Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa
File: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (raw, json)
Hash identifier: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=
Subject key identifier: E5:70:D8:A8:E1:99:D1:10:41:28:ED:2D:35:05:6D:41:F0:92:F5:68
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 01942067D24661C11B2849DC903343BAEC74
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 141.115.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d2:46:61:c1:1b:28:49:dc:90:33:43:ba:ec:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e570d8a8e199d1104128ed2d35056d41f092f568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:2d:b8:46:1a:4d:d4:43:48:bc:ac:9c:d3:
74:ac:39:c2:b4:0a:b4:42:2d:b0:8e:8f:29:eb:e4:
62:63:47:7e:d2:79:d8:fd:2b:77:3d:29:93:72:07:
df:3a:c3:b7:8b:cf:fe:ed:c7:c2:33:40:b2:cb:03:
67:82:d8:57:b9:60:80:64:8f:0f:3f:ce:8c:1b:b0:
5d:6c:fc:97:90:ae:c4:01:57:5e:ca:e1:46:35:fa:
75:f3:ff:bb:a6:e9:a7:ed:75:1a:ea:46:31:7a:14:
9f:30:86:f0:3b:07:25:54:e8:62:0f:0b:1d:f8:29:
e1:a1:82:3c:a6:71:6c:a7:2f:1b:4a:a5:33:c3:ba:
02:2e:a3:80:cd:0b:6a:b8:b4:cf:27:d8:b7:3a:ab:
e9:3a:1a:07:31:77:d1:a9:42:02:a3:cf:a4:0d:9c:
0f:dc:1a:63:1d:36:bd:72:ad:c5:0c:f7:a8:ab:e4:
76:32:be:00:9d:58:4e:58:ad:00:4f:1d:4e:9a:92:
72:15:f9:a0:78:23:ab:80:cc:e9:1c:82:70:74:94:
b7:b9:88:28:0b:54:df:1b:7d:c7:fc:80:44:d8:eb:
4e:ad:5a:f3:5a:6f:a4:4a:58:6c:67:f9:0e:82:72:
f5:14:d7:44:c5:9d:6d:92:e9:c4:dd:0b:a1:02:6f:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:70:D8:A8:E1:99:D1:10:41:28:ED:2D:35:05:6D:41:F0:92:F5:68
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.115.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:09:b3:92:01:c0:56:a5:08:73:f3:e2:ed:84:f5:e4:aa:9f:
32:4a:22:fe:5b:7b:56:5c:fb:68:b2:5f:13:5a:0e:e5:d8:ab:
6a:ac:c9:e1:73:e1:e8:28:9b:a4:e0:4b:e1:5a:cf:e3:99:5d:
5c:c0:1f:bd:05:e7:d5:73:29:e4:78:29:54:14:0e:54:cd:35:
e1:aa:b0:df:e9:7f:c5:61:4f:d4:1d:18:50:d9:1c:e3:82:45:
c2:f5:a1:17:16:2e:9c:b9:58:96:16:7e:52:16:54:51:78:bd:
85:5d:e8:8f:19:51:b4:ec:9e:c5:11:e3:f1:a3:6e:0d:c1:e8:
ec:91:58:e2:a7:58:fb:f3:5f:e6:9e:ea:fe:6c:2c:d8:29:09:
65:18:a7:4e:ec:f5:e0:c7:5a:0c:a3:03:07:c7:bf:0d:82:5f:
95:63:ab:82:ac:d5:00:77:27:a2:6e:b8:9c:e4:01:ff:cd:6b:
96:43:d2:3f:f7:2e:f2:40:ac:b3:c4:7a:31:0f:61:f8:0c:b5:
02:62:0d:96:6a:3e:28:a7:3d:37:92:9b:03:45:56:8c:34:01:
ea:9b:3f:9b:65:68:11:25:87:db:90:8f:a1:c1:2b:4a:49:0c:
85:fd:42:cc:a7:80:8b:b9:d4:8f:03:6e:a6:86:fa:0c:4f:78:
89:ed:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:30 2025 by rpki-client