Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa
File: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (raw, json)
Hash identifier: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=
Subject key identifier: E5:65:BD:97:94:9B:53:B5:DC:E5:DC:DC:24:F3:A3:9E:1F:93:8B:59
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019427B40CDF4BAE79D20DE7A677F240E0AA
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa
Signing time: Thu 02 Jan 2025 15:48:18 +0000
ROA not before: Thu 02 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56913
IP address blocks: 85.237.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:0c:df:4b:ae:79:d2:0d:e7:a6:77:f2:40:e0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 2 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e565bd97949b53b5dce5dcdc24f3a39e1f938b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:bd:e0:1a:4f:f7:7c:84:90:0a:cc:1e:87:
00:de:ac:09:bf:f2:38:d5:db:b4:5d:36:4d:e7:61:
c0:90:cb:fa:64:44:25:10:0b:50:6d:71:bd:6b:52:
cb:47:78:8e:49:b1:09:11:e8:6d:13:fa:a9:1b:a7:
66:be:16:ca:21:bb:d3:40:03:4c:47:30:58:d4:ea:
be:a4:ea:05:b5:78:71:92:43:88:7d:31:38:87:4c:
d1:3e:63:94:30:81:cc:30:c2:b0:55:b4:f0:bc:d4:
2e:1f:1e:b7:dc:0e:7d:82:15:2f:5b:00:a0:df:a9:
dd:9c:8f:c7:ff:45:7d:a6:2d:a3:17:91:a2:86:e9:
1b:7a:9b:d7:c5:9d:4c:e3:d5:a7:43:bb:47:8a:91:
11:62:53:56:f4:f6:2f:c7:80:5c:9c:e2:7a:c3:05:
95:5a:ed:22:15:70:d7:de:e3:4a:b8:21:45:26:66:
30:78:0b:3b:b7:6d:c1:b0:fe:d9:a0:82:0d:ca:24:
f9:da:19:7e:f0:5d:6b:55:83:95:2e:0a:be:8d:52:
fb:9f:b9:73:bd:e3:d0:7f:17:a1:68:9b:24:59:e5:
08:27:69:57:ed:eb:45:6d:4a:47:de:00:07:a6:36:
6c:11:71:a7:91:4e:bd:62:2d:95:11:d0:4b:a1:4f:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:65:BD:97:94:9B:53:B5:DC:E5:DC:DC:24:F3:A3:9E:1F:93:8B:59
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.71.0/24
Signature Algorithm: sha256WithRSAEncryption
51:10:55:74:6f:98:87:ce:c1:80:5c:37:b8:ea:67:3d:c5:d1:
ca:81:54:80:41:23:1f:b0:e4:a6:aa:af:f1:d4:59:14:c6:31:
a1:01:00:41:39:c6:d4:3b:2c:b9:4f:6a:93:1e:ad:35:76:28:
c2:b4:c0:35:2d:bd:7a:85:93:64:e6:aa:3d:2c:f6:a6:61:e3:
0c:aa:f9:8b:47:d4:d1:41:2d:1d:e3:69:4a:8d:78:12:5e:4b:
f2:9d:03:ba:9d:78:7d:20:0b:65:a3:c1:67:fd:f6:d2:88:8e:
5f:14:8e:ee:74:08:78:5b:90:b2:92:61:89:89:bd:8b:ee:83:
18:2a:67:ac:6d:ea:f0:1f:44:60:d7:a2:f1:f8:8d:de:53:0d:
ae:0b:02:86:7d:3c:95:7b:e7:cb:88:68:b8:28:fe:c7:66:e7:
e0:87:d5:70:e9:8a:a2:1f:fb:8c:73:4f:ec:ca:8c:8c:b9:54:
26:4b:87:de:7d:1d:4b:20:5b:43:3e:32:76:ec:d1:79:d8:58:
17:a4:03:a6:e6:fd:7a:73:fc:ec:96:a6:b4:b5:30:83:6f:aa:
8d:ee:d7:15:30:04:29:a0:a7:9b:1c:13:6f:92:e3:34:14:38:
36:31:1c:df:d4:37:22:2d:e1:8e:ad:de:e9:37:a9:21:00:80:
85:90:81:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:32:34 2025 by rpki-client