Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/5RvDfFpC7vx8qB3ht8LAMUlbz_Y.roa
File: 5RvDfFpC7vx8qB3ht8LAMUlbz_Y.roa (raw, json)
Hash identifier: lscEuTJFOt3MM1J89Ltte3jadabieE/tkl1XX2kg7a8=
Subject key identifier: E5:1B:C3:7C:5A:42:EE:FC:7C:A8:1D:E1:B7:C2:C0:31:49:5B:CF:F6
Certificate issuer: /CN=7938dfb9eb924079bb706cb616eda572864a9e13
Certificate serial: 0194221FABAA3B2DE8CFDB5169BAF71A1FCE
Authority key identifier: 79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/5RvDfFpC7vx8qB3ht8LAMUlbz_Y.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51235
IP address blocks: 185.51.42.0/24 maxlen: 24
185.51.43.0/24 maxlen: 24
2a04:c147::/34 maxlen: 34
2a04:c147:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ab:aa:3b:2d:e8:cf:db:51:69:ba:f7:1a:1f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7938dfb9eb924079bb706cb616eda572864a9e13
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e51bc37c5a42eefc7ca81de1b7c2c031495bcff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:96:87:ae:fc:88:a9:c6:08:75:06:1c:ea:1e:
f5:05:0f:ce:e1:93:bc:d0:7b:e5:f5:22:9c:0c:87:
e7:18:36:94:16:41:23:33:a2:3f:66:03:be:59:da:
b4:d3:df:72:47:47:09:ff:65:ec:02:6f:5c:d3:69:
ee:1f:e9:96:76:6e:a3:c0:db:53:09:f1:26:6b:31:
06:6a:85:ba:0e:b4:ed:4d:c5:f1:79:80:f9:23:83:
47:d6:aa:3c:42:94:aa:24:00:49:4d:ad:fe:3e:da:
f8:6a:24:3b:dc:6b:09:01:22:04:b1:e1:99:81:57:
e0:66:50:a6:0d:51:4e:14:09:7b:96:eb:d0:c6:e7:
a7:ee:43:6e:14:e1:51:84:70:70:f4:66:47:9a:72:
eb:aa:7c:7c:aa:1c:1c:e1:9e:c5:12:27:b3:e0:40:
3a:0a:f1:31:cb:21:bc:61:7e:ae:15:bb:2a:b0:73:
15:15:93:8d:fd:00:26:cb:fe:76:69:1c:47:1f:ab:
68:67:b7:39:12:72:30:40:46:ff:96:b3:66:e2:70:
25:e2:c2:60:d2:05:32:ff:27:14:59:2f:d0:fc:de:
2c:b1:13:17:4e:4c:c3:a2:f6:fa:06:e8:bc:4a:0f:
f2:79:5b:2e:c6:ba:8a:ec:54:06:89:c3:dd:54:f8:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1B:C3:7C:5A:42:EE:FC:7C:A8:1D:E1:B7:C2:C0:31:49:5B:CF:F6
X509v3 Authority Key Identifier:
keyid:79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/5RvDfFpC7vx8qB3ht8LAMUlbz_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.42.0/23
IPv6:
2a04:c147::/33
Signature Algorithm: sha256WithRSAEncryption
91:49:fc:bf:89:f3:de:49:73:1c:08:6f:37:75:f1:b0:77:03:
c1:82:8c:cf:52:93:f6:66:50:16:f3:4a:a3:d7:df:64:06:72:
31:0e:ad:64:55:01:28:ac:0a:f1:e2:1e:b9:e6:4e:f8:7b:6a:
3b:a2:e5:02:73:29:23:20:5d:73:51:d8:2a:9d:3b:44:f9:96:
5e:36:a5:ff:b3:9b:82:f4:1c:f7:51:6b:c9:65:e7:64:f1:41:
c3:61:b8:cf:5c:48:43:77:49:38:35:0d:c4:8f:67:60:07:7c:
90:4e:1e:7b:7c:fb:b2:46:84:a4:be:d4:41:8b:fd:81:44:31:
89:ec:f6:08:d7:ed:67:08:67:05:52:47:3e:35:ed:3a:68:00:
3a:af:78:34:d7:0a:e8:18:20:b6:ae:ea:7e:9f:d5:9e:37:7a:
6c:bf:8c:b9:4f:b5:2d:70:ff:71:f5:d0:be:c0:08:e4:0d:83:
c3:1b:56:7b:72:13:d4:ca:b8:10:32:ca:de:f5:d9:1b:36:b7:
96:c4:60:34:6a:c9:4e:6a:14:2e:27:da:24:6b:cd:8f:09:8e:
61:e4:86:12:46:07:a6:49:29:d2:72:59:98:2c:40:81:25:55:
9c:6a:df:46:22:62:d9:27:f4:3e:34:43:2a:3b:52:6f:77:9f:
67:cf:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:56 2025 by rpki-client