Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa
File: F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa (raw, json)
Hash identifier: w/qr34whaxn4VYChdCHJu1JeKElghciF+2vacPtM24Q=
Subject key identifier: 17:96:EC:E8:33:55:4C:73:9A:52:C5:47:88:56:FB:53:30:83:BB:B7
Certificate issuer: /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial: 0194274829613EC01E0AC06E5E87916BF21F
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 193.5.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:29:61:3e:c0:1e:0a:c0:6e:5e:87:91:6b:f2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1796ece833554c739a52c5478856fb533083bbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:cb:d0:ac:94:fd:62:ec:5e:a2:5e:4c:88:
51:5e:15:30:f1:da:fa:12:ea:7c:b9:b4:37:75:9c:
f0:54:99:f8:22:a6:01:fc:52:08:f4:02:02:ea:e5:
be:a4:50:0d:0a:d9:80:30:eb:88:c0:1c:4d:1d:c6:
eb:a2:36:26:9a:51:25:6d:13:e3:6d:93:34:08:2c:
b1:b5:80:de:3d:75:b2:ca:f9:ef:d7:69:5f:c2:53:
23:d1:59:a0:8b:df:68:9a:88:21:13:06:ef:8e:59:
7f:54:7c:46:88:46:f8:c2:88:66:6e:73:67:78:6b:
62:f2:8f:68:a6:e2:38:b2:40:27:48:d7:6f:7c:5b:
5f:76:db:09:ab:a0:c6:8f:bb:aa:04:1b:e1:6f:ef:
4f:ef:66:b2:d3:66:7b:09:61:41:04:21:10:ce:b3:
d9:fd:dd:9e:24:c0:69:0c:cd:66:6b:34:49:a0:e8:
9c:33:39:88:4f:44:6b:b5:f5:31:86:29:18:28:13:
c3:8f:2e:a3:7f:70:a8:72:54:0b:87:05:38:19:e4:
7a:6a:03:74:eb:d7:6d:6b:e1:52:b2:a5:b8:75:a9:
d5:68:c2:73:f6:41:6a:96:8e:20:26:6b:3a:4f:50:
d1:9e:5a:4e:b1:cb:16:e3:f3:00:61:e2:9f:4b:5b:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:96:EC:E8:33:55:4C:73:9A:52:C5:47:88:56:FB:53:30:83:BB:B7
X509v3 Authority Key Identifier:
keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.26.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:f7:2d:63:94:4e:03:a2:db:ad:a1:6e:a0:e7:73:e5:43:34:
f4:0b:11:4e:66:70:f7:d0:fe:ec:4f:a1:ab:e8:de:1d:81:60:
17:90:00:74:b4:43:a1:e4:23:39:39:80:08:75:62:58:97:2d:
02:c0:1b:b7:79:6a:fe:96:44:76:6b:e7:56:7e:eb:04:9f:60:
31:1f:aa:84:f9:0c:07:e5:09:71:d2:21:d0:68:09:ca:37:0a:
b9:0f:a1:22:0b:ad:bb:17:dc:2e:92:c6:70:04:51:10:58:1f:
1d:29:b4:c1:7a:af:05:2f:36:a1:fb:1c:03:01:89:99:40:18:
7b:bd:7f:83:01:85:8a:89:ac:dd:d7:39:0d:c4:9e:08:91:fc:
14:a0:ff:92:2b:2e:fe:87:03:b6:94:e8:76:f5:93:9b:ab:20:
8d:1a:84:57:19:fe:09:ee:68:6b:63:00:b3:f0:64:17:09:db:
b9:06:0e:e4:d1:80:c4:22:0b:4c:9d:5c:e5:54:c9:50:81:c4:
71:a9:0e:41:36:b3:10:00:b1:a3:a1:a3:de:0f:80:11:49:81:
9f:fe:11:72:7f:3d:82:0c:a0:bd:46:b1:6e:45:42:f6:27:93:
0e:aa:e2:b8:ec:62:a8:8e:e2:89:09:7f:68:18:7f:82:d8:b9:
91:22:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:49:44 2025 by rpki-client