Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5cwj5-aEF6-JlYmkFNyDfkAf2dI.roa
File: 5cwj5-aEF6-JlYmkFNyDfkAf2dI.roa (raw, json)
Hash identifier: hYinG61vYnZvzxKX1th799FOn+dBr+RdfMWIodNVaPw=
Subject key identifier: E5:CC:23:E7:E6:84:17:AF:89:95:89:A4:14:DC:83:7E:40:1F:D9:D2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428249742D6E1EB6B096AE4A31D35F2E7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5cwj5-aEF6-JlYmkFNyDfkAf2dI.roa
Signing time: Thu 02 Jan 2025 17:51:14 +0000
ROA not before: Thu 02 Jan 2025 17:51:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 45.95.1.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:97:42:d6:e1:eb:6b:09:6a:e4:a3:1d:35:f2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5cc23e7e68417af899589a414dc837e401fd9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:f3:22:e7:4a:d7:11:8f:d8:ce:0a:e4:b2:
ee:d3:bb:c8:04:2f:43:5f:7d:84:c4:d4:99:5d:eb:
f6:76:0d:f1:f8:6c:8e:29:ec:16:c4:f1:4c:54:f5:
80:c3:3b:4c:54:d5:0c:55:2e:69:18:b1:e0:2f:1e:
42:a9:cc:17:a2:9e:7f:83:c3:b1:8a:05:fb:49:51:
0d:36:c6:e0:00:ac:29:35:98:ba:0e:92:0b:eb:c3:
be:83:52:d0:5a:98:8d:49:bc:9b:c1:36:c5:d7:37:
b5:ba:3b:db:82:d7:ec:69:10:f8:52:eb:24:6f:9a:
47:ea:9d:a4:19:da:5d:34:2d:09:a8:1c:b7:71:7a:
5e:05:30:1f:15:e5:35:c3:cf:de:2f:45:76:14:ff:
98:b5:31:3d:0a:5d:b0:c5:8f:4f:f7:2a:1e:0a:df:
74:bb:f6:d0:04:96:4b:ec:b2:e0:43:e1:cb:8d:b7:
0c:18:cb:6b:33:a7:d9:f0:94:85:33:76:0f:5c:85:
45:c1:37:dd:9c:e5:5c:6c:8b:1b:62:65:59:94:e2:
23:43:e1:36:6f:34:87:49:6d:f5:4a:49:4d:32:13:
66:e8:ad:59:6c:50:0e:ae:c6:48:49:6d:d8:41:b6:
35:62:67:92:83:dd:57:56:cf:02:54:28:0b:79:d4:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:23:E7:E6:84:17:AF:89:95:89:A4:14:DC:83:7E:40:1F:D9:D2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5cwj5-aEF6-JlYmkFNyDfkAf2dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.1.0/24
87.121.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:56:52:cd:5c:4c:29:d0:da:25:f4:98:98:38:d4:50:39:ae:
6f:44:1f:0a:08:59:94:01:75:8d:46:da:62:a9:93:f0:5d:86:
dc:0d:6c:7c:bd:e0:0e:6c:2a:9e:23:06:af:4b:d4:ef:ae:73:
51:53:e6:8d:bf:de:b0:a2:c0:c8:5f:62:34:30:7c:fc:b9:83:
6b:f4:1c:9c:68:42:cd:dc:e8:f7:d9:ae:3c:13:f6:29:64:46:
81:1f:4d:6d:38:19:89:c3:22:52:72:71:58:8e:00:61:66:06:
83:eb:23:ad:d2:f4:fd:32:5a:66:c2:d5:3d:86:23:05:d1:67:
40:cf:a9:f2:74:74:9c:7d:ae:1a:c8:7d:01:26:d5:4e:58:08:
84:79:56:a9:cc:d4:0a:b3:14:eb:9d:a3:ef:01:d3:0f:5a:e7:
30:3f:50:92:dc:ac:61:5b:dc:13:5c:f9:a9:69:54:aa:a0:2d:
06:38:05:6f:01:e1:3b:a2:d2:f3:81:63:1c:7a:ed:bd:4b:fe:
26:51:3d:f2:3c:0c:ee:4c:81:49:98:32:fb:c6:90:97:79:5c:
9f:f0:dd:03:22:cb:2e:4b:13:e9:6c:fd:00:9a:fb:83:d5:0e:
74:70:ae:4e:d8:90:50:15:d9:8a:0e:36:53:c9:1a:3e:8f:ec:
73:25:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:21 2025 by rpki-client