Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/5AdDCalEd-YzHX4w1IAlCyoB-QA.roa
File: 5AdDCalEd-YzHX4w1IAlCyoB-QA.roa (raw, json)
Hash identifier: 6nP0b762n+G6Gnn8kPJCF0o77BrgcH5r8ezW+PeiF4M=
Subject key identifier: E4:07:43:09:A9:44:77:E6:33:1D:7E:30:D4:80:25:0B:2A:01:F9:00
Certificate issuer: /CN=9e888901024e8c6b27174da9e03dc8a09dcb8833
Certificate serial: 01856F5DD9BD615CEAB0608070818D9F12DD
Authority key identifier: 9E:88:89:01:02:4E:8C:6B:27:17:4D:A9:E0:3D:C8:A0:9D:CB:88:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noiJAQJOjGsnF02p4D3IoJ3LiDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/5AdDCalEd-YzHX4w1IAlCyoB-QA.roa
Signing time: Sun 01 Jan 2023 22:04:59 +0000
ROA not before: Sun 01 Jan 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 185.248.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d9:bd:61:5c:ea:b0:60:80:70:81:8d:9f:12:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e888901024e8c6b27174da9e03dc8a09dcb8833
Validity
Not Before: Jan 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4074309a94477e6331d7e30d480250b2a01f900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:bd:e9:09:c9:6f:ba:20:29:1c:27:31:e9:
b8:de:85:b7:32:f8:2a:33:fa:8c:ef:6f:92:1a:1c:
c3:20:90:12:ad:56:24:3f:44:06:84:28:ed:fa:98:
48:a5:e7:25:97:4e:f0:b8:11:83:f3:95:58:c4:ea:
f9:37:07:4d:52:3b:87:f2:c1:fd:d1:45:19:30:5b:
ba:4c:7b:c0:ab:d8:7c:c2:51:ce:3c:e6:27:49:a3:
54:74:c5:00:ee:c1:a8:f3:da:53:3d:3c:d8:d0:5d:
35:c5:9b:ed:a1:76:f5:e2:e2:f0:4e:e3:01:6e:9e:
4e:6a:03:00:dc:ea:1e:26:ef:bf:00:ea:ee:6f:0c:
a2:70:7d:58:3e:1c:46:cd:70:35:f6:82:8e:e0:52:
04:67:de:e4:fd:e8:c0:cc:ff:94:97:98:e6:7a:83:
68:be:47:59:f9:19:f9:bc:4b:ab:93:b6:58:99:b2:
0e:cb:84:5a:5a:47:24:38:ba:77:a7:86:9f:c3:c4:
62:83:75:26:fd:4f:fd:48:0a:fc:92:59:c3:8a:32:
94:99:98:ae:e0:27:b7:a3:42:50:63:de:5b:bb:37:
83:c8:7e:58:c9:1f:2b:0e:c4:6a:5b:ec:42:0b:be:
37:7b:9e:09:9b:54:09:4d:8d:d9:67:7d:fd:25:49:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:07:43:09:A9:44:77:E6:33:1D:7E:30:D4:80:25:0B:2A:01:F9:00
X509v3 Authority Key Identifier:
keyid:9E:88:89:01:02:4E:8C:6B:27:17:4D:A9:E0:3D:C8:A0:9D:CB:88:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noiJAQJOjGsnF02p4D3IoJ3LiDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/5AdDCalEd-YzHX4w1IAlCyoB-QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/noiJAQJOjGsnF02p4D3IoJ3LiDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3b:94:8f:3c:db:ec:bd:30:14:1b:90:90:97:60:7a:5b:0f:
04:47:28:d2:29:85:49:6d:33:88:a5:92:e4:f0:33:41:a3:ca:
95:6d:a5:cd:e7:91:3e:43:fc:db:6b:d0:f3:48:4b:4e:75:95:
cf:02:f2:df:53:65:73:68:62:ae:6e:77:7e:33:c1:c1:6e:11:
89:eb:1d:a1:3a:83:1d:8b:73:a9:9f:5f:2a:fa:36:29:60:33:
03:fb:d5:ef:92:1d:13:14:76:21:24:0c:36:52:dc:ed:7e:a7:
27:c5:ce:fc:62:f8:93:58:44:39:d7:e4:89:f9:df:32:37:f3:
6e:89:09:a1:40:ea:00:47:1f:cd:f7:2b:38:1c:31:6a:4a:3b:
bc:50:75:83:6e:c6:7a:da:97:7c:6f:3b:e4:45:3d:11:af:f8:
98:eb:db:95:d7:5d:76:55:4c:32:91:9e:ff:d8:57:b7:51:88:
c2:a6:c3:c3:60:2d:34:de:f4:1d:b4:3b:7d:d3:50:1c:e7:01:
45:e1:b4:68:57:a5:9e:87:ed:d3:c4:36:37:c7:4a:9a:b8:96:
31:44:9b:34:74:d5:4a:0e:2e:e2:ca:08:90:bb:f6:d5:57:a4:
17:56:91:3a:20:e8:81:c7:f8:d7:c4:9d:10:4f:55:a6:f7:b4:
7c:95:7f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:10 2025 by rpki-client