Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5i7nRFCsv1L45OUlYbAyDYc7EqA.roa
File: 5i7nRFCsv1L45OUlYbAyDYc7EqA.roa (raw, json)
Hash identifier: 9l8EAspPXFy4mOsRWuHm1K3BA/Vz1VfJovv7/Mo0KNU=
Subject key identifier: E6:2E:E7:44:50:AC:BF:52:F8:E4:E5:25:61:B0:32:0D:87:3B:12:A0
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421440C9B42F83367E22ABA5B4B4028B6
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5i7nRFCsv1L45OUlYbAyDYc7EqA.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61003
IP address blocks: 213.232.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0c:9b:42:f8:33:67:e2:2a:ba:5b:4b:40:28:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e62ee74450acbf52f8e4e52561b0320d873b12a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dc:64:fb:35:35:78:76:2e:1c:c6:a8:59:ff:
a5:10:f3:56:b8:10:83:00:5a:8e:61:80:ab:06:8c:
33:d5:a2:18:df:a7:6b:39:ce:c0:41:b1:4c:6f:68:
13:4a:fb:3c:62:26:8b:a4:71:44:9e:50:87:cc:f3:
2f:68:91:6c:32:88:e6:3c:1e:f0:dd:fd:cd:62:8a:
f8:ad:2c:b5:60:76:8e:73:cf:b4:9c:81:70:a9:59:
2a:69:de:22:60:fc:62:11:22:36:fd:c3:d5:cd:dd:
16:25:98:28:da:b3:65:9b:d4:3c:1a:0d:32:cf:07:
ea:5f:a1:b3:18:1c:fa:09:6b:dc:91:c6:e5:63:b9:
a8:59:e7:ab:d7:55:10:81:fc:57:d9:46:7d:77:da:
09:19:e6:db:4a:fc:d2:66:bf:c0:16:31:e5:d9:81:
ce:6c:a3:d4:5c:aa:0c:0d:3d:7f:ae:20:74:ab:31:
38:53:05:38:95:48:eb:db:fa:b7:1e:ce:d6:63:c5:
ae:5e:bb:c7:27:0e:d8:50:5e:52:dc:0f:97:ed:da:
0c:91:2a:cb:fb:2d:db:e0:49:91:b6:26:3a:10:a0:
7f:e7:83:59:b5:35:b0:c2:91:16:28:9f:41:45:9c:
15:a0:4b:05:4c:59:c1:1f:51:0c:e6:a4:35:b8:81:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2E:E7:44:50:AC:BF:52:F8:E4:E5:25:61:B0:32:0D:87:3B:12:A0
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5i7nRFCsv1L45OUlYbAyDYc7EqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:bc:a8:83:dc:22:99:f9:ef:63:39:e1:48:a4:0d:68:bc:a8:
48:9d:84:e0:15:8b:83:4e:7d:08:bc:5f:5c:3a:42:2a:54:4f:
c3:2a:f9:35:0d:a8:a0:bb:67:36:c3:48:01:4d:76:7d:6b:54:
af:bc:4e:2c:98:be:b8:33:ac:59:62:f1:b6:b4:0f:69:a9:cb:
24:eb:73:74:5e:a5:59:b5:cd:ab:4d:63:09:ee:0a:e2:3b:ed:
a3:54:6d:17:6f:94:4b:f7:02:65:9c:39:6d:84:2b:25:ab:cb:
7d:dc:0a:d9:f4:2e:79:68:8a:f1:dd:69:fc:01:43:0c:d4:99:
f3:b3:76:cf:9e:46:1b:04:f1:52:2f:54:d4:99:81:66:98:aa:
92:bc:2a:0b:77:88:aa:f1:74:28:6c:c4:53:e7:ef:1e:ff:d2:
09:8c:37:a0:49:20:33:50:53:52:2b:7c:4c:88:f3:56:86:68:
48:b0:e3:42:79:a4:06:5e:55:41:93:c7:85:21:f3:e5:9f:a1:
bd:4e:26:d2:c4:04:a0:40:a7:17:c5:5c:90:94:6d:d3:67:b0:
6b:00:32:d1:6d:84:51:61:d0:63:9f:76:ff:8e:20:be:57:9d:
02:69:af:da:13:fe:57:37:b2:fc:27:8c:01:31:5a:7c:6a:6a:
05:1a:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:22 2025 by rpki-client on console.sobornost.net