Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/5Elb_Twu7609560mp2pYTFCB0fU.roa
File: 5Elb_Twu7609560mp2pYTFCB0fU.roa (raw, json)
Hash identifier: d5hdj3rVG4yjk25ygUF2sJJkPuwjJqaYKvfjXMLhYeI=
Subject key identifier: E4:49:5B:FD:3C:2E:EF:AD:3D:E7:AD:26:A7:6A:58:4C:50:81:D1:F5
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 01955BABCA9F8B457141DAFFB6F9FD6AD9BD
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/5Elb_Twu7609560mp2pYTFCB0fU.roa
Signing time: Mon 03 Mar 2025 11:02:20 +0000
ROA not before: Mon 03 Mar 2025 11:02:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 178.236.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:ab:ca:9f:8b:45:71:41:da:ff:b6:f9:fd:6a:d9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Mar 3 11:02:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4495bfd3c2eefad3de7ad26a76a584c5081d1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:a4:81:5e:f3:16:52:15:b8:bc:ef:bc:ad:
e6:5d:2e:a2:f3:42:b0:2f:42:cc:70:72:d5:c3:1c:
41:f9:d6:94:74:b3:65:39:f6:70:6c:7c:99:94:81:
d7:58:c0:f3:d1:5f:69:07:11:3c:db:39:de:ea:db:
d8:de:1e:b9:4a:0b:9e:23:e5:11:6a:cf:d4:90:51:
ea:14:de:c2:6f:9d:cf:5a:9f:d3:a4:8e:c9:c7:be:
94:36:a9:27:55:23:7e:2e:44:36:ee:3f:4a:bf:cf:
db:ff:f5:6f:98:78:3d:13:09:24:82:2a:b9:40:56:
ba:c1:f7:20:11:02:ea:bd:b8:25:52:84:9f:25:ac:
74:92:d7:5f:6a:48:ac:6c:6d:a3:7f:fa:e7:ab:3b:
4c:ee:b1:a5:35:14:6e:65:8d:13:fa:72:75:4c:94:
3e:12:f0:76:a5:c0:dc:c2:1d:5c:b5:f3:87:bc:f2:
5e:b0:39:75:c4:91:c7:61:0a:17:97:d1:60:97:72:
2c:d3:6e:a2:29:17:9f:f9:58:be:67:4a:22:3e:5e:
8e:33:90:3d:b5:88:e5:f0:4b:35:59:d4:fe:bb:a9:
84:fd:a7:4f:da:6f:5a:c6:4f:95:1f:be:5a:17:16:
c2:f4:32:bd:96:fe:91:5c:c0:a2:0d:4d:e1:90:e3:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:49:5B:FD:3C:2E:EF:AD:3D:E7:AD:26:A7:6A:58:4C:50:81:D1:F5
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/5Elb_Twu7609560mp2pYTFCB0fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.233.0/24
Signature Algorithm: sha256WithRSAEncryption
42:11:a2:11:a2:33:00:c4:3f:7d:e9:f7:c7:07:fa:13:73:64:
e8:f6:1b:0f:48:cc:61:ea:43:b2:07:7c:a6:d0:b4:e0:05:ed:
f3:b3:c1:92:74:3b:cd:ca:00:01:c0:90:e8:81:dd:7e:b4:ae:
7c:0a:a5:6a:a2:c7:68:10:99:4e:48:3c:b3:b0:57:ed:2c:b3:
ba:10:5d:a6:50:1a:f4:14:fc:d2:1d:67:4a:15:4b:5b:5d:95:
92:d9:aa:6d:eb:7c:99:03:7c:44:ea:56:13:5a:f9:4e:1c:c1:
05:3e:57:66:cb:c1:e4:c1:99:5f:c2:69:76:63:32:39:f0:55:
fb:fe:a9:52:4c:78:92:ac:72:0f:14:67:1f:05:45:f0:2b:6f:
68:17:c9:2d:85:2d:ee:4d:1c:9f:69:a7:0f:1d:c7:6b:f6:5b:
fb:b7:73:fe:d6:97:7a:d0:03:ef:90:82:bb:61:6c:4c:25:f2:
7f:2f:79:6b:da:b4:41:c2:ef:47:84:27:7b:6d:d8:e2:d8:9c:
28:71:62:e1:01:24:8d:35:fc:56:ea:96:ab:e7:1b:0a:ad:aa:
18:7b:51:79:63:07:76:ad:18:05:98:b4:ac:a1:21:e5:f7:f5:
22:95:84:ed:4d:22:2a:59:41:98:17:7e:c9:6a:9b:4a:63:4b:
1c:47:d9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:02 2025 by rpki-client