Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/DZvIewwjiAzEpKC0uVJtSfZx6lo.roa
File: DZvIewwjiAzEpKC0uVJtSfZx6lo.roa (raw, json)
Hash identifier: zRg0NObmIgvZCb5U/+hKwwB1an3zfG6PEaQs3UM/bJ4=
Subject key identifier: 0D:9B:C8:7B:0C:23:88:0C:C4:A4:A0:B4:B9:52:6D:49:F6:71:EA:5A
Certificate issuer: /CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
Certificate serial: 01942747BE9BF71D184AF5589CB78028956A
Authority key identifier: 12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/DZvIewwjiAzEpKC0uVJtSfZx6lo.roa
Signing time: Thu 02 Jan 2025 13:50:00 +0000
ROA not before: Thu 02 Jan 2025 13:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24978
IP address blocks: 185.5.14.0/23 maxlen: 23
2a02:c740::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:be:9b:f7:1d:18:4a:f5:58:9c:b7:80:28:95:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
Validity
Not Before: Jan 2 13:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d9bc87b0c23880cc4a4a0b4b9526d49f671ea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:00:78:f8:80:f2:2c:80:66:e9:8d:59:e9:
4f:f1:71:f5:38:c0:03:91:c0:0e:81:6c:5b:f3:78:
cd:0f:7c:ac:35:d1:43:54:98:d7:59:c6:3d:52:01:
ea:26:27:0e:d7:88:65:4f:3d:3a:21:70:26:f6:5e:
b5:18:0c:f3:3c:19:a2:a8:ef:e6:98:77:53:6b:75:
ec:e7:60:df:7e:82:ae:8f:1a:a1:27:7d:70:27:f4:
37:75:c8:bd:ec:97:23:a9:18:c1:44:5f:d3:e6:5e:
6f:37:4b:9d:26:2f:d6:bb:a6:1e:e4:63:46:d3:25:
ac:83:25:a3:31:26:57:ca:55:21:6d:7b:05:9b:cf:
a8:cd:01:b1:62:cc:92:06:8e:82:e4:44:20:cd:33:
76:42:4c:36:03:7c:9c:5c:0e:ab:21:35:8b:e3:0e:
bb:cf:3e:e2:b5:17:ff:8e:f6:a1:cd:7c:80:aa:e4:
bc:d1:7b:de:99:c5:17:ea:3b:33:f4:c1:1b:16:ea:
aa:0f:f5:3b:dc:e2:42:68:2a:fe:63:d4:8b:3e:2a:
ff:eb:5a:3a:a1:20:6e:ff:3a:2a:88:8a:c3:bf:3f:
40:66:bf:59:1f:c7:8b:36:11:a6:52:22:f1:5d:c7:
7e:f9:0a:6b:8c:6c:af:69:4f:b8:de:07:b2:8e:65:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9B:C8:7B:0C:23:88:0C:C4:A4:A0:B4:B9:52:6D:49:F6:71:EA:5A
X509v3 Authority Key Identifier:
keyid:12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/DZvIewwjiAzEpKC0uVJtSfZx6lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.14.0/23
IPv6:
2a02:c740::/30
Signature Algorithm: sha256WithRSAEncryption
5f:48:6d:f9:b7:58:7c:c5:6a:e5:5d:f9:d3:06:b4:05:b6:cc:
0a:71:86:7b:66:1b:3d:cb:ad:9b:47:2e:aa:4d:df:86:cf:9d:
8d:38:7e:f1:e1:f7:be:b1:f2:97:e3:7a:e3:dc:a0:16:ab:07:
4e:f1:dc:88:a7:ff:72:30:82:90:58:62:c9:32:05:b4:6f:a8:
37:50:30:8a:7e:f7:86:91:5d:bc:8f:c6:7a:63:a0:88:81:38:
9a:a8:bf:23:52:1d:04:2e:16:89:c9:0c:89:dc:43:ef:73:64:
86:97:71:e3:95:20:40:74:a7:90:b7:0c:fe:36:7c:c3:94:db:
92:e6:3e:2f:74:48:4d:34:aa:3d:df:1a:d6:bc:d0:84:1d:e0:
46:ac:73:fb:62:6e:26:73:89:af:af:e7:e2:3d:c2:65:14:86:
25:82:6c:48:03:40:6f:78:43:6a:4c:e4:e5:20:f9:6a:a3:a0:
47:af:bb:ff:12:15:f7:31:8b:ec:ca:ae:45:dc:85:d2:ea:4f:
10:0d:cb:75:d4:54:20:60:57:48:b1:97:f5:1b:96:c5:46:24:
57:c7:1a:0e:e2:15:2a:6e:d5:e4:02:b7:38:ec:ae:92:35:94:
c9:d6:86:a5:df:e5:11:6d:ee:4e:9a:b7:29:07:9d:1e:a6:94:
10:2e:b5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:54:04 2025 by rpki-client