Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5zeavCXfJbWRFMwGP6s8OM_bipA.roa
File: 5zeavCXfJbWRFMwGP6s8OM_bipA.roa (raw, json)
Hash identifier: x3Jhr2KkOXOVZdtn2QznWuk+7j32gJNHIOavwcCi04U=
Subject key identifier: E7:37:9A:BC:25:DF:25:B5:91:14:CC:06:3F:AB:3C:38:CF:DB:8A:90
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A2C7A02004427B708E583582FB1DA
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5zeavCXfJbWRFMwGP6s8OM_bipA.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44234
IP address blocks: 213.215.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2c:7a:02:00:44:27:b7:08:e5:83:58:2f:b1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7379abc25df25b59114cc063fab3c38cfdb8a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:16:fd:99:d5:cb:58:28:5f:45:0e:38:a1:
7a:e8:d9:94:1c:22:21:f8:34:a2:6f:f9:36:46:47:
89:25:98:66:94:80:77:02:c8:3d:b3:ca:72:84:a6:
c7:99:28:92:ee:72:81:e2:22:b3:89:7d:78:25:55:
bf:9c:fc:21:15:6e:cc:5b:6f:1d:f4:ea:66:b3:6e:
4d:4a:c1:bd:e6:d5:de:41:c6:5f:13:10:2b:bf:c0:
d3:81:48:58:c2:4c:69:3e:70:16:27:2a:b3:2b:7f:
c2:28:a8:6e:ac:9d:2b:0b:75:f2:d5:ac:ca:c6:64:
ec:09:71:07:17:38:6f:e9:b8:e3:c8:0f:21:93:22:
f7:a1:77:42:2f:ba:5a:61:a7:30:34:d1:62:44:bd:
3b:df:fa:e8:71:91:47:ff:73:23:71:e6:54:3d:63:
9a:a0:7d:d6:d4:a3:69:c5:ca:e3:ec:57:23:4a:26:
55:71:84:4e:a4:93:0c:fa:d5:8e:f8:31:28:3b:35:
58:1c:fd:d8:a3:cc:32:4e:46:3b:26:89:66:f3:23:
af:71:55:7a:1e:2f:0f:ef:8f:b2:45:54:6f:a2:8e:
38:89:b8:14:ef:8e:a9:b0:52:99:7a:68:12:f9:ad:
cb:88:59:a0:cc:31:30:b8:66:24:d7:ee:28:43:28:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:37:9A:BC:25:DF:25:B5:91:14:CC:06:3F:AB:3C:38:CF:DB:8A:90
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5zeavCXfJbWRFMwGP6s8OM_bipA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:27:69:5c:1b:74:d8:13:62:ae:4a:67:3c:af:db:f8:4e:63:
38:49:e3:98:82:53:5f:ec:b4:19:53:c6:81:89:1d:0c:dc:55:
a9:a2:68:e9:bd:e3:82:9c:3c:66:96:62:12:e3:64:8d:a7:20:
dd:cc:a5:7c:52:e8:37:d7:5a:33:6b:a5:78:ee:6c:7b:f6:88:
6d:40:1c:44:71:10:fd:05:b8:f0:71:41:60:4d:97:43:0a:18:
37:69:15:92:1e:71:f5:3e:76:48:11:8c:e5:a0:3a:53:43:f2:
9a:8d:27:f4:e9:c8:0a:1c:22:22:1e:0b:01:64:e0:13:21:fe:
92:08:b5:7f:c5:fd:04:47:3e:f9:3a:05:df:5e:83:14:e6:2d:
9d:87:4f:7d:0a:52:83:7f:c4:1b:5a:5d:f7:cf:ef:7c:c7:57:
39:9c:4f:2c:9f:2a:ca:21:90:56:30:2e:66:86:e3:a0:e1:f6:
c6:6d:1c:20:4f:c8:68:c1:55:01:c8:6b:d6:65:d6:f8:cb:12:
fd:2a:b8:e4:bd:b5:50:16:71:16:4b:12:28:2e:8e:b7:2a:f4:
37:57:13:af:13:a8:73:1a:4c:ca:6c:3d:07:26:08:93:9f:1d:
26:9a:24:ef:cb:e9:b2:9e:1b:fd:96:48:d1:04:ea:23:36:08:
12:25:29:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:13 2025 by rpki-client