Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/RvnF3u3svoHRV8SNhG_l6br-xl4.roa
File: RvnF3u3svoHRV8SNhG_l6br-xl4.roa (raw, json)
Hash identifier: mq2pK34jlcKmhTqJ1SoRhYmGNpGWBkiLJoYiS6B4rzo=
Subject key identifier: 46:F9:C5:DE:ED:EC:BE:81:D1:57:C4:8D:84:6F:E5:E9:BA:FE:C6:5E
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194258F504EB9F96912C9B5C86FB80DF119
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/RvnF3u3svoHRV8SNhG_l6br-xl4.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 188.214.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:50:4e:b9:f9:69:12:c9:b5:c8:6f:b8:0d:f1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46f9c5deedecbe81d157c48d846fe5e9bafec65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:f6:58:61:38:b2:3f:93:e9:58:7a:cf:9b:
a2:33:37:a0:f5:6a:58:3a:95:ec:de:dd:24:f8:09:
42:5a:47:4d:7e:e7:0b:e6:19:ca:c3:4f:9c:cb:1f:
d4:0f:9f:3d:f0:a0:6e:0c:2f:5d:36:39:f7:61:01:
80:47:1a:fc:b8:fb:c2:b5:2a:88:66:0c:a9:e9:77:
e3:3a:54:05:b5:b8:44:cb:28:2a:f4:ac:06:4e:65:
14:ac:72:69:c4:f0:94:aa:8d:27:aa:31:af:a2:52:
96:61:c4:76:8f:e3:64:32:80:23:71:1d:20:b9:1f:
81:b8:48:b2:a1:1d:2c:60:a4:3d:a9:ae:65:f6:f9:
e2:c4:dc:31:81:61:43:5c:8c:1c:48:3c:2d:bb:42:
61:b0:39:a0:83:bf:3e:b8:80:ba:77:b6:72:f4:4e:
12:17:44:e9:8c:64:a5:f7:f9:90:9e:b8:ea:5e:a6:
c5:84:90:b7:2c:93:57:c2:55:0c:88:ad:05:5a:d6:
0a:c9:2a:32:f0:eb:54:0b:44:b3:f9:63:07:f4:cb:
4f:e6:e3:84:86:dd:5c:a0:71:10:3b:30:3b:f1:c1:
31:fb:e0:a8:48:d7:cc:f1:2e:0c:d0:bc:73:3d:fc:
17:6e:05:e1:4c:8b:f1:c5:69:b0:af:c1:ef:b0:5c:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F9:C5:DE:ED:EC:BE:81:D1:57:C4:8D:84:6F:E5:E9:BA:FE:C6:5E
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/RvnF3u3svoHRV8SNhG_l6br-xl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.232.0/23
Signature Algorithm: sha256WithRSAEncryption
81:c9:65:df:f7:45:3e:95:5f:71:ef:70:7a:73:bb:26:db:fd:
48:c1:30:02:de:cc:8a:91:5b:aa:0d:51:5b:71:11:f4:2d:bc:
f0:c1:df:cb:d7:f0:82:5e:68:cc:9d:f4:f1:dc:91:11:75:aa:
5e:47:0f:91:50:64:3f:f4:0d:41:22:80:7c:44:7c:8f:5c:86:
26:34:11:84:23:2d:29:8f:8f:05:5c:1a:f5:7f:1a:69:c8:5a:
c7:c9:b9:b4:6a:5f:e4:4e:96:44:50:24:db:7b:b7:6b:0e:ae:
05:69:d6:9a:c1:0f:19:48:90:69:d2:72:b4:6b:82:fb:b8:5d:
55:b9:e4:22:71:46:25:41:8d:d4:1c:e7:62:f0:fe:5f:61:db:
4f:1f:ea:fd:9c:0b:c7:53:e5:2c:a0:ce:e3:fc:59:fe:12:d6:
8b:5a:21:da:dc:d9:bd:a2:c8:54:de:7e:f9:ca:45:05:2d:72:
a1:ef:b5:50:8d:84:29:2c:3d:7d:98:5b:83:08:f4:8d:c7:fd:
ba:96:1e:0d:b7:7e:ee:94:2c:b0:4b:03:ab:75:f0:ed:56:cc:
c1:07:96:4f:8b:f6:f0:93:1f:1c:a8:2d:69:7f:64:34:d1:c5:
b9:f1:00:7c:81:68:84:c9:57:18:d2:b3:f7:9b:0e:94:c0:c0:
93:d6:24:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:11 2025 by rpki-client