Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/Xpu5z6C93G9BRUn-gmewTXpV4p4.roa
File: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (raw, json)
Hash identifier: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=
Subject key identifier: 5E:9B:B9:CF:A0:BD:DC:6F:41:45:49:FE:82:67:B0:4D:7A:55:E2:9E
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 01941F8C14432E201D7024E4D811F6E95F45
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/Xpu5z6C93G9BRUn-gmewTXpV4p4.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207642
IP address blocks: 83.138.58.0/24 maxlen: 24
2a0f:fe40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:14:43:2e:20:1d:70:24:e4:d8:11:f6:e9:5f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e9bb9cfa0bddc6f414549fe8267b04d7a55e29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:3d:e7:1f:00:d1:f4:2b:3d:6b:ba:6e:88:
74:b9:de:ac:3a:5e:e4:c2:66:ab:58:5d:ee:45:ac:
fa:e1:7f:08:cf:e6:b4:80:54:0c:8d:3a:dc:21:93:
21:82:fb:1a:57:d3:07:bb:28:3b:69:3e:53:87:6b:
f1:82:c2:42:c1:4b:f5:2c:1a:cc:c4:42:5b:ea:e4:
84:f1:3e:ea:9a:5a:25:35:af:73:41:af:25:e9:f9:
10:d1:c5:86:a5:06:57:42:41:f5:cc:bf:77:85:c4:
38:d7:a8:53:83:80:b1:dd:aa:fe:5f:87:57:ae:9d:
03:70:c7:c4:f4:58:35:6b:f1:b8:04:cc:1e:48:02:
6e:d5:fa:f4:5f:f8:d6:d5:ac:7e:1c:b1:c8:1c:7e:
93:9c:3e:97:93:18:ab:ae:56:45:77:d4:6b:02:43:
6f:d4:1e:38:8e:de:84:10:65:17:6b:3f:5e:ac:02:
ae:7e:10:62:d3:98:86:00:63:9f:1e:e5:16:c6:c8:
b2:59:0e:20:85:97:29:24:34:96:fb:8d:64:ce:fe:
86:7c:2a:ec:80:7e:f1:39:97:6f:47:bc:e1:b4:f8:
f7:83:e8:a4:ed:df:cf:9d:42:2d:f6:6c:65:94:e8:
a6:5c:6f:76:44:31:97:9a:18:79:9a:68:0a:39:80:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9B:B9:CF:A0:BD:DC:6F:41:45:49:FE:82:67:B0:4D:7A:55:E2:9E
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/Xpu5z6C93G9BRUn-gmewTXpV4p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.58.0/24
IPv6:
2a0f:fe40::/48
Signature Algorithm: sha256WithRSAEncryption
a4:79:ed:ad:41:48:5a:b4:fa:b0:e6:7a:8c:05:e8:44:68:07:
ec:16:fe:97:63:11:cd:8b:5a:56:4f:6f:a9:7c:cb:56:26:bd:
c3:dc:d6:85:06:d2:db:54:aa:c1:91:67:e0:84:79:45:b6:ae:
d9:77:99:32:fe:df:a8:7f:30:5d:33:bb:8c:86:1c:d6:9e:f5:
3c:c0:6e:cb:7c:6a:4b:89:2a:75:3d:d2:62:74:c7:be:a3:52:
a6:1c:9b:bc:b2:43:2b:a5:94:69:02:06:46:3a:33:28:0f:df:
54:fe:e5:11:f4:ca:a1:53:a5:fb:e8:53:15:0b:4c:05:f3:7d:
b0:98:2d:73:94:b2:75:d3:6d:0e:8a:ff:94:d9:3b:75:46:f3:
95:14:c1:24:2f:5a:a8:7c:9a:fb:98:36:7d:62:cd:37:7a:82:
66:fc:af:38:ab:ea:fe:8d:25:06:98:92:07:13:74:a6:ae:96:
02:9e:70:f9:70:b0:ee:f1:1e:4f:38:ac:49:3e:6c:93:b2:50:
06:6c:1e:0a:f0:33:d2:1b:2d:1a:33:79:8b:f2:21:1a:d2:0e:
2d:e4:a3:1c:e1:aa:5f:2c:cb:67:06:5b:59:db:e8:2f:58:1b:
42:a0:10:4a:63:17:59:98:da:50:37:8a:53:67:9a:17:4a:0f:
7e:f6:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:34:21 2025 by rpki-client