Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/eJWXMxmrCfN9RZ45U28fgOl00no.roa
File: eJWXMxmrCfN9RZ45U28fgOl00no.roa (raw, json)
Hash identifier: 9IarL3LxnHvbLGyv/ZM+4CdlNfL5kiOpBatKAjutOG0=
Subject key identifier: 78:95:97:33:19:AB:09:F3:7D:45:9E:39:53:6F:1F:80:E9:74:D2:7A
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 018E4135859CA42A190AF67034082A6BA50D
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/eJWXMxmrCfN9RZ45U28fgOl00no.roa
Signing time: Fri 15 Mar 2024 08:23:30 +0000
ROA not before: Fri 15 Mar 2024 08:23:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34643
IP address blocks: 5.253.181.0/24 maxlen: 24
5.253.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:35:85:9c:a4:2a:19:0a:f6:70:34:08:2a:6b:a5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Mar 15 08:23:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7895973319ab09f37d459e39536f1f80e974d27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0a:11:66:c5:c4:39:b5:98:21:5e:d8:6f:54:
de:2f:8b:a4:eb:09:4b:1f:06:6a:43:3a:51:f3:f1:
65:c7:24:f9:10:4e:5d:a8:5b:3d:a4:8f:54:c5:41:
69:d4:46:be:be:e0:d6:9b:90:d6:25:71:80:ff:e9:
a8:60:2d:ff:81:8b:b2:6e:60:21:e1:57:16:d0:26:
81:c7:dd:d8:e4:33:1d:09:34:04:68:b7:ff:ac:39:
54:cc:00:6c:37:6a:67:9b:9f:aa:36:7d:bd:42:6e:
90:ae:70:b2:0e:6f:d4:6f:5d:1c:b9:63:4f:60:2b:
5a:92:cb:4d:d3:65:91:2f:97:a3:be:a6:48:97:7f:
1d:6d:c1:16:64:c3:ac:ee:19:9b:ca:7e:ff:16:4f:
b0:65:42:cd:70:1d:98:d8:39:45:8c:54:f9:f3:ee:
14:c1:b9:44:e1:2d:2e:24:72:02:12:c0:5e:9b:b7:
58:08:73:21:73:18:c8:fe:d6:b1:60:58:c6:74:6f:
81:d4:39:f4:d2:be:f7:f3:90:56:a9:36:d2:5b:e0:
44:10:07:f6:63:de:d6:dd:33:01:d4:6d:24:9d:03:
16:30:5e:6a:0c:90:f8:d7:99:7f:3e:42:92:b8:71:
b4:0d:d6:7a:87:e6:59:bf:9f:7d:fc:db:04:ef:42:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:95:97:33:19:AB:09:F3:7D:45:9E:39:53:6F:1F:80:E9:74:D2:7A
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/eJWXMxmrCfN9RZ45U28fgOl00no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.181.0/24
5.253.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:4a:17:a2:5d:77:64:21:79:66:49:59:0e:1a:71:cf:a5:89:
51:53:ba:1d:98:19:36:7e:b1:ca:5c:5a:ad:9c:43:d5:e1:29:
99:50:50:6c:50:a2:79:50:59:21:cf:82:a4:01:d8:74:bb:23:
60:05:04:25:36:f3:48:19:d9:aa:72:af:37:c9:e6:88:87:76:
22:c5:a6:e5:f2:f6:83:5c:fc:3c:95:ae:a3:46:1b:63:03:15:
3c:52:6d:65:47:0c:b0:65:67:ef:a4:3b:30:f8:71:06:53:24:
2a:a1:d8:3e:36:c1:c0:21:66:91:d9:d7:e7:b7:be:8f:2a:38:
25:36:ff:78:39:d4:32:a9:12:91:74:e9:4b:68:08:8b:6e:88:
df:7d:02:27:9c:5e:f4:8b:e1:d4:cd:b1:09:6b:22:85:67:63:
3a:8a:1b:e5:f1:40:44:1f:de:98:18:5e:12:5e:36:e0:d3:30:
5f:89:61:40:79:25:a4:e2:90:55:a2:9d:41:0f:4b:68:ef:26:
db:f8:b3:b7:7b:e4:9a:1a:a8:33:25:3a:24:47:11:38:0b:a6:
22:23:1d:d5:c0:19:62:ce:75:eb:00:bc:67:cf:37:f4:0c:9e:
cc:c8:b5:ee:0b:99:18:a1:75:fd:fd:3c:06:fe:db:70:88:41:
36:9f:8a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:31:36 2025 by rpki-client