Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/5fFeuCnP9c1oOEHTnXBZZ5BnM8w.roa
File: 5fFeuCnP9c1oOEHTnXBZZ5BnM8w.roa (raw, json)
Hash identifier: yDLDGysDDqgqhb6WLikdy1EXoOl26sXWpiZCWG5MyOM=
Subject key identifier: E5:F1:5E:B8:29:CF:F5:CD:68:38:41:D3:9D:70:59:67:90:67:33:CC
Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial: 019420D664B383D4DE9B6293A5D0702C81D1
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/5fFeuCnP9c1oOEHTnXBZZ5BnM8w.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1880
IP address blocks: 192.67.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:64:b3:83:d4:de:9b:62:93:a5:d0:70:2c:81:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5f15eb829cff5cd683841d39d705967906733cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:01:df:81:4e:26:b0:d1:0f:58:1c:3d:db:
23:78:3b:e1:6f:02:51:14:aa:ab:f6:f9:cb:2d:97:
09:db:f6:99:c6:5f:9d:b1:ba:04:80:e3:9e:96:9b:
54:c1:df:5a:72:f5:95:ca:d1:73:97:63:bc:f0:39:
fc:e8:18:20:e4:92:bf:6b:df:cd:3e:85:5a:3f:99:
33:c3:76:fd:9b:9e:48:8f:0d:42:04:32:06:80:af:
04:5f:d7:6b:93:00:ef:0a:70:78:b6:e5:8c:73:a5:
6c:6d:36:55:ae:df:ac:1a:37:55:ee:50:21:42:47:
c6:41:36:6e:03:8b:a5:85:d9:a1:d2:87:4e:75:53:
a0:68:ce:8a:c4:d1:b0:bc:18:79:ed:92:f1:ac:66:
54:eb:24:f7:8f:af:c3:cb:fb:13:95:35:17:0a:45:
4f:a3:c4:00:ac:b3:1f:ab:15:b2:9e:b9:ed:a0:9c:
75:ae:a4:db:ad:7e:25:1b:71:94:38:88:9d:6d:35:
af:34:ba:3f:e7:d0:75:a9:3c:fd:c2:3d:8f:bd:20:
9b:bc:20:4d:a0:98:e7:5d:66:de:b9:a6:74:0a:17:
7b:31:6f:0e:5a:a0:d3:93:53:ae:c2:c2:2e:a9:60:
f7:18:36:33:3d:ad:01:8c:6e:dc:ba:50:3f:fb:6f:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F1:5E:B8:29:CF:F5:CD:68:38:41:D3:9D:70:59:67:90:67:33:CC
X509v3 Authority Key Identifier:
keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/5fFeuCnP9c1oOEHTnXBZZ5BnM8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.67.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3a:aa:c7:dc:74:7c:0f:73:e3:5c:4d:5a:fa:1c:81:3e:01:
3f:9b:ae:7c:7a:80:ea:1b:12:e8:4f:52:9a:db:05:02:b8:22:
d1:8c:29:81:a6:1f:d6:37:80:a1:2d:c4:8c:2a:95:42:b0:3d:
67:8e:7e:7d:03:ca:3f:e4:a0:ec:39:02:c5:83:26:0f:94:f4:
2d:cd:be:f6:41:00:fd:b2:10:17:ba:2e:68:f5:fe:31:3c:52:
31:35:17:a2:3e:da:3a:06:03:3c:b1:23:39:25:a8:71:06:3c:
04:b2:06:a4:99:84:4a:bc:de:3f:2a:43:9f:ba:82:e0:1a:70:
26:ca:ff:e0:4e:1e:a4:03:b9:ac:2c:b6:60:b8:4c:00:2e:4a:
57:c1:9e:d9:88:be:e4:d5:3a:7b:ea:b1:6f:67:e3:a5:61:a8:
ed:bb:e2:df:17:d9:38:a8:e1:f9:67:15:e6:f2:cd:7b:2d:a2:
ba:d2:30:80:32:d3:86:4b:2c:68:fe:47:17:cf:7d:53:47:a1:
14:66:43:6b:7a:4f:df:ef:64:09:a1:0c:d3:be:7a:12:d6:28:
48:7f:55:1a:74:bb:2e:26:3f:ef:58:d2:9d:71:f2:38:af:6c:
e3:38:bb:8d:91:a9:8c:d0:86:f4:04:f1:e4:90:ec:83:f8:26:
b2:9d:4b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:16:10 2025 by rpki-client