Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/wJUlaRUICcG98jFoJrBOPCJA9K0.roa
File: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (raw, json)
Hash identifier: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=
Subject key identifier: C0:95:25:69:15:08:09:C1:BD:F2:31:68:26:B0:4E:3C:22:40:F4:AD
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 0194228E142B132EE8508C6DC835068709DF
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/wJUlaRUICcG98jFoJrBOPCJA9K0.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 5.253.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:14:2b:13:2e:e8:50:8c:6d:c8:35:06:87:09:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0952569150809c1bdf2316826b04e3c2240f4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:85:3f:78:ea:07:9d:c0:6f:7a:ff:7b:fc:
91:ad:f7:a8:a5:56:f6:da:3f:6a:72:ea:82:cb:bc:
c0:a1:69:bf:72:d5:36:7a:24:a3:f8:f8:cc:78:23:
58:83:ba:a7:c1:96:26:ed:f5:af:13:f6:6e:2a:58:
94:17:df:bd:b1:6c:06:17:58:59:ae:79:c4:9c:04:
ce:04:e8:c2:91:bd:64:6a:e4:49:78:56:40:09:63:
c4:a1:f8:8e:3e:9c:d0:14:ad:57:e3:3b:de:c3:12:
e0:28:8d:3d:2c:61:14:0f:bf:e2:1f:e8:7f:93:20:
3a:a6:72:eb:1d:57:4e:08:18:b3:42:27:53:aa:68:
79:87:6b:56:bc:3e:aa:93:5c:85:49:fe:73:46:20:
98:c6:cb:6f:94:e7:f8:96:e4:e1:a4:9d:93:51:4a:
d6:30:7a:e2:1d:19:47:95:ca:95:05:fd:a9:99:5d:
49:1c:59:e8:68:73:6e:91:62:9a:46:8e:e7:5b:88:
76:66:d9:25:95:09:bc:53:4e:25:91:d8:6a:c8:69:
32:8e:b7:7c:3b:e0:50:00:b9:6e:d4:6b:e9:ff:79:
f2:16:92:02:15:0f:27:94:a5:cb:c7:38:fc:00:36:
2e:76:e9:8c:40:82:50:13:49:90:5a:e0:ed:3a:0a:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:95:25:69:15:08:09:C1:BD:F2:31:68:26:B0:4E:3C:22:40:F4:AD
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/wJUlaRUICcG98jFoJrBOPCJA9K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:78:ca:28:61:51:fc:bb:a1:63:96:c6:cd:3b:b5:35:0d:03:
ed:5a:4e:0b:08:03:0e:ba:0b:4b:46:fc:ef:a1:c1:ed:cc:79:
dc:fb:b4:a5:4b:cc:12:75:8e:da:25:ff:72:4d:40:c2:e5:c1:
9c:f9:45:e7:16:09:8a:b4:94:d6:a7:74:8e:be:77:eb:ae:98:
5b:22:c7:98:28:c2:f6:65:ac:9f:9d:a4:ae:ba:36:4a:c9:72:
af:5d:d0:c1:f1:f6:e5:d7:d2:6c:8d:37:59:f5:64:43:fe:ee:
07:0c:29:b3:6e:e2:60:66:c0:2e:a6:f4:b8:b0:67:01:2c:46:
80:4a:ca:14:0e:a9:bf:08:f9:21:82:b8:fd:f8:32:f2:52:58:
5b:7b:df:86:f0:fe:5c:c2:c7:c4:74:b9:8d:01:6a:26:ec:2a:
0d:18:9d:fe:bb:7b:08:09:f5:b1:25:0c:bb:00:32:f7:0c:f0:
58:2e:66:5c:9c:4d:1c:6e:35:20:da:14:85:01:a6:f6:1e:a1:
ed:8b:e9:90:1f:24:93:1e:3d:ac:f4:54:77:94:cd:e2:fd:f6:
03:59:02:5f:b0:2b:92:1c:02:d9:2f:d8:b3:11:61:07:3e:a2:
97:eb:06:5d:f7:0e:da:cc:1f:45:48:4b:42:3c:c2:6a:e3:2a:
d4:0d:b6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:13:05 2025 by rpki-client