Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/5fRSWhQsZ-EjkNOymT5Wd7Xw2kc.roa
File: 5fRSWhQsZ-EjkNOymT5Wd7Xw2kc.roa (raw, json)
Hash identifier: isss7gHcYIfWarmLIy6EsQoaR5D2sKWMi48CH5BL7Gk=
Subject key identifier: E5:F4:52:5A:14:2C:67:E1:23:90:D3:B2:99:3E:56:77:B5:F0:DA:47
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018CC9BC43A31465DD2B0C0CBE914F45DC29
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/5fRSWhQsZ-EjkNOymT5Wd7Xw2kc.roa
Signing time: Tue 02 Jan 2024 10:33:27 +0000
ROA not before: Tue 02 Jan 2024 10:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 193.160.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:43:a3:14:65:dd:2b:0c:0c:be:91:4f:45:dc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 2 10:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5f4525a142c67e12390d3b2993e5677b5f0da47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:e5:0f:d8:f9:da:ea:aa:e4:75:c9:f3:2d:
85:c7:5b:e8:52:84:7d:3a:15:36:67:87:6f:1d:7c:
11:47:55:8c:e0:38:53:88:c9:d5:71:8d:15:af:7b:
c0:68:53:df:7f:1e:18:9e:6d:b0:1e:10:02:0d:8c:
42:f3:74:81:d6:a5:22:95:f1:05:cb:da:7d:bb:fd:
2f:3f:de:16:ef:c7:ce:3e:19:e8:7d:da:da:6a:6e:
34:ee:43:11:df:00:33:70:ca:d8:4f:ff:ec:81:3e:
d6:26:26:da:c9:c2:55:24:aa:87:fe:82:2c:fa:d4:
23:f2:a0:b5:e4:2f:d2:ed:b3:be:ad:69:11:e0:8f:
79:0a:ce:0e:34:40:a7:e5:e5:3d:de:d1:d5:7f:ba:
29:99:e5:51:73:88:b1:de:e3:83:32:61:39:ed:8c:
c6:fb:a8:94:a3:83:10:8d:98:26:a6:8a:31:ad:f6:
71:43:d5:38:e3:f2:af:c1:b8:ea:4a:94:ed:c7:3e:
d8:1c:ba:ec:30:e8:b5:71:a8:6e:b4:b3:74:fb:82:
f6:8c:d8:52:ec:c8:d6:fe:37:40:26:f5:90:29:6e:
3c:96:cf:d1:29:97:3f:ea:84:8e:9f:b4:10:fb:b2:
96:1d:0d:00:a5:75:9b:6e:cd:ba:9c:f7:16:41:f0:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F4:52:5A:14:2C:67:E1:23:90:D3:B2:99:3E:56:77:B5:F0:DA:47
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/5fRSWhQsZ-EjkNOymT5Wd7Xw2kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.219.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f7:c7:33:81:0a:63:4b:b8:72:99:b9:8c:fc:b4:60:9e:be:
5c:63:d7:c7:41:b5:e0:95:ec:ed:34:4e:e2:b0:2f:0d:59:dd:
c2:7a:91:fe:dc:88:19:3a:52:e6:99:d0:a6:2f:25:0d:45:7b:
cd:17:40:39:49:7e:a5:a6:f1:6c:d9:56:e8:25:73:eb:7e:77:
21:a7:a2:fa:1a:ad:98:16:37:c9:38:47:a0:b1:f8:37:f0:a1:
1c:ee:e1:6e:2b:83:29:9d:8e:96:0f:6b:c6:7e:86:95:25:96:
7c:11:ff:72:ed:cc:5c:76:34:cb:56:72:c3:29:a6:06:e9:25:
21:5c:0a:8a:17:1c:76:0b:10:65:21:0c:11:fd:e8:a4:08:31:
1e:d5:64:e7:be:87:30:56:26:4d:a2:26:79:b0:28:48:f3:8c:
e4:2d:f7:44:42:88:7f:0f:4c:02:16:3c:38:8f:90:1c:fe:6b:
fc:8d:6d:ed:9b:83:da:ec:eb:cc:04:66:85:6c:56:04:0e:af:
24:2f:29:07:12:c8:9f:7a:86:59:ff:79:10:8e:68:13:1b:8c:
84:d4:40:e1:24:9f:9d:95:06:26:5c:25:83:a5:0f:7a:6c:e0:
c1:e1:c3:49:49:24:62:f2:03:85:57:99:7d:08:f8:03:6e:60:
24:7f:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:26:24 2025 by rpki-client