Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1-jFYDqV5WrpeNsOHp1PKwlz6vK4.roa
File: 1-jFYDqV5WrpeNsOHp1PKwlz6vK4.roa (raw, json)
Hash identifier: EQ/MDCmgP9HHmI8iGVKEHtzDiwjBn6MBBAbffCHgFus=
Subject key identifier: FA:31:58:0E:A5:79:5A:BA:5E:36:C3:87:A7:53:CA:C2:5C:FA:BC:AE
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 0194B7068ACF3D7A9523B33AE777DA7DB909
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1-jFYDqV5WrpeNsOHp1PKwlz6vK4.roa
Signing time: Thu 30 Jan 2025 11:44:06 +0000
ROA not before: Thu 30 Jan 2025 11:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 5.39.196.0/23 maxlen: 24
5.39.198.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:06:8a:cf:3d:7a:95:23:b3:3a:e7:77:da:7d:b9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Jan 30 11:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa31580ea5795aba5e36c387a753cac25cfabcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:d1:40:4b:4a:5f:1c:96:ec:bb:72:04:c5:
a1:9f:8b:e1:19:7a:a1:76:b3:1f:c6:4c:b0:68:5e:
cf:c2:dd:70:63:ba:eb:45:51:f8:df:33:8a:06:76:
88:9c:b0:8f:8e:63:1e:2f:e3:35:9b:cd:94:b1:34:
35:7d:31:f4:33:2b:f8:6a:94:f9:ec:02:d3:82:c5:
46:98:8e:e0:4b:ff:da:24:d7:a6:77:1d:be:0c:77:
a2:5a:2d:a8:49:c0:4e:ba:98:0c:c0:9d:e6:b5:e3:
eb:b4:6b:8e:0d:98:62:8e:35:44:67:98:83:24:17:
88:d3:bf:33:46:bb:9a:96:9e:16:9a:7a:d7:43:da:
a1:07:05:79:47:35:0e:8e:ab:87:e7:a0:4c:65:0e:
de:6c:50:b4:7e:21:b4:a2:9c:a8:3f:28:64:53:67:
59:46:8a:8c:99:5f:95:ef:af:fa:ad:b2:c6:af:91:
e8:b2:46:e4:8f:1f:6f:2f:e7:a9:20:48:ef:fa:67:
3a:a9:01:9b:e1:1f:01:d7:5b:a8:23:71:28:91:38:
bb:1c:73:f5:a2:3c:4e:6f:ba:61:a3:df:17:1e:8e:
0e:49:9a:70:cb:87:2d:f3:86:14:85:5f:5c:c9:69:
30:5b:ce:1c:d0:2e:24:4a:49:4d:65:34:ba:f7:53:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:31:58:0E:A5:79:5A:BA:5E:36:C3:87:A7:53:CA:C2:5C:FA:BC:AE
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/1-jFYDqV5WrpeNsOHp1PKwlz6vK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.196.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:05:23:d5:5f:c9:43:7a:83:c4:84:52:84:e2:53:e7:64:0f:
b9:88:01:03:54:a4:18:ca:7e:8f:78:c2:1d:f2:f9:87:35:3c:
4a:7c:34:30:17:36:3f:7e:18:d6:36:9d:0f:98:cb:7e:5b:1f:
7d:be:8c:90:12:ad:58:e2:1b:3b:13:38:c6:37:c4:eb:d7:6c:
01:1a:f8:8f:5d:9b:d0:44:c1:6f:f3:aa:b0:1e:b8:60:27:e9:
f2:06:27:85:e9:0f:42:88:61:8b:e8:7c:c8:f4:cb:51:11:33:
90:ea:2c:f5:88:4b:25:96:a6:28:7a:46:99:54:39:f4:aa:6f:
5b:e6:8b:56:12:fe:5b:54:45:4d:61:c4:ac:d1:5b:3a:76:54:
7c:54:60:c5:68:0a:cc:d2:d0:05:c8:34:95:c7:9f:6d:d9:98:
95:24:a6:45:dc:d3:6c:76:da:c6:f7:81:d5:6d:65:9b:f2:10:
e6:ce:fe:3f:df:49:5d:6d:6a:fe:20:af:1f:57:2a:c5:e1:5e:
c2:0f:b2:0c:34:69:11:b3:94:c4:1f:44:f9:4c:21:d9:76:36:
60:46:04:aa:e1:7a:6c:a4:d6:09:5b:78:d2:4f:a8:47:7d:9a:
60:82:f6:fe:0d:6a:39:cb:ca:0d:06:aa:94:a4:8b:b1:33:6f:
0a:07:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:27:16 2025 by rpki-client