Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/IB7bJFB_I7D4s-PQGxG4E3XpX3w.roa
File: IB7bJFB_I7D4s-PQGxG4E3XpX3w.roa (raw, json)
Hash identifier: q8zDxICITt81ChHdfb9WGgk+k8IAI5SvdwqgGKQ7Gv0=
Subject key identifier: 20:1E:DB:24:50:7F:23:B0:F8:B3:E3:D0:1B:11:B8:13:75:E9:5F:7C
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424449918115F266AAB38384F27EDB965
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/IB7bJFB_I7D4s-PQGxG4E3XpX3w.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202602
IP address blocks: 5.253.18.0/24 maxlen: 24
5.253.19.0/24 maxlen: 24
45.92.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:99:18:11:5f:26:6a:ab:38:38:4f:27:ed:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=201edb24507f23b0f8b3e3d01b11b81375e95f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:49:c3:07:01:32:54:0b:f8:48:45:f3:51:
7d:91:fb:43:00:9c:45:97:3d:e7:8f:75:8f:79:41:
11:99:c7:6b:83:7c:a4:d0:51:f7:5e:42:5f:1b:f6:
53:5e:c2:4e:5b:c2:98:02:bf:6d:e3:48:e9:7d:f8:
95:48:4b:e7:80:ee:cf:38:de:b0:a4:e9:07:4b:e6:
3e:15:92:eb:06:1d:b3:86:5b:47:ab:e0:6c:59:58:
e4:95:17:2d:71:56:af:b7:8e:26:c3:08:19:2e:1c:
8b:a2:5f:54:07:71:bd:b2:9f:85:7f:0a:00:58:22:
2f:6a:1e:d9:52:05:81:55:33:07:a5:ed:91:58:92:
21:05:c5:72:15:bd:07:2a:4d:79:80:b7:1d:39:6b:
7a:39:43:4d:4d:9a:5d:65:ac:0c:30:32:1f:a8:bd:
f5:a1:a0:ae:16:8c:d4:db:79:72:82:ea:da:f4:18:
0b:db:78:b5:cc:b7:84:54:b0:e2:7d:4f:3b:14:14:
9a:ec:02:c5:4d:bf:53:d0:a7:48:4c:ec:70:db:c0:
96:af:d2:61:6a:13:a1:4a:97:ab:ac:ce:ce:79:1f:
80:b5:45:ee:c5:0a:e3:c2:d0:4d:fc:22:39:7f:a5:
3e:fe:a5:b1:f7:63:30:47:5b:f9:21:75:d6:89:a4:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1E:DB:24:50:7F:23:B0:F8:B3:E3:D0:1B:11:B8:13:75:E9:5F:7C
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/IB7bJFB_I7D4s-PQGxG4E3XpX3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.18.0/23
45.92.156.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4e:f4:49:29:3b:5b:63:ce:01:21:4d:58:ca:84:0e:31:0b:
a6:a9:77:23:59:72:47:23:31:7f:39:c0:aa:f8:66:a0:c0:b3:
4e:88:b8:84:eb:64:d7:8b:8a:42:c5:97:4b:e8:48:04:3e:57:
59:4f:dd:c8:16:d6:06:90:dd:c0:72:6b:20:f7:35:56:ca:08:
0d:c5:50:8f:b6:89:03:c4:03:54:82:97:9c:d2:4b:75:28:a8:
0d:6c:aa:d4:ad:a6:9a:19:13:65:d7:82:30:12:f0:20:fd:ab:
d5:76:07:e0:e1:19:c1:bf:d7:82:d5:77:6a:26:b1:b9:de:73:
ec:53:ad:ef:22:f4:28:15:e6:4e:80:21:18:ba:ac:a4:37:7a:
20:9e:c2:82:ea:4a:f1:6f:6f:bb:c0:1f:d2:b2:c0:bf:99:84:
5b:fd:4e:9b:af:20:26:9a:ab:0f:ba:37:42:61:04:b6:97:ce:
f0:aa:5e:af:45:8a:3e:c9:21:5c:89:f9:ae:bb:40:25:0d:cd:
bf:09:3f:d5:a2:40:a5:b5:f4:24:c1:7b:a6:9e:2d:2f:c7:d8:
e8:fc:42:97:37:0d:33:a4:99:68:72:5a:25:04:60:19:ae:d0:
95:97:e8:30:89:98:ae:25:0b:f1:8f:47:de:c8:fd:42:fb:cf:
9a:73:f6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:59:57 2025 by rpki-client