Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/5MPTrLSfLX6fRObwynHPfSAAM0o.roa
File: 5MPTrLSfLX6fRObwynHPfSAAM0o.roa (raw, json)
Hash identifier: adOAZtbI6TpJQzuqE4yqnUFKX9EAaJkaZ7TpRSqv1kc=
Subject key identifier: E4:C3:D3:AC:B4:9F:2D:7E:9F:44:E6:F0:CA:71:CF:7D:20:00:33:4A
Certificate issuer: /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial: 0194221FB76F8D786D41525D8EB34A2C4F4B
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/5MPTrLSfLX6fRObwynHPfSAAM0o.roa
Signing time: Wed 01 Jan 2025 13:48:11 +0000
ROA not before: Wed 01 Jan 2025 13:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 194.143.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b7:6f:8d:78:6d:41:52:5d:8e:b3:4a:2c:4f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4c3d3acb49f2d7e9f44e6f0ca71cf7d2000334a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:dc:b0:03:2b:a7:db:98:1c:e3:e5:34:13:95:
61:d3:04:10:ca:d5:05:2e:55:7b:8d:70:20:41:14:
b6:6e:48:8c:fd:81:a2:27:81:a8:17:d8:af:d7:49:
da:19:15:f3:be:3e:a6:f5:a5:8c:cb:01:2b:45:da:
91:2b:20:35:5a:31:e3:82:7e:a4:4c:20:c2:b9:45:
3b:af:9b:e4:79:55:09:d2:2a:02:cf:5a:35:88:e9:
5d:26:4d:cd:62:fe:40:93:d6:e9:4c:18:a4:58:49:
20:85:96:6d:55:4d:ed:dd:04:f2:98:40:cc:6e:0e:
c5:ad:51:e8:db:93:ef:31:ed:6b:af:17:f6:d7:ba:
bf:d1:fd:4d:b7:94:e1:6e:2b:e4:92:e1:da:2e:aa:
98:8e:07:22:e8:62:61:9e:be:4e:3c:cc:31:e3:bc:
86:d9:82:45:17:27:09:40:22:4e:f9:6c:03:4a:84:
ac:d8:55:72:5c:e7:3f:57:4c:31:bc:ac:7d:f2:70:
b1:82:92:dd:b9:52:87:04:1c:c0:ee:6a:f6:1e:96:
66:9f:1a:9b:49:f6:db:2e:1c:aa:92:58:c0:3f:53:
e2:e5:40:67:a7:58:d5:8b:e9:f9:5a:af:ea:24:0a:
f0:aa:bc:18:62:55:5f:c7:75:71:1c:bd:af:5a:51:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:D3:AC:B4:9F:2D:7E:9F:44:E6:F0:CA:71:CF:7D:20:00:33:4A
X509v3 Authority Key Identifier:
keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/5MPTrLSfLX6fRObwynHPfSAAM0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.156.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:6f:08:23:00:29:3a:21:41:3b:9d:bd:e0:f1:5f:39:d7:d3:
de:80:98:48:97:86:b2:f1:c7:1b:5a:20:75:0c:72:8b:28:38:
f1:50:5b:07:f2:66:72:62:ed:75:72:6d:a7:68:49:66:f8:2c:
d5:7a:a0:1d:c4:6d:ee:b3:19:0c:b0:7f:42:6f:34:c1:db:2f:
96:b3:7a:47:63:37:b3:bb:12:42:74:8c:20:5f:34:94:40:be:
20:5b:66:de:fd:82:59:95:3a:a5:16:fb:04:2d:ce:51:b7:13:
f0:40:91:78:af:ef:62:a6:99:14:f3:13:33:1c:07:5d:58:45:
7c:05:ce:31:54:ca:bd:4c:f9:38:68:bd:21:1b:dc:31:0a:8a:
0d:c6:31:d9:e6:b5:42:d6:29:ce:71:88:6e:ae:b9:df:d8:7d:
d3:79:a0:81:93:85:0c:b2:98:f6:19:7a:2f:29:b3:cc:c4:6f:
38:2b:1a:b0:de:a5:d6:da:28:8f:4f:62:28:4f:9c:01:8c:1d:
d9:3f:a0:da:2e:b1:b7:9c:ec:dd:f4:f6:47:65:4a:50:fb:f8:
53:ba:19:d0:fa:67:25:59:6e:88:6b:54:73:4c:3d:5a:8e:86:
33:31:14:b9:a7:19:68:d0:f1:4c:af:99:e8:2a:50:5e:6a:ac:
1f:fd:cb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:27 2025 by rpki-client