Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/W5_MS3jBPdXrXt2CXzKVEDSySg4.roa
File: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (raw, json)
Hash identifier: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=
Subject key identifier: 5B:9F:CC:4B:78:C1:3D:D5:EB:5E:DD:82:5F:32:95:10:34:B2:4A:0E
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 019427487134F8D75FD269E5602364C20574
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/W5_MS3jBPdXrXt2CXzKVEDSySg4.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208930
IP address blocks: 81.6.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:71:34:f8:d7:5f:d2:69:e5:60:23:64:c2:05:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b9fcc4b78c13dd5eb5edd825f32951034b24a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:ab:40:dd:29:0f:7f:ca:03:15:f8:af:08:
a0:64:66:86:f6:64:d3:6b:38:fa:5a:a8:60:a0:0a:
f7:2c:fc:ba:90:31:ea:89:84:dc:ea:83:6a:77:63:
ff:43:47:2e:98:d7:56:a5:fc:0b:ad:19:c6:da:24:
82:c0:55:15:6b:bf:3d:f8:f3:1d:3f:7e:51:a9:42:
2f:ea:08:c1:a4:91:c8:b2:36:49:a4:32:76:fe:d4:
2e:f8:f3:dc:31:ce:93:7a:dc:3d:9f:6e:8c:23:58:
d8:04:ca:80:ec:4a:c9:79:0c:1d:08:bf:1e:a7:c7:
07:fc:05:2e:c8:c3:d2:0b:d9:88:43:b1:65:85:8b:
fb:82:28:1c:b3:f0:52:d5:e9:6a:c7:12:78:90:03:
f1:67:ff:4f:4f:d2:78:d0:39:66:87:0c:4d:92:ed:
bd:1e:9c:f5:0e:85:0f:6a:a0:06:c0:66:6d:cb:0f:
c2:04:59:6f:c9:f5:09:4d:0a:94:da:90:d9:d5:dc:
85:03:2f:9b:6d:35:b2:50:35:91:f0:df:98:dd:9e:
6a:e9:28:c6:7b:12:7f:78:ef:dc:c3:a6:af:af:5f:
af:37:df:00:f5:42:04:f7:e2:b5:6e:4d:f7:39:55:
b4:35:7a:3f:7b:68:cf:46:6a:b1:ec:52:fe:cb:8e:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9F:CC:4B:78:C1:3D:D5:EB:5E:DD:82:5F:32:95:10:34:B2:4A:0E
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/W5_MS3jBPdXrXt2CXzKVEDSySg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.6.136.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d1:80:05:be:cb:41:90:c7:68:5f:4d:47:1e:de:86:ac:66:
84:e1:e6:de:a5:42:80:92:68:e0:54:64:a6:c6:40:ee:99:eb:
91:f2:37:35:ff:ed:8a:e7:59:a1:1e:50:b7:dd:a3:75:05:b2:
ef:ae:08:af:f7:1b:b9:75:a0:b5:fd:62:a4:e2:0b:17:cd:dc:
f4:2b:80:a3:ed:19:0d:1b:03:cb:02:31:41:26:1a:61:9c:c9:
9f:a4:05:c3:f5:e6:77:86:c5:e8:fb:06:2b:ce:91:60:94:2e:
f4:b7:10:de:88:59:91:4f:e4:5e:3d:47:af:a8:af:42:3f:44:
73:93:ed:16:29:02:f5:92:da:ef:19:dd:a8:87:d4:8e:d5:64:
44:05:14:c0:6e:31:55:3b:97:dd:ad:5a:a5:14:68:10:3c:22:
b5:aa:40:df:24:4c:a4:4b:3c:74:25:5b:cb:97:63:9a:b2:62:
6d:79:56:4a:78:4f:59:8b:69:80:e0:9e:4d:cc:f2:9c:be:12:
33:1c:1f:49:9e:47:e9:97:37:ee:9d:e1:d9:30:cd:08:86:d5:
4f:2e:ba:9b:ed:9d:8f:b7:44:33:19:d9:8c:35:a6:2e:3d:a6:
c7:97:5f:83:48:c3:c8:19:a6:74:51:2c:21:8b:a9:f4:67:5d:
2b:46:39:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:31 2025 by rpki-client