Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa
File: 5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa (raw, json)
Hash identifier: elGO+kkXCWf6xUhLxKQr6fK8y3EJu/aqnItwgZKwIWc=
Subject key identifier: E4:24:38:78:EE:4B:5F:5E:CA:5D:9E:0A:44:AD:73:3B:65:A6:0E:2A
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 01942144566E2C4526A895BCE8E878D2B511
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa
Signing time: Wed 01 Jan 2025 09:48:34 +0000
ROA not before: Wed 01 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198114
IP address blocks: 91.231.192.0/22 maxlen: 22
91.231.192.0/24 maxlen: 24
91.231.193.0/24 maxlen: 24
91.231.194.0/24 maxlen: 24
91.231.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:56:6e:2c:45:26:a8:95:bc:e8:e8:78:d2:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4243878ee4b5f5eca5d9e0a44ad733b65a60e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:15:7a:f7:85:c1:be:b6:80:11:35:e5:e2:
ee:7f:67:f8:49:00:93:0f:cf:f7:2a:6c:bf:18:01:
c2:3c:c1:e1:a3:84:9a:18:90:c2:6b:6f:b6:6c:32:
07:d4:94:70:97:4a:66:9b:a3:b2:31:ab:96:f0:74:
0d:91:8b:24:13:40:2c:87:ca:12:76:e9:16:2a:df:
1c:1c:01:28:de:2b:b8:8a:f8:7f:25:30:70:50:cc:
bb:46:f1:40:e9:a5:22:3d:a7:d3:94:59:06:d9:bb:
9e:04:0d:ef:99:4f:0a:54:ba:ad:af:35:af:f9:87:
41:39:86:27:60:d2:6a:c5:b3:f3:0a:55:67:97:78:
cf:0c:86:df:88:1f:37:39:25:93:7d:c4:70:6b:44:
30:39:15:cd:a5:e3:53:4c:96:cd:cb:8c:76:08:08:
11:b3:ff:3e:ee:a5:af:2c:be:db:34:50:84:74:f8:
9c:45:ab:48:0d:f7:66:13:15:10:d1:7c:f2:dc:78:
7e:92:17:37:87:ec:51:27:4c:56:ec:f2:fe:51:5c:
89:1c:fe:4f:0e:a4:3f:f1:81:39:74:cc:81:ad:51:
06:ba:00:70:c1:1e:82:a2:a2:c5:bf:36:da:5e:c0:
f6:dc:0a:4d:2e:be:4a:e3:31:1f:90:be:36:ad:b2:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:24:38:78:EE:4B:5F:5E:CA:5D:9E:0A:44:AD:73:3B:65:A6:0E:2A
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.192.0/22
Signature Algorithm: sha256WithRSAEncryption
45:51:ee:ab:6b:e9:ca:52:2e:80:67:22:4d:df:29:2a:04:18:
8f:62:32:86:63:1c:bc:4d:6f:22:c0:6c:5c:eb:70:37:f1:63:
b0:a3:b5:21:64:cd:af:6a:e3:2f:50:24:b2:dd:39:40:30:3b:
53:0b:64:a9:9a:f5:95:cf:ff:4a:44:e6:21:b1:0d:22:a6:cd:
b8:10:00:e0:28:16:fb:c6:cf:9b:d9:79:69:49:80:db:10:df:
40:bc:2f:04:ee:64:a7:16:3b:a7:d7:fd:43:40:e6:1e:4c:73:
1b:aa:2f:51:7a:b2:83:90:34:03:b8:74:86:4a:34:a6:aa:d5:
80:10:8e:2a:8c:da:d1:6c:c4:a6:70:91:63:39:27:ac:ce:18:
e1:0c:a1:0f:fa:0d:93:50:02:b1:88:87:0e:8b:f8:e7:36:d9:
a5:7b:dd:48:4b:80:31:53:08:e8:16:b1:d2:b1:2f:79:a7:5a:
eb:e5:16:69:85:02:03:c1:fd:d2:eb:d8:e3:00:de:bf:b4:b5:
66:a7:62:62:01:8e:c7:92:0c:86:55:04:dc:3b:4b:05:cd:90:
77:92:94:9b:d3:79:c6:e5:a1:93:77:61:c6:b7:4f:bb:75:15:
44:5a:f2:a0:c6:3a:20:5d:4c:e7:e7:c4:71:c5:41:bf:12:57:
f3:d7:17:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:45:37 2025 by rpki-client