Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/e2cInBTd-rmGJiE7XxhPPld1Ulg.roa
File: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (raw, json)
Hash identifier: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=
Subject key identifier: 7B:67:08:9C:14:DD:FA:B9:86:26:21:3B:5F:18:4F:3E:57:75:52:58
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0194228DEBE3159FAB1BB771FFA3BE86070D
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/e2cInBTd-rmGJiE7XxhPPld1Ulg.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 5.134.192.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:eb:e3:15:9f:ab:1b:b7:71:ff:a3:be:86:07:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b67089c14ddfab98626213b5f184f3e57755258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:88:04:9d:e7:02:2a:18:dc:12:5a:61:6c:
7a:cd:e8:cf:75:a4:46:5a:8e:a0:b8:0c:a9:36:4d:
11:76:ca:13:e9:1b:07:1a:a5:95:eb:c0:9d:7b:7f:
1e:08:f9:63:26:bd:1e:5b:df:35:e8:f6:84:31:3c:
98:30:31:5b:cb:22:2e:84:94:0c:cf:0c:11:3f:6e:
22:d9:04:a2:c6:7f:86:f9:0e:39:9f:69:74:0d:3f:
c4:ae:2f:45:02:73:c0:a8:dd:48:c9:7a:03:41:53:
2a:0a:c3:91:22:55:30:0f:a2:1c:09:73:f9:04:6b:
6b:5f:af:26:88:bd:c7:37:60:e5:0a:20:c2:18:4b:
5e:28:96:96:c5:0e:3d:d2:4f:94:b1:2c:eb:78:6c:
a1:ba:76:eb:78:cb:84:f8:cb:50:7d:54:5a:46:8c:
63:2e:06:fe:37:fb:3d:71:ac:c6:86:85:07:c4:56:
12:bb:ce:91:65:14:a5:1d:46:25:3e:1b:07:53:ca:
40:7e:bf:a3:6f:9f:c3:25:7e:36:c5:04:db:80:16:
52:b6:47:b9:b4:ec:28:08:1f:b7:53:c8:7d:63:4d:
3b:58:30:d5:8a:2e:0e:1a:9e:99:c8:4f:a3:db:c2:
57:bc:c1:b2:0c:98:5b:5e:c3:02:1c:67:84:bb:65:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:67:08:9C:14:DD:FA:B9:86:26:21:3B:5F:18:4F:3E:57:75:52:58
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/e2cInBTd-rmGJiE7XxhPPld1Ulg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.192.0/21
Signature Algorithm: sha256WithRSAEncryption
cc:04:92:0f:23:03:fa:a7:50:2b:db:90:4d:fb:fe:40:b4:ae:
57:53:a5:f6:bf:76:d0:af:f6:97:ec:88:1b:1a:ad:50:1f:7c:
95:f6:58:38:6e:9e:65:38:c3:85:04:48:55:13:fe:84:c6:7e:
dc:58:e4:c3:80:d9:62:b0:65:13:f5:30:a6:4e:d4:ef:75:29:
db:4b:01:88:9d:f5:8c:66:be:20:48:8a:3e:6f:18:4c:5f:dc:
31:12:eb:2b:fd:4c:b0:79:da:8d:71:9c:62:04:43:c9:b3:a4:
68:ad:42:55:a8:52:40:c1:46:21:1c:1e:ca:44:5d:41:b8:9b:
a7:b3:70:f3:27:d1:f9:a2:9a:75:a2:52:e8:fa:5f:2d:32:06:
26:9c:46:51:e0:0d:36:e8:d2:a0:e2:90:b5:86:30:92:73:a8:
b5:8f:8c:e8:0d:ec:74:05:9a:e5:ab:46:20:31:18:3b:99:b2:
2a:22:6e:af:1c:3b:00:d2:50:e7:b1:e7:bd:bf:70:87:88:6b:
80:68:cd:ed:4c:fe:01:c0:0c:67:92:94:f2:c6:09:e7:e9:44:
34:16:d1:cc:6c:ea:63:5b:53:b0:c3:f0:01:a7:37:01:1c:a4:
b6:3d:5c:cd:a6:6b:b4:25:da:50:89:cb:fe:36:01:67:c1:00:
00:72:4e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:35 2025 by rpki-client