Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa
File: 5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa (raw, json)
Hash identifier: dTmUbt8r9KTK4oCfqPnmc0NkXc8ljy+XbX2k8rf1LxQ=
Subject key identifier: E5:75:33:03:D0:A6:FD:54:B4:97:F2:7E:04:8D:7C:D2:25:6B:B1:24
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01942445371132ACEE9881ED4AF549C384C9
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46261
IP address blocks: 213.139.196.0/24 maxlen: 24
213.139.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:37:11:32:ac:ee:98:81:ed:4a:f5:49:c3:84:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5753303d0a6fd54b497f27e048d7cd2256bb124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:0c:22:6b:f2:cd:82:b4:12:49:98:e8:08:
19:d3:de:16:48:e9:9d:dd:03:74:72:51:d7:7b:5b:
07:c0:34:3d:3c:5a:8d:dd:f5:4b:e6:60:bc:b7:e3:
61:06:c0:81:b8:0a:34:4f:58:38:4f:64:96:7d:11:
23:4c:ef:33:ff:57:c8:e0:9c:45:0c:d5:6a:50:d8:
e2:41:b5:4d:1d:fa:3c:30:d7:ea:ed:62:b9:f8:a6:
55:67:7a:a1:ca:09:8f:c4:42:1d:3c:c1:50:76:e6:
c7:f8:44:ca:d9:da:95:b1:72:17:14:99:eb:a6:7f:
8b:68:c0:55:53:13:96:08:9c:e3:d7:b5:17:2a:a8:
4b:f3:3a:08:e7:67:52:0b:3f:f0:70:6c:e0:9f:7e:
fe:91:9f:d5:92:01:9c:39:6c:93:84:c6:4f:4b:ac:
4f:b2:0f:bb:3e:97:b2:f9:1a:b1:ee:c4:0a:2b:b7:
8a:c8:1b:c2:d1:69:8f:28:30:6b:83:84:a8:d2:74:
52:df:e0:9c:f2:7f:06:34:a5:16:0f:36:76:6e:fc:
48:4a:0e:3f:ad:60:c9:c4:89:46:ad:0b:c3:f0:87:
ee:14:4f:5d:66:46:44:29:56:6f:94:ec:b8:8f:50:
4b:db:85:cd:1f:37:5b:ec:c2:38:38:35:4b:8c:02:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:75:33:03:D0:A6:FD:54:B4:97:F2:7E:04:8D:7C:D2:25:6B:B1:24
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.196.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:ec:c4:d8:29:f8:ca:d5:58:d6:30:09:26:da:6c:6e:46:43:
55:0c:3f:6c:e7:5d:d1:0c:15:84:97:ca:24:29:3c:c2:e8:86:
c3:b4:66:59:bd:bb:7b:a0:7c:85:d9:6f:ee:7d:b6:91:53:00:
2c:b8:a2:a9:fc:63:02:07:de:e2:c5:45:a9:24:a9:a4:48:47:
2f:7a:f0:39:ad:7c:1e:f5:53:e1:b9:7a:69:4f:5c:67:b8:d1:
61:04:19:53:03:f3:34:fa:b7:bd:d6:69:f0:1e:4f:11:48:c3:
db:fb:e1:eb:c1:36:e2:94:26:7d:da:28:70:2b:11:16:0c:66:
8d:a2:04:f0:98:51:21:be:2b:99:0d:84:69:f4:65:bb:da:90:
95:9c:02:de:fb:41:10:62:e7:ad:94:79:cc:c3:e8:7d:30:e6:
56:70:96:17:cc:e7:76:1e:6b:9c:30:a7:7d:77:8a:0f:b6:30:
83:be:22:11:12:cc:48:72:d5:96:a0:c3:e7:e3:80:d1:d5:9e:
bb:d9:88:95:b6:ed:52:03:10:de:ce:6f:d0:4d:46:53:7e:56:
6e:bc:41:2e:8e:15:0e:6d:7e:4b:1f:9b:5c:c1:65:5a:bc:fd:
63:5b:8e:bd:32:6e:cb:fd:9c:b6:40:97:7b:09:3d:27:0e:65:
a1:65:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:26 2025 by rpki-client