Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/5tPAApTwknAaRXxKmBtwLwGK11k.roa
File: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (raw, json)
Hash identifier: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=
Subject key identifier: E6:D3:C0:02:94:F0:92:70:1A:45:7C:4A:98:1B:70:2F:01:8A:D7:59
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01941F8C5602969855D99FCE3786C4359CCF
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/5tPAApTwknAaRXxKmBtwLwGK11k.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213094
IP address blocks: 185.74.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:56:02:96:98:55:d9:9f:ce:37:86:c4:35:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6d3c00294f092701a457c4a981b702f018ad759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:f4:ab:91:62:3a:9d:10:dc:5b:0b:e8:cc:
e1:f1:1f:50:4a:1f:b7:e9:15:bd:02:38:7b:ac:06:
1c:fa:29:59:7e:ff:81:95:91:39:fa:f2:8a:40:20:
2d:f2:ed:8a:12:40:c3:62:4e:81:32:b1:21:c7:b0:
7e:6f:74:4e:23:1e:1b:b9:63:0d:24:76:2d:dd:71:
8c:45:02:6f:3e:f0:3e:d2:f1:25:b2:41:67:22:34:
48:54:82:08:dd:d9:7e:68:f8:72:d5:27:27:1d:e4:
1b:e5:de:b7:e9:2c:70:65:9b:5a:59:de:7a:8d:0d:
55:62:a5:12:df:7b:15:41:3a:92:c1:6d:3f:cb:15:
36:54:07:e7:12:dc:17:eb:ee:88:3b:90:e1:26:9e:
cf:03:db:f8:e0:7b:6a:8b:32:8a:bb:25:03:e8:3f:
9b:f6:fe:5a:a4:e0:b8:90:e2:a6:7e:7a:57:fb:a1:
56:fd:70:66:79:42:fa:f4:56:1e:87:16:22:65:fb:
9b:b3:fe:83:b5:34:be:60:73:3f:07:7c:05:57:ee:
a5:f9:de:30:33:0e:df:09:fc:48:fc:f4:ad:95:98:
55:cd:95:5d:e7:b9:47:d1:95:c7:66:69:1e:8a:83:
36:45:c0:fa:05:36:d7:29:d5:e6:5d:fb:6e:86:1e:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D3:C0:02:94:F0:92:70:1A:45:7C:4A:98:1B:70:2F:01:8A:D7:59
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/5tPAApTwknAaRXxKmBtwLwGK11k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.52.0/23
Signature Algorithm: sha256WithRSAEncryption
25:70:95:57:26:95:fa:c5:a9:a1:21:37:a8:7e:54:a7:3e:b5:
82:02:56:0f:02:66:45:d1:d9:d1:69:14:4e:71:3d:db:29:d4:
62:2c:45:92:8d:cf:ef:c7:fb:67:bf:74:de:c4:c3:6e:0d:88:
88:39:87:02:b5:9e:44:d0:cf:2c:a7:f6:76:8c:74:5d:28:35:
22:cd:a7:26:68:3e:48:a7:78:68:f1:6e:a5:27:17:df:4d:6f:
fb:4c:48:50:1c:3e:2c:2b:47:3c:a5:7f:ec:b5:64:86:6f:67:
07:13:6b:c3:36:b7:b6:36:56:aa:5d:82:be:4e:ee:db:9f:ea:
c6:ff:09:dd:87:8e:54:4a:b3:7c:e8:e5:d0:73:86:04:1b:75:
2d:d6:8e:a4:e7:71:19:ed:9c:22:69:d6:99:58:64:10:7e:0f:
13:d2:b6:0b:ed:e0:29:fd:75:d6:fa:62:8a:79:a7:c0:6d:18:
a0:64:55:e9:a2:93:6e:4a:81:5c:50:2b:13:ca:1a:89:da:34:
18:d2:16:1f:5c:ab:a7:2a:72:1f:dc:e0:7e:8a:da:40:49:d4:
b1:93:37:7a:50:27:85:a4:12:f3:62:d6:45:ec:37:2f:04:87:
18:c3:56:44:35:48:9c:d7:c8:dd:79:12:a1:ab:8a:3a:b5:c2:
4d:cb:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:56 2025 by rpki-client