Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/5pnldwPETCzwQT8iJkyiSoWD3_k.roa
File: 5pnldwPETCzwQT8iJkyiSoWD3_k.roa (raw, json)
Hash identifier: oJntOrxxRhN9f3IdHJXmdQbwUKQGLcIDOqq/1tPI4PI=
Subject key identifier: E6:99:E5:77:03:C4:4C:2C:F0:41:3F:22:26:4C:A2:4A:85:83:DF:F9
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01942747CE62F19C7689AC0971158349B382
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/5pnldwPETCzwQT8iJkyiSoWD3_k.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44307
IP address blocks: 96.125.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ce:62:f1:9c:76:89:ac:09:71:15:83:49:b3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e699e57703c44c2cf0413f22264ca24a8583dff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:85:36:d6:d5:7a:4b:2b:2a:01:b5:34:05:
74:c6:b3:d0:97:6d:50:52:70:85:c3:78:98:df:36:
ee:a4:6f:a5:3c:87:a2:e0:8c:ec:8f:51:da:74:d2:
d1:e2:e4:2b:7d:d7:03:e5:8f:4a:4b:6a:d0:9c:1c:
ba:62:af:59:e9:11:be:7b:71:38:b7:1a:2e:ec:1f:
e7:69:9b:0b:1e:25:e7:f6:42:2b:69:c4:e8:d4:9b:
6b:a7:ef:58:0c:4a:01:f5:5c:cf:ea:49:4e:47:fc:
e8:9d:6f:77:88:33:cc:ea:f8:85:30:fb:4e:60:30:
da:db:aa:fd:31:9c:ab:fd:32:ad:50:2f:f7:ea:f5:
94:75:f1:9f:3f:70:38:d4:02:d6:44:85:de:ca:e6:
8c:89:0a:bd:df:78:79:0f:c9:e8:be:36:0e:74:b3:
ca:28:dc:e2:b3:22:26:26:d9:c7:51:d1:c6:67:57:
11:53:ca:62:19:bf:1a:0c:14:07:92:96:9e:ac:9b:
fa:57:59:7b:2e:3b:8f:fe:8b:cf:97:7b:bf:7b:35:
e9:c9:07:a7:a7:5b:07:7d:18:62:5e:05:53:c4:48:
fb:32:2b:14:8f:10:60:6e:8d:75:27:bb:41:2d:5d:
b2:df:03:95:37:4f:6a:e7:d6:f4:27:66:c4:a3:a2:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:E5:77:03:C4:4C:2C:F0:41:3F:22:26:4C:A2:4A:85:83:DF:F9
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/5pnldwPETCzwQT8iJkyiSoWD3_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.125.144.0/20
Signature Algorithm: sha256WithRSAEncryption
92:66:d3:41:0e:f5:b9:cf:e4:97:68:9b:19:a3:50:71:1f:b4:
1c:d7:5e:5a:84:56:1d:f0:1a:b6:d4:42:c5:45:5a:29:89:4b:
a8:eb:ca:58:2d:5f:69:9d:e3:b2:74:c1:d6:20:d2:b4:8f:30:
c3:2b:e5:e1:f3:07:fb:3d:ae:ce:3d:47:b6:76:5a:d9:b2:8a:
17:2a:19:a8:55:35:87:fd:fc:1d:8b:98:63:35:ad:41:09:1b:
13:c3:b9:52:ad:ff:18:42:ad:38:c9:13:c4:65:72:d2:ad:ca:
23:5b:19:d2:cb:d9:07:79:33:85:86:a4:42:63:6a:bd:57:0b:
f6:53:46:6e:99:70:6f:3d:a7:63:f6:08:84:60:ba:77:dc:ab:
12:ab:2a:47:93:ba:4b:7b:9c:37:52:41:8c:40:f0:b7:10:51:
e8:9b:ef:36:2a:fe:b2:c9:26:e3:bc:a0:37:f6:9e:b2:48:f5:
e7:d3:fc:78:5e:ac:cd:15:cf:e5:54:2e:84:99:ef:22:c0:b6:
5a:7e:5b:c4:fc:d0:da:27:69:2d:1c:ca:68:33:ab:72:84:50:
f1:53:84:8f:7f:d5:f3:b3:95:38:3f:98:99:57:e2:62:1c:5a:
da:e5:86:97:d2:ba:69:b3:ca:1f:77:90:9b:ae:d3:05:9a:c7:
78:6f:78:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:36 2025 by rpki-client