Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/5KU69xpItYQY0WxFGzbCaR_xF-I.roa
File: 5KU69xpItYQY0WxFGzbCaR_xF-I.roa (raw, json)
Hash identifier: nALEvmxEmiAuf2P9EYLZypsp4ZL3LnUKyRUMkW+WsNM=
Subject key identifier: E4:A5:3A:F7:1A:48:B5:84:18:D1:6C:45:1B:36:C2:69:1F:F1:17:E2
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 0194236A49EF1730205DC1DD1018B3C634AF
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/5KU69xpItYQY0WxFGzbCaR_xF-I.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 194.150.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:49:ef:17:30:20:5d:c1:dd:10:18:b3:c6:34:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4a53af71a48b58418d16c451b36c2691ff117e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:4b:8e:3d:17:2f:2a:fc:35:3a:d0:dd:02:
20:86:92:b1:c4:aa:f2:e4:cd:d1:e1:47:31:a1:6d:
f4:e5:84:c4:51:11:ae:20:77:27:67:a2:b2:e7:03:
23:a8:37:23:15:32:9c:7c:5a:02:3b:ed:64:e6:e8:
6b:4c:22:48:b6:37:b3:b6:4b:b0:07:49:4d:92:40:
f7:c4:e5:64:7b:04:f5:42:c6:b3:54:24:4a:25:c1:
df:cf:f8:28:cd:b1:ec:e8:24:8e:d1:83:20:09:cd:
4a:f6:89:e2:78:4f:0e:9f:43:89:a5:c4:66:df:f6:
45:8d:c6:69:ea:78:c3:b8:65:e9:c1:81:07:cc:e8:
be:75:7a:e8:e7:cc:3b:27:aa:ea:5b:2e:38:20:81:
ef:20:4c:30:3a:6b:26:b8:c3:47:31:0d:fd:11:6d:
9a:2a:fe:8a:d8:2c:73:ae:d1:2e:e5:11:ea:9b:8a:
cc:8a:4a:10:bf:9e:39:36:ad:93:6b:50:a7:4e:63:
12:f9:31:a9:b2:a8:5d:99:2d:8b:f8:12:87:c9:ae:
0f:ee:13:b6:46:8b:8a:f5:a8:b7:91:f7:3f:74:30:
bf:cf:14:21:48:ca:74:75:30:0b:1d:c3:98:e0:c3:
ba:82:21:a8:8f:8a:a2:72:af:7e:db:47:40:b0:d1:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A5:3A:F7:1A:48:B5:84:18:D1:6C:45:1B:36:C2:69:1F:F1:17:E2
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/5KU69xpItYQY0WxFGzbCaR_xF-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.220.0/23
Signature Algorithm: sha256WithRSAEncryption
73:72:0f:49:41:40:fc:f0:68:84:e6:0f:0b:6c:bc:c6:a8:72:
60:2f:dd:d7:65:36:c6:75:00:43:27:57:5b:ef:d6:fa:58:87:
11:77:19:2b:ac:7a:bb:c3:af:17:7b:f4:e1:8f:4f:41:a8:3f:
c9:77:96:63:29:16:a3:3a:2b:35:2a:78:c5:24:1c:cd:9f:c4:
f8:d6:8a:0c:c8:cc:1e:a4:52:6b:22:53:a4:d0:0f:98:a5:49:
1b:d1:77:13:f9:d6:73:7f:45:ff:17:31:61:10:93:f0:cb:7b:
2f:2f:24:4d:db:ba:20:bf:5b:e5:8a:ec:ff:a7:44:d0:ae:bc:
28:6d:09:f2:21:de:f7:81:ca:9d:fc:e8:3c:d5:4c:67:e3:9b:
8f:8f:20:b3:a8:00:2e:38:99:bb:5d:40:bf:47:86:8f:d7:6b:
23:8d:36:ad:97:53:4e:f8:48:1b:72:1a:9a:86:15:1d:1c:b6:
7e:45:12:56:e4:c4:06:28:e7:2b:0c:2c:20:e1:fc:d1:a2:d0:
ee:81:60:07:c7:86:62:e1:1b:0f:4c:41:ba:14:23:78:a6:95:
79:ed:1e:09:7b:5f:55:c5:c9:21:87:5c:59:1f:2c:1b:1a:2d:
75:22:e9:5f:a1:99:3c:07:bb:95:72:d9:23:15:fd:87:a1:c3:
a1:ea:ec:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:09:31 2025 by rpki-client