Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/_jwv_lcEjeP6obJDvR7tAaQUU-k.roa
File: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (raw, json)
Hash identifier: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=
Subject key identifier: FE:3C:2F:FE:57:04:8D:E3:FA:A1:B2:43:BD:1E:ED:01:A4:14:53:E9
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 0194222016A6C2C6A2037A0131B9C5CF056A
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/_jwv_lcEjeP6obJDvR7tAaQUU-k.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51338
IP address blocks: 82.193.81.0/24 maxlen: 32
82.193.81.0/25 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:16:a6:c2:c6:a2:03:7a:01:31:b9:c5:cf:05:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe3c2ffe57048de3faa1b243bd1eed01a41453e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:6d:03:2c:7b:4c:41:6f:b7:ae:a6:88:ec:
32:49:97:0f:39:fa:18:86:2f:c1:0b:78:6a:2c:92:
94:e7:cf:bf:51:4c:95:6b:b8:63:4a:02:03:ea:92:
9a:5e:b7:9d:d1:e3:80:e8:61:0f:89:90:74:77:f1:
88:a6:f6:6f:3c:8a:d9:b9:5b:5b:df:3d:06:69:09:
b7:2d:50:42:54:45:19:49:c9:55:d5:37:dd:89:89:
6f:fa:44:f4:ff:04:02:8c:41:62:b8:89:0e:72:fd:
7a:a4:d0:62:4b:c0:00:d9:7b:60:7e:fa:62:17:f5:
6b:8f:05:44:0d:f1:88:7f:bc:e8:35:8f:ea:ff:de:
ef:f3:ce:f3:be:4b:ef:34:8b:d8:5d:6b:25:9a:d2:
da:6e:0f:87:32:ea:37:89:27:ec:f2:2a:be:19:ff:
4e:57:20:4d:d4:6d:30:8e:2e:f8:98:a0:ac:ad:52:
c3:59:01:09:e0:e2:47:e3:0c:15:3b:85:52:79:5d:
14:24:3d:1c:3c:00:71:76:b2:e8:c5:bd:34:63:c6:
17:e8:79:67:dd:bd:29:e2:cd:89:0b:9c:7c:c9:2a:
9d:19:ad:3b:06:34:e5:2f:22:25:86:e4:5c:cf:29:
d2:9d:7c:c0:e7:fc:2d:59:d2:9e:f8:9f:12:f6:16:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3C:2F:FE:57:04:8D:E3:FA:A1:B2:43:BD:1E:ED:01:A4:14:53:E9
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/_jwv_lcEjeP6obJDvR7tAaQUU-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.81.0/24
Signature Algorithm: sha256WithRSAEncryption
92:06:b4:66:78:2c:20:56:62:3a:50:c7:f2:75:a1:b4:79:90:
45:06:2d:8d:3c:c2:90:01:b8:ad:51:fd:24:ad:8c:e0:ef:7e:
37:fa:49:26:01:bc:bc:21:54:0a:d3:e5:d0:0a:a3:88:55:2c:
cf:23:ed:3e:23:ca:26:83:14:2b:e3:a5:fc:93:ee:60:97:82:
68:01:fa:ca:6b:73:c3:b0:21:68:97:95:d2:64:f9:55:ed:7c:
b7:ca:25:7c:2a:17:ea:75:12:50:69:af:2d:52:a5:70:2f:e6:
92:08:10:ad:a1:8c:0b:d6:02:ef:5a:f9:7c:d4:c9:37:1b:4c:
bc:60:c2:74:ba:57:0e:22:87:6c:6d:c3:b2:f0:45:b0:c4:83:
a7:4b:65:87:c4:63:50:6e:f4:7f:ed:94:91:02:8a:f5:b5:8f:
63:c9:08:da:42:87:0e:bc:93:46:69:1b:be:40:6a:fb:b4:86:
c3:d3:f3:5a:90:71:93:5b:ae:b2:28:89:29:29:aa:42:43:40:
4f:55:8d:2d:ca:a9:50:09:3a:28:f1:da:ae:0b:12:3b:45:2e:
c7:40:8a:83:1d:fe:10:23:61:34:be:38:12:14:20:69:c2:c5:
b1:1e:b1:14:b1:96:b7:b2:00:12:7e:8b:ae:4d:77:3a:1f:53:
e1:d7:29:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:18 2025 by rpki-client