Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa
File: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (raw, json)
Hash identifier: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=
Subject key identifier: B7:B1:DE:19:AD:7F:B7:A3:71:CD:CF:BF:1C:E1:DF:B6:FB:AF:CB:94
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 0194266AEDD86F1ED28EED3C35B6F170EBFC
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa
Signing time: Thu 02 Jan 2025 09:48:49 +0000
ROA not before: Thu 02 Jan 2025 09:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209050
IP address blocks: 5.183.216.0/22 maxlen: 24
2a0e:a600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:ed:d8:6f:1e:d2:8e:ed:3c:35:b6:f1:70:eb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Jan 2 09:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b1de19ad7fb7a371cdcfbf1ce1dfb6fbafcb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:2f:87:4c:e2:e8:ea:ee:00:a8:dc:34:b7:
03:6f:41:2b:32:83:3b:e0:34:55:ff:a1:c9:b6:5d:
1a:e0:c5:10:55:65:67:46:28:a4:9a:90:c7:2e:38:
80:9c:94:68:e8:f1:5d:7f:c7:0a:c7:70:d3:a9:c2:
7b:ef:1e:94:68:24:10:aa:0d:7a:60:69:76:a7:72:
24:bc:46:91:7a:c3:cb:2a:ca:43:ab:37:b9:b3:8a:
37:9e:21:dc:bb:c2:91:78:2d:c6:b6:4d:1e:83:d1:
e8:e4:99:6f:45:cc:20:4f:fd:e6:7a:93:41:f6:0d:
9f:29:03:27:7d:3e:2d:cf:67:7b:3f:c4:87:92:58:
46:c1:2e:27:ef:d4:b1:76:f0:60:a3:98:c6:01:8a:
fc:da:b3:eb:1e:ee:bd:4c:63:31:09:d6:a7:54:ae:
83:94:c6:97:6d:91:f8:19:46:9f:98:c3:be:39:98:
32:69:4a:00:2d:f0:5e:7c:72:b7:01:e4:45:d4:47:
e4:ee:3e:5c:3a:23:1d:b5:63:5d:5e:34:f1:e0:50:
eb:70:c7:00:38:3b:eb:db:80:e5:de:95:59:da:5c:
d6:01:9c:19:e5:4b:c2:fe:81:2f:cb:41:b5:e6:60:
83:94:cd:ea:49:fc:26:9c:49:95:ed:07:3a:ec:aa:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B1:DE:19:AD:7F:B7:A3:71:CD:CF:BF:1C:E1:DF:B6:FB:AF:CB:94
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.216.0/22
IPv6:
2a0e:a600::/29
Signature Algorithm: sha256WithRSAEncryption
91:42:50:01:3c:56:2b:de:26:12:32:e5:a6:4a:4c:75:dd:a7:
76:3e:6e:c1:a2:0d:5d:fb:cf:31:75:a9:90:77:ce:8a:cd:4c:
85:d6:ba:71:c7:64:43:51:71:bf:26:86:46:1d:06:76:40:c6:
68:a7:aa:9a:4f:e9:f4:ba:61:a9:9b:6a:27:e4:55:4a:38:06:
4f:36:38:09:9a:43:93:a3:33:56:e2:71:67:90:41:37:ac:23:
2a:da:e8:1b:f2:d7:33:d9:3a:6d:0b:5a:68:51:2f:7c:39:70:
d3:98:63:be:16:c7:07:f3:8f:e8:4e:99:68:af:3a:72:98:0b:
5d:ff:39:02:5b:6d:0f:69:43:8d:f1:74:b3:d7:3c:e6:19:63:
04:bc:9b:08:22:b7:39:51:9d:85:a8:40:af:7f:91:33:b4:a8:
30:b7:59:a3:47:42:e0:a8:16:97:14:91:e7:8e:80:bc:2c:6c:
2c:14:21:d3:5a:ec:eb:73:59:20:9a:b7:0a:88:16:ab:f2:d6:
9c:91:b9:9c:d8:07:32:f5:3c:d1:d8:15:85:c8:5d:65:fe:4f:
f4:3e:72:2d:aa:32:32:70:b1:52:ab:71:fb:fd:e1:23:3a:e0:
38:f2:d7:ef:46:d1:15:56:15:f8:7b:55:2f:ea:54:7b:f0:81:
58:82:33:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:11 2025 by rpki-client