Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa
File: gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa (raw, json)
Hash identifier: 9yJ9gvi6b9QCclOd8XC4YqzlpMyCr1+KDE8Ku24SaCU=
Subject key identifier: 80:5C:48:9B:41:2F:65:BF:04:F2:02:06:1E:FA:3F:69:E1:1D:7D:C7
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 019424455950E81EBEF7BBCA579F1B281176
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa
Signing time: Wed 01 Jan 2025 23:48:32 +0000
ROA not before: Wed 01 Jan 2025 23:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55497
IP address blocks: 5.42.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:59:50:e8:1e:be:f7:bb:ca:57:9f:1b:28:11:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Jan 1 23:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=805c489b412f65bf04f202061efa3f69e11d7dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:09:01:97:2b:05:f8:ba:1a:98:8f:75:62:
ea:40:e7:b2:49:95:fb:d4:98:b1:b7:94:80:11:8f:
8b:9b:7a:18:de:57:db:3b:16:cc:c2:72:de:06:76:
53:8d:93:bb:c5:23:0f:1c:47:ba:35:9f:4c:30:38:
b8:50:c9:08:64:43:39:94:a4:e9:5b:41:66:d9:2c:
70:1e:ef:1d:56:b3:c1:83:ac:c8:fb:24:4d:0b:cd:
67:25:df:33:03:3a:c4:f3:08:4c:1a:63:5c:b7:87:
c1:cf:5a:3b:95:76:a9:d7:e5:9c:0a:2a:fa:c9:3d:
89:9f:39:ad:1a:fa:78:e9:63:e3:75:45:1d:02:fa:
a3:e3:fb:4c:a4:34:6c:e2:bf:40:2d:62:ac:bb:5b:
31:9e:4b:0a:7f:c7:c2:53:06:fa:dd:ba:35:82:29:
7c:6c:32:d0:9c:c0:63:8d:39:67:d5:3e:bd:00:26:
11:fe:42:4c:31:8a:69:5e:28:cb:b3:90:e5:fd:69:
64:81:c8:b3:e2:4c:cf:44:d1:2b:f7:95:79:9e:ea:
a2:38:3a:9c:de:52:bc:1a:1c:28:d5:36:5d:7a:6f:
73:51:76:eb:f6:da:34:85:2c:d6:ed:d5:c3:6a:fc:
79:f9:b9:c1:f9:2d:1f:a6:76:48:c6:cb:7b:4e:07:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5C:48:9B:41:2F:65:BF:04:F2:02:06:1E:FA:3F:69:E1:1D:7D:C7
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:12:cf:a2:41:54:35:4f:e9:e7:84:bc:ce:84:2a:79:48:52:
6f:f8:e6:01:e2:11:b1:2c:f7:dd:0a:12:7b:20:c1:03:50:bd:
c1:6c:60:e7:0d:b6:ae:5c:c5:f1:25:9e:7d:2d:87:59:16:93:
d5:1a:45:f9:87:34:89:96:11:d3:e1:db:b2:f9:18:e9:89:1f:
e1:98:6e:a5:f9:9b:4a:6d:2c:18:3d:f2:bd:9d:bc:22:4d:66:
d0:67:48:1c:f2:ab:36:06:26:49:6d:98:b6:b3:76:03:d2:ec:
e4:df:4d:ce:fc:7c:e7:4e:a1:42:e0:77:33:88:5a:ed:de:6c:
9d:1b:c3:55:5b:08:44:80:f1:c7:70:c6:f4:d8:ba:52:09:d5:
c5:2c:09:bc:3f:b0:48:bf:00:43:96:3e:5b:a9:41:fa:79:00:
63:04:09:0b:ad:41:cf:c3:f0:84:b1:f2:b8:f0:7e:0d:c1:6f:
5c:96:5b:c9:1c:f5:3c:54:d9:9b:64:38:24:c4:a2:cd:a3:c5:
9f:b8:fa:15:48:db:45:c4:22:42:1c:22:cf:08:aa:f2:b6:7d:
f3:0e:75:e0:ed:f1:8b:db:7b:10:a8:03:a5:b4:d4:e9:b7:0c:
b1:41:34:ba:81:af:f0:77:7e:47:e4:ac:57:62:e7:fd:16:ed:
e7:c9:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:30:44 2025 by rpki-client