Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa
File: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (raw, json)
Hash identifier: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=
Subject key identifier: E5:56:68:F6:9B:3C:42:96:50:56:0E:D4:2B:33:1C:F8:0A:86:D5:01
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 01942444BE09EF0EB804BBA6E85580C6A485
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2001:678:f8c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:be:09:ef:0e:b8:04:bb:a6:e8:55:80:c6:a4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e55668f69b3c429650560ed42b331cf80a86d501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:32:b4:fd:1b:eb:fb:ca:86:0b:2d:86:49:f4:
86:86:e5:fe:e7:5a:f1:2c:b0:a9:1a:d0:db:65:af:
7f:58:b9:ac:f6:f7:12:0a:d2:57:ef:e5:1f:cb:ab:
eb:ce:96:f4:8e:ee:34:62:2d:de:ae:ca:11:36:0b:
a0:82:af:0e:11:ae:45:5e:a7:aa:ef:84:c6:ea:95:
89:81:e2:7e:58:71:92:c7:44:7b:8f:d2:73:e7:01:
14:6c:ce:32:fa:84:82:cc:6d:ae:77:ab:c2:63:58:
a7:56:a2:f8:d6:1e:00:6f:1d:49:77:6b:84:38:bf:
0e:dc:b8:d7:8e:d3:4d:3e:e7:fc:ce:3b:90:b3:cc:
8c:53:1e:87:18:b3:c6:e1:4f:02:93:4d:91:38:46:
9c:49:1b:e9:f2:2c:1d:24:93:c0:d2:4f:9f:84:f2:
22:31:02:35:63:13:55:13:c1:27:38:f5:b5:ff:d4:
98:a0:b2:9a:09:5d:95:c2:9b:4c:29:55:f5:35:78:
4c:ea:4f:85:fc:87:6a:28:db:6f:7f:2e:3b:54:42:
cf:1d:60:6e:9c:14:82:88:7b:a7:2c:e3:8c:bd:f9:
b0:b0:7d:3f:40:a9:43:be:92:eb:4e:1c:b5:81:55:
f5:13:5c:cb:90:38:83:9d:d9:0c:94:02:8a:64:e2:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:56:68:F6:9B:3C:42:96:50:56:0E:D4:2B:33:1C:F8:0A:86:D5:01
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f8c::/48
Signature Algorithm: sha256WithRSAEncryption
a1:71:3a:16:2f:24:6f:61:cb:d2:6c:64:3f:45:5f:e0:44:06:
f0:33:4c:c1:a5:b7:ec:9f:ca:f7:ea:5e:5a:ec:cb:49:46:bf:
7c:0d:e7:0b:6a:a1:23:99:0f:16:52:7e:cc:8c:18:62:a5:4c:
d3:db:cc:3a:53:d2:b6:10:1f:0a:47:9c:5f:07:de:6b:e7:85:
c8:b4:f1:85:41:44:5f:82:dd:cf:3e:2d:34:17:f5:59:ca:c7:
f5:aa:a7:68:3b:35:76:f3:37:e6:70:0a:ca:f4:55:11:d3:9a:
77:6e:c2:1d:ed:1e:09:3c:fa:f8:c6:53:0f:82:6e:eb:52:d7:
66:97:a2:f9:1b:e8:7e:63:03:47:43:42:7a:f0:da:63:9a:b5:
83:1a:bc:06:6e:0a:5a:65:43:1d:e7:88:c8:7a:ee:7d:1c:3b:
02:94:14:e9:39:9c:12:32:2a:b1:c1:91:d9:8a:1e:bf:05:35:
a6:67:9b:ab:19:7c:38:9a:1b:24:1f:0a:e7:74:e6:0a:a7:9d:
5d:d7:a3:b2:4b:7c:62:60:c7:77:7b:d9:df:91:7d:95:cd:ae:
fb:3e:c9:e2:3f:c8:6b:ea:55:b8:cf:ab:e7:28:fa:31:99:64:
55:54:77:52:1f:72:09:70:84:20:79:3a:a8:07:06:1b:c3:93:
0b:f9:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:35 2025 by rpki-client