Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/5e-_Trj6W_VvY6i2dnnp3w-mcfM.roa
File: 5e-_Trj6W_VvY6i2dnnp3w-mcfM.roa (raw, json)
Hash identifier: rbJ/g1lxaGdX1l1Qsb1CM90SCy/vuc2QYKPLcuERRRA=
Subject key identifier: E5:EF:BF:4E:B8:FA:5B:F5:6F:63:A8:B6:76:79:E9:DF:0F:A6:71:F3
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 0194258F36E10C7BA3BD5A487F7FB940257B
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/5e-_Trj6W_VvY6i2dnnp3w-mcfM.roa
Signing time: Thu 02 Jan 2025 05:48:50 +0000
ROA not before: Thu 02 Jan 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 185.102.24.0/23 maxlen: 23
185.102.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:36:e1:0c:7b:a3:bd:5a:48:7f:7f:b9:40:25:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5efbf4eb8fa5bf56f63a8b67679e9df0fa671f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:12:3d:3a:25:ef:00:95:2d:b5:f6:49:f5:
b8:0e:62:9d:a1:38:8d:30:ed:b3:5f:9d:1e:8b:68:
70:0d:cc:e8:e3:f2:88:f4:8d:ec:5d:fe:7d:c9:6f:
bf:9c:50:b7:e0:e0:ed:15:98:e9:f8:04:ba:c4:0a:
8a:a8:5e:06:a3:92:0c:d2:a2:49:ee:0d:d6:81:ea:
93:29:55:46:86:d6:40:90:55:47:e4:dc:dd:a3:65:
ab:50:bb:f7:96:5e:71:29:3e:2c:9b:05:ea:56:30:
2e:a2:9b:65:32:3b:a9:90:ef:1c:c6:da:dc:1c:01:
b6:f4:61:3e:12:e6:18:90:ed:5a:c8:5a:94:dd:42:
a0:36:79:fe:7b:05:d0:3e:bb:d4:f0:dc:2c:e5:8d:
b5:5f:00:2e:2d:3a:d4:ff:e7:2c:b2:88:62:df:c1:
83:53:94:cd:0c:5b:46:d5:2e:49:9f:29:7a:6e:2d:
b0:d4:2c:24:52:91:a6:72:a9:a8:0e:28:de:73:32:
f5:0b:66:bf:ea:79:1b:59:63:b6:e2:ac:bf:7c:e4:
0b:90:37:55:96:ee:66:b5:5b:82:cd:59:bf:4f:53:
11:6a:88:e7:d9:1b:2e:45:d1:05:fa:b0:8d:f4:fd:
70:eb:93:4e:e7:d2:76:5f:59:1a:97:94:1e:9f:87:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EF:BF:4E:B8:FA:5B:F5:6F:63:A8:B6:76:79:E9:DF:0F:A6:71:F3
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/5e-_Trj6W_VvY6i2dnnp3w-mcfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.24.0-185.102.26.255
Signature Algorithm: sha256WithRSAEncryption
54:a1:4a:64:a2:d6:79:5e:55:03:3c:4f:5a:84:7a:56:77:ba:
d8:2c:44:ea:9a:f0:27:03:72:81:99:5a:0a:cc:12:06:4a:b7:
00:b9:5d:fd:90:5b:d7:57:c5:7b:66:dd:b3:05:73:69:5f:71:
74:a1:3d:e7:6e:44:b0:b8:d8:f2:71:0c:41:b4:f4:6f:f1:3b:
1a:49:a2:89:3b:7e:3d:4c:a6:45:00:f5:bc:ce:2a:47:8b:c3:
85:6c:28:cb:92:2a:1d:dd:b1:eb:71:c7:a2:76:5f:b3:02:0f:
4f:16:7d:30:62:90:c1:76:77:67:37:34:e2:6b:f9:13:d7:5a:
ff:a6:ce:52:80:bb:ff:7b:69:6d:44:28:7d:cb:a3:07:48:38:
5d:a1:bb:3d:f6:a6:12:a2:bd:f2:e6:b8:ef:70:a9:a2:29:9b:
6b:2f:bb:d7:22:a8:70:c3:3d:ec:82:b0:54:dd:6e:13:5a:0d:
66:9b:f1:b6:00:53:3b:b4:c4:3e:11:95:bb:5e:a0:9c:b1:cd:
5b:31:8f:e6:f5:fd:13:d0:63:b0:e4:10:4d:83:12:9d:af:a9:
a7:98:c8:a2:5a:a2:b0:9e:06:1f:70:92:05:24:a3:15:a9:ab:
af:74:ae:1e:8e:c6:3a:ff:8c:70:c8:e1:1c:46:54:f6:58:69:
96:09:a5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:18 2025 by rpki-client