Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa
File: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (raw, json)
Hash identifier: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=
Subject key identifier: 4B:9F:BB:A4:56:9C:DD:6C:36:AC:A9:0E:5B:4A:43:BE:31:F3:3B:5C
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0194252204D99213A8A43EA0E01D3B67039B
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 194.39.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:04:d9:92:13:a8:a4:3e:a0:e0:1d:3b:67:03:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b9fbba4569cdd6c36aca90e5b4a43be31f33b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:a8:98:58:81:ce:b3:19:31:06:63:2b:3e:
46:ef:27:81:7b:5e:a5:81:da:36:41:1a:71:93:36:
e7:c1:29:76:93:93:56:3d:5b:d8:6a:f5:39:4f:db:
b9:cf:ec:fb:8c:cc:ea:ce:e9:cc:69:fd:df:f8:17:
17:91:8a:4c:f2:65:f0:62:fc:94:84:bc:62:72:5d:
d9:65:9c:77:6b:ce:81:c5:c8:65:04:63:ab:f2:eb:
21:71:d4:df:27:ae:8a:5c:bd:70:d6:45:92:0b:73:
30:ec:77:37:4a:34:cb:09:b5:ae:9e:e1:7c:89:96:
59:09:92:8f:14:a8:7b:bc:b7:f3:1f:da:c8:b4:fe:
d6:75:a3:79:63:f1:fc:03:bb:54:89:34:5e:d7:c6:
c4:1e:12:38:ac:9c:d4:42:81:08:ac:e8:4f:57:5b:
c5:94:99:75:7e:fc:73:0c:bb:ad:ec:6b:72:03:71:
0a:4d:81:44:7d:5f:4a:6e:8a:41:dd:67:1c:46:3f:
31:d9:84:4c:c3:3a:8e:15:92:fa:6a:bf:84:bd:78:
4a:f6:d1:90:9e:3f:9a:73:bc:be:88:2e:74:cd:36:
e1:32:40:56:ee:b2:95:c7:08:4d:9f:a7:1c:5b:c1:
18:cd:62:4a:f8:78:cd:16:5b:35:b9:05:0c:16:f1:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9F:BB:A4:56:9C:DD:6C:36:AC:A9:0E:5B:4A:43:BE:31:F3:3B:5C
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.132.0/24
Signature Algorithm: sha256WithRSAEncryption
35:54:92:ac:17:b6:c0:e6:35:e2:fb:29:fd:a9:f3:77:c2:67:
43:6f:95:49:e8:e9:93:63:c3:fb:0d:c5:40:79:9c:7e:74:c5:
83:d8:0f:a2:89:78:b1:59:54:78:02:ad:8a:25:a7:1f:75:f0:
3b:1b:73:5e:06:14:3c:23:02:99:77:d3:f1:79:00:47:8b:80:
e5:92:4c:f6:0f:40:8e:0b:02:71:37:f1:bd:d6:84:cf:82:88:
24:08:74:04:0f:90:c8:6a:29:9f:f9:6f:9a:a3:48:2e:fd:b4:
27:22:90:3e:3b:3b:90:a0:f3:cd:79:37:0d:5a:f3:a1:dd:28:
74:4d:44:1d:66:7e:9a:d7:9b:4e:d6:c7:6a:76:ea:50:4d:f4:
53:f6:a0:61:85:91:df:8d:5d:61:d4:d0:ce:0c:e6:69:5f:43:
1a:6f:a9:00:07:25:71:6b:ce:d9:c9:55:44:85:61:fc:64:f9:
b6:a3:d1:0d:f9:b6:83:44:06:23:84:5c:a1:3f:a9:53:1a:8d:
ff:f4:d4:6f:c8:0c:bc:41:c4:b7:ba:c9:27:bb:47:b8:93:48:
dd:a6:74:6d:46:56:45:cf:17:52:6c:75:dc:6d:c2:7d:09:06:
24:b2:c3:9b:6d:e8:cf:6f:94:95:da:78:15:e7:db:21:ac:6a:
b8:1d:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:56 2025 by rpki-client