Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/5zNx-v-R0dhw658zRkRi1JgdCoA.roa
File: 5zNx-v-R0dhw658zRkRi1JgdCoA.roa (raw, json)
Hash identifier: 2nYuUlkjCaE2ERaLEMcHeyMbiesLr5/wiTcVNRBT4ZU=
Subject key identifier: E7:33:71:FA:FF:91:D1:D8:70:EB:9F:33:46:44:62:D4:98:1D:0A:80
Certificate issuer: /CN=823b669a87620faf0c422710e26ee3000c9a9a41
Certificate serial: ED0240
Authority key identifier: 82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtmmodiD68MQicQ4m7jAAyamkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/5zNx-v-R0dhw658zRkRi1JgdCoA.roa
Signing time: Sat 01 Jan 2022 10:56:46 +0000
ROA not before: Sat 01 Jan 2022 10:56:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.243.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15532608 (0xed0240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b669a87620faf0c422710e26ee3000c9a9a41
Validity
Not Before: Jan 1 10:56:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e73371faff91d1d870eb9f33464462d4981d0a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:a2:66:73:67:9d:2d:10:d4:fd:92:7f:ce:
c2:ea:68:22:3b:b8:83:0d:f2:be:16:99:a6:23:95:
69:0c:35:25:a7:5d:82:a4:f9:ac:bf:86:d0:3f:a2:
5d:ec:e6:2f:e0:54:2b:a7:71:99:24:0a:c2:37:dc:
bd:b2:58:d8:61:71:ab:2a:e5:08:47:0d:92:2d:fc:
10:97:f0:84:e2:15:6d:a1:04:07:71:ba:c1:9c:4b:
87:1b:a6:b7:a9:a4:70:bf:b4:ce:85:a9:a1:6a:8b:
89:3e:e8:18:a8:67:42:a2:84:58:70:27:18:bf:b0:
df:3a:87:90:7c:46:85:1e:da:da:49:e7:68:a4:d3:
f1:9d:3d:4f:f3:e3:30:da:ef:90:8c:43:8c:d9:44:
ce:21:cb:7f:7f:9e:2b:6f:df:0d:24:d2:3a:57:68:
b2:45:b3:98:04:8a:bf:e5:ed:23:c8:54:36:3b:73:
5a:e2:b5:0a:0c:dc:d1:c9:35:f8:86:cc:70:3f:9c:
86:3b:b5:e7:84:60:14:59:79:ff:a7:47:6e:19:c4:
5c:a3:62:32:ca:10:b3:65:1c:3a:99:a3:05:4b:36:
1d:16:c7:39:3b:b0:82:02:6b:3f:87:75:e0:61:82:
0f:75:60:6b:5b:a5:35:ff:ab:55:b0:6e:7f:0f:2f:
2d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:33:71:FA:FF:91:D1:D8:70:EB:9F:33:46:44:62:D4:98:1D:0A:80
X509v3 Authority Key Identifier:
keyid:82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtmmodiD68MQicQ4m7jAAyamkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/5zNx-v-R0dhw658zRkRi1JgdCoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/gjtmmodiD68MQicQ4m7jAAyamkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.186.0/24
Signature Algorithm: sha256WithRSAEncryption
63:57:5c:17:25:1e:e3:6d:3a:cf:62:f0:7a:a8:0b:02:f3:77:
4f:46:23:3c:54:ff:31:9f:a8:65:8f:5c:66:ca:14:bb:1f:b7:
4e:f6:ea:e2:95:71:6e:36:ef:aa:b9:21:79:1e:83:02:8a:c4:
fe:12:32:d4:26:57:1b:65:a9:f4:c0:f9:92:a6:4e:64:0d:fe:
89:a1:39:93:60:e4:e5:6b:62:cb:e8:2b:ee:ac:76:cc:8e:41:
07:ee:50:b8:78:76:3e:2a:57:0e:e6:a6:91:8c:1b:8a:d3:39:
a6:34:d8:4b:42:f0:fb:36:61:c2:b0:02:10:14:90:9c:73:51:
1d:55:b8:b5:9a:cc:f0:f8:00:84:20:f9:55:aa:c3:c7:7d:3a:
04:bb:82:8b:2a:80:f6:62:08:16:be:e9:df:71:17:e8:07:8e:
2b:8a:d7:86:7c:cf:5b:d0:22:76:f5:e1:8a:cf:dc:b0:b2:7b:
f4:7e:96:0a:0c:42:cb:5b:a0:03:36:24:3f:be:f9:3e:d9:87:
32:22:ff:4e:16:64:c1:40:5e:66:bc:6c:18:b6:72:26:a3:c6:
36:9d:87:59:f5:15:bd:f2:d0:54:28:7b:5a:f0:b7:33:6f:18:
39:69:fb:65:99:94:d0:15:1c:22:f6:58:39:87:20:77:1a:9d:
d1:61:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:02 2025 by rpki-client