Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/5ZSiu_Jf4uuM2tr9eexam4PdUnQ.roa
File: 5ZSiu_Jf4uuM2tr9eexam4PdUnQ.roa (raw, json)
Hash identifier: 4s92BezBLCr6XDiFpPfCSDr/ke7pRUF4VnT2G98F0hQ=
Subject key identifier: E5:94:A2:BB:F2:5F:E2:EB:8C:DA:DA:FD:79:EC:5A:9B:83:DD:52:74
Certificate issuer: /CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Certificate serial: 019424B36A619EF9672488E0C58705F13EB2
Authority key identifier: 48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/5ZSiu_Jf4uuM2tr9eexam4PdUnQ.roa
Signing time: Thu 02 Jan 2025 01:48:45 +0000
ROA not before: Thu 02 Jan 2025 01:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197752
IP address blocks: 176.100.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6a:61:9e:f9:67:24:88:e0:c5:87:05:f1:3e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Validity
Not Before: Jan 2 01:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e594a2bbf25fe2eb8cdadafd79ec5a9b83dd5274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:a1:a4:cc:f7:99:5f:2f:9e:c7:4f:34:de:
7e:02:31:29:5a:31:b1:40:f2:bc:03:d6:25:03:b6:
03:3c:ad:ca:9f:f5:14:4c:73:b6:09:16:5a:b8:33:
32:31:1f:49:e4:49:53:99:a6:a2:48:5d:7b:35:6b:
0e:3a:31:fe:ff:3a:0b:9b:16:81:fb:ed:db:8a:36:
a9:f2:42:14:ad:6e:e3:a7:55:e4:97:50:75:4a:8b:
c0:65:bf:6a:e2:11:53:6d:57:58:8b:95:c5:a6:ab:
5e:9e:be:4d:89:5e:73:c7:8b:bd:15:8e:0d:39:41:
49:6a:1d:e5:b2:5a:fe:2e:50:44:c7:75:69:4e:fc:
a9:7c:4d:af:2e:47:8e:cf:70:b0:6f:5b:49:cb:6c:
32:fd:38:72:df:2c:c0:19:09:ff:2a:ff:a0:a6:47:
fc:4e:e8:7d:29:ef:d5:fa:e5:6d:61:16:3d:95:25:
8b:d4:25:31:fb:c3:7b:ed:3c:99:39:89:9e:d3:63:
fb:16:f0:51:08:ff:c4:5c:28:75:7f:08:53:d7:3e:
fa:c6:70:16:0d:cd:fd:55:76:58:4d:1f:27:cb:be:
36:bb:10:47:1a:0e:a9:8b:e6:d1:73:43:80:ba:c0:
58:1d:ee:b3:d4:f5:f5:ed:51:6f:7f:8a:e5:f2:2e:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:A2:BB:F2:5F:E2:EB:8C:DA:DA:FD:79:EC:5A:9B:83:DD:52:74
X509v3 Authority Key Identifier:
keyid:48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/5ZSiu_Jf4uuM2tr9eexam4PdUnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.200.0/21
Signature Algorithm: sha256WithRSAEncryption
54:da:05:a2:c8:4f:13:5e:01:c2:06:46:16:76:b2:09:9e:75:
7c:b4:42:c6:07:84:17:9f:06:d3:69:b4:79:4b:94:da:04:ec:
67:67:67:ef:42:63:e1:e0:ee:85:68:4c:04:b0:e6:cf:2f:f9:
39:c6:3c:f0:d6:28:6f:62:29:aa:a5:d1:75:6b:ce:91:83:8e:
d8:b8:9f:c4:2d:be:43:75:44:66:bb:52:2e:76:08:93:6b:0a:
be:b7:92:9a:d4:2c:b2:29:ae:e0:ff:04:4e:d0:1a:3b:a5:ca:
7a:ae:9c:dd:e1:f3:d3:66:e8:c1:e4:51:80:6c:db:46:fc:29:
a7:2d:4c:8c:e5:0f:2f:f9:07:f5:43:89:2e:46:63:fa:77:83:
a4:c2:69:25:ce:af:08:ba:39:b7:1e:bb:79:54:47:17:10:aa:
d1:99:c1:10:a3:a2:f1:03:03:57:55:3d:fa:06:3a:ac:6f:ed:
33:e7:76:29:d3:4d:88:57:ae:56:7f:f6:1c:d5:a0:00:5b:8a:
3c:e1:73:25:fc:9c:4b:b6:aa:35:c0:59:ac:60:7b:f9:22:98:
70:30:73:89:18:cf:3c:74:95:52:5c:80:ff:f5:ad:3f:77:0b:
15:79:f4:d1:83:4e:37:9e:2b:c2:e9:ff:9a:70:f0:2c:a6:58:
1d:82:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net