Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/KglsdIqueCgqoJRPLOdD_52juk4.roa
File: KglsdIqueCgqoJRPLOdD_52juk4.roa (raw, json)
Hash identifier: QXzt0l1xSU8QC0mU54pCYXaBQOi7OdcjZa4roCrGbek=
Subject key identifier: 2A:09:6C:74:8A:AE:78:28:2A:A0:94:4F:2C:E7:43:FF:9D:A3:BA:4E
Certificate issuer: /CN=6c00666b0da157c9334f4103659d2dbbf5335783
Certificate serial: 01856B89F812A33841C3C8F818CA3EB1F89A
Authority key identifier: 6C:00:66:6B:0D:A1:57:C9:33:4F:41:03:65:9D:2D:BB:F5:33:57:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bABmaw2hV8kzT0EDZZ0tu_UzV4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/KglsdIqueCgqoJRPLOdD_52juk4.roa
Signing time: Sun 01 Jan 2023 04:14:42 +0000
ROA not before: Sun 01 Jan 2023 04:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9186
IP address blocks: 5.253.181.0/24 maxlen: 24
2a09:58c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:89:f8:12:a3:38:41:c3:c8:f8:18:ca:3e:b1:f8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c00666b0da157c9334f4103659d2dbbf5335783
Validity
Not Before: Jan 1 04:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a096c748aae78282aa0944f2ce743ff9da3ba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a9:14:42:c6:31:dd:aa:3e:10:09:a5:04:fc:
6d:fc:1d:35:3c:08:05:9c:cc:44:ae:37:d1:64:ab:
dd:dd:8b:e6:0c:b8:e7:80:e4:fd:d4:d7:26:14:97:
42:e7:e5:d4:e0:f1:65:3a:d9:25:7f:e7:22:ba:6a:
8a:59:d0:0f:df:c8:ca:4d:65:11:d7:3e:b6:96:91:
2a:4f:bd:f7:24:4e:0f:30:56:93:83:27:d1:81:47:
b7:30:21:9c:6b:ed:9d:f5:c6:f5:32:61:9c:5b:76:
ef:f8:87:9d:4f:b5:67:d6:f4:9f:17:d4:ba:4d:22:
89:5b:14:7d:67:0b:d7:e6:c0:71:27:98:de:aa:e0:
6f:d8:20:d2:ab:60:d7:8e:c0:0f:9c:2f:34:56:c3:
ae:46:b1:a3:b8:80:6c:ed:4a:78:98:5d:99:78:fb:
5c:41:e4:40:51:94:78:c8:09:75:04:e2:ec:74:a1:
c5:40:2a:e5:ea:67:35:cb:35:16:a1:2c:b7:d8:76:
71:41:8b:9f:a6:42:94:96:0a:fc:d7:00:55:85:b7:
6c:75:0f:46:e1:9f:d3:ce:78:2f:f1:2a:2c:16:07:
72:ce:62:20:d2:67:a8:25:45:94:59:d3:ab:c5:62:
34:ac:71:95:28:b2:d1:dd:28:97:d7:e5:fc:34:f3:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:09:6C:74:8A:AE:78:28:2A:A0:94:4F:2C:E7:43:FF:9D:A3:BA:4E
X509v3 Authority Key Identifier:
keyid:6C:00:66:6B:0D:A1:57:C9:33:4F:41:03:65:9D:2D:BB:F5:33:57:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bABmaw2hV8kzT0EDZZ0tu_UzV4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/KglsdIqueCgqoJRPLOdD_52juk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/bABmaw2hV8kzT0EDZZ0tu_UzV4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.181.0/24
IPv6:
2a09:58c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
4c:0f:4f:51:d3:ef:d0:1e:5d:f8:91:47:89:69:2e:03:09:56:
dd:d8:49:b6:ab:f8:a6:34:b1:64:67:c7:49:19:f9:56:66:db:
7d:b2:4e:bb:e4:37:8d:f3:c1:a7:53:fa:ce:ea:32:a8:ab:c3:
84:07:02:8c:76:e5:3e:62:1e:1d:14:11:1e:1c:b0:3b:50:90:
0c:fd:71:c3:06:97:7e:b2:c3:f0:e4:dd:ff:9f:d2:62:76:1e:
df:68:3a:48:4a:66:a9:cb:2a:fe:65:09:00:ab:21:0d:07:7f:
dc:84:8e:55:9a:17:9b:c8:73:68:78:c2:44:96:6a:bb:e7:29:
79:a9:52:b4:e5:a3:44:08:df:83:3d:07:c3:cd:57:c7:34:f5:
da:e8:d2:ba:f7:e0:97:d1:8b:b8:97:d6:f8:47:72:c5:e4:88:
5d:9e:9a:23:8f:5a:f6:cb:f3:47:03:4a:dc:a4:88:8b:d8:7f:
da:73:4c:bd:37:51:e4:65:00:94:9b:e5:af:9e:bf:ed:45:00:
ed:24:c9:e9:93:6b:32:56:50:fe:41:48:1d:6e:7e:24:00:66:
66:b0:2f:c6:dc:da:8e:c3:0e:39:cf:67:d4:c4:25:b7:41:c6:
a1:3e:b1:cb:93:84:66:17:d2:02:8b:a6:66:2f:f6:cc:14:7b:
5b:4b:db:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:41:01 2025 by rpki-client