30:11:7e:87:62:10:0b:32:af:87:42:9d:29:bb:d3:
30:92:d2:7d:79:f8:e8:f8:78:a8:61:e4:18:c9:c0:
78:e1:d2:e2:dc:1f:6c:6b:a4:db:cb:b1:58:49:34:
74:d6:d7:c4:7e:33:63:c4:9d:f0:73:65:f5:83:93:
ac:e2:98:fd:67:01:14:1a:f3:d0:fa:7a:b4:9f:e3:
f0:ae:ec:06:01:01:18:ab:29:aa:b2:76:8f:3c:26:
f3:f7:f5:57:ab:c9:bf:09:03:44:f1:6c:86:de:5c:
3d:3f:4b:35:fc:61:6d:50:61:1a:76:4e:79:c6:47:
08:e9:99:f5:95:e1:4e:83:4f:5a:93:d8:b5:70:7c:
e4:67:29:b0:8e:84:6e:96:ae:27:5c:37:a4:9c:f0:
71:82:97:36:36:15:4c:10:cf:ba:88:45:e6:c3:bf:
7b:6f:66:9e:00:b7:1f:ca:07:57:32:38:ab:37:50:
fa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B9:FB:40:66:B9:33:73:E6:44:78:3E:BA:85:68:BC:E5:BA:9C:25
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5rn7QGa5M3PmRHg-uoVovOW6nCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.32.0/23
195.136.72.0/23
Signature Algorithm: sha256WithRSAEncryption
66:56:5a:9a:36:5b:2f:3f:df:fd:79:4a:f4:ae:e1:f7:b2:b1:
a3:26:b7:80:30:ec:c0:c3:60:f5:98:8f:ef:89:c3:1a:f0:13:
21:81:1d:54:a4:40:69:90:07:35:1d:c0:56:23:bd:d0:07:77:
df:0b:e7:5c:50:7a:e4:4e:de:f3:54:b0:a2:04:af:79:86:46:
df:2c:a5:3b:82:ea:7e:52:35:3c:29:a1:1d:10:5e:16:11:9e:
c1:77:36:40:6b:cc:51:26:e9:fd:7b:c7:ee:26:93:b6:7c:c2:
9e:78:25:0a:4c:a5:45:fe:80:af:49:0d:f4:03:ba:0f:06:b5:
a7:84:df:47:37:cb:4e:eb:80:4a:7f:80:df:1c:79:14:6d:ed:
db:fe:bc:8f:7a:15:99:6f:0a:31:95:d0:f4:2b:b2:ea:83:07:
09:3a:b3:f9:e4:18:36:8c:1b:13:aa:65:56:d0:ac:99:18:3c:
76:70:b6:cd:d0:03:f5:c4:bc:0b:57:1d:74:db:ea:69:37:ef:
0f:9c:37:a0:1b:7a:25:bd:e3:62:9c:78:aa:2f:0b:e4:d0:8e:
b3:d3:46:37:88:01:25:87:32:2a:e9:46:01:66:f6:d3:53:ef:
ba:cd:15:cf:1d:27:f0:2b:c4:89:5f:09:da:76:0f:87:74:73:
6a:a7:85:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:05 2025 by rpki-client