Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/_pQtR1EJpgHMSOkTmSK_Er0tXsE.roa
File: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (raw, json)
Hash identifier: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=
Subject key identifier: FE:94:2D:47:51:09:A6:01:CC:48:E9:13:99:22:BF:12:BD:2D:5E:C1
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019420D61B207E9A656AF245E71244DFB64B
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/_pQtR1EJpgHMSOkTmSK_Er0tXsE.roa
Signing time: Wed 01 Jan 2025 07:48:10 +0000
ROA not before: Wed 01 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48289
IP address blocks: 5.22.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1b:20:7e:9a:65:6a:f2:45:e7:12:44:df:b6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe942d475109a601cc48e9139922bf12bd2d5ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:ea:fe:97:54:27:34:04:0f:1e:d8:8c:77:
a7:33:84:89:b4:d7:c3:d7:bf:d9:92:b2:3e:f2:b4:
8f:06:34:40:a7:a9:3a:23:8c:6c:42:53:e9:35:f2:
b6:b4:bc:20:df:60:14:b9:e9:c6:e1:2c:06:68:79:
64:02:9f:b4:c3:3c:7c:9c:64:46:f2:a7:6d:99:a7:
e2:1f:8f:25:90:e5:6a:7e:67:da:bc:b2:10:2e:8e:
5f:ab:39:8d:35:c6:8a:25:d1:22:61:3e:55:58:e8:
c2:bf:25:77:5c:96:22:93:4f:26:2b:21:d4:a4:72:
94:ea:41:0e:ba:30:87:71:2f:16:44:ec:08:1f:68:
22:09:db:a6:a3:99:96:d6:de:95:f6:f7:b8:b9:2c:
a5:39:81:e9:5a:8d:79:75:8a:61:52:a9:ab:7d:a9:
68:04:aa:3b:d3:da:09:dc:16:1a:2d:12:3c:d0:d8:
3a:cc:af:06:19:a4:fe:89:35:82:65:99:15:af:96:
c6:99:13:a0:99:95:b6:52:6b:55:f7:b7:0d:88:26:
e5:ff:13:1d:4b:99:56:15:21:23:c3:7d:52:8c:d4:
c7:06:0e:9d:06:e9:c3:32:aa:77:bf:52:8f:f3:46:
a8:c9:dd:dc:30:22:bd:1e:03:a2:d0:d5:00:0e:a3:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:2D:47:51:09:A6:01:CC:48:E9:13:99:22:BF:12:BD:2D:5E:C1
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/_pQtR1EJpgHMSOkTmSK_Er0tXsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.192.0/21
Signature Algorithm: sha256WithRSAEncryption
52:2b:77:a2:dd:05:a9:87:e6:f9:3b:03:30:3a:b3:25:ce:14:
3a:06:0f:73:34:47:97:b2:36:3d:eb:04:8b:a7:d3:50:4f:d2:
59:7b:80:f3:0a:4f:07:12:ee:eb:8f:8d:0b:99:f0:9c:ea:7f:
4e:0c:bb:6e:77:f7:df:26:1e:5b:16:a6:cc:84:98:23:49:dc:
ac:81:4a:e2:06:38:2c:bd:63:7c:0b:82:6e:4d:3f:16:3a:24:
2f:c5:d0:a8:59:ad:c8:43:f0:3b:72:e2:be:8b:17:26:15:8d:
9c:7a:81:67:f6:78:9d:6b:0d:d7:ee:7c:d1:db:d7:2a:d0:fb:
7b:50:19:5c:33:a0:88:6d:d3:e7:e1:1f:23:7a:a2:48:e6:73:
c6:10:37:b7:2d:d9:ba:22:66:98:69:71:de:70:87:86:2b:36:
9e:08:db:5f:35:54:7d:b0:1c:94:d5:6f:c3:16:05:41:2b:63:
50:03:09:08:1d:76:9f:64:86:20:b7:dd:26:71:9c:cf:c8:6f:
3c:3b:51:ad:a9:28:f3:3b:a6:d1:61:b9:ab:59:c1:00:f4:8b:
fd:ab:21:d0:e6:1a:f3:42:1f:28:02:2e:0a:eb:e6:5e:24:38:
61:a8:d6:c6:b3:4d:5f:83:17:15:eb:68:99:02:b1:d7:ba:52:
59:8b:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:28 2025 by rpki-client