Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/Exa6P8U16wBwy249Xl3S4z2dl98.roa
File: Exa6P8U16wBwy249Xl3S4z2dl98.roa (raw, json)
Hash identifier: SlWLNCb67+QUzGRRRGHq6M2PebkL+8DWJuLQ/TszFpk=
Subject key identifier: 13:16:BA:3F:C5:35:EB:00:70:CB:6E:3D:5E:5D:D2:E3:3D:9D:97:DF
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 01856E38A763791707B5C893220F359FDBEE
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/Exa6P8U16wBwy249Xl3S4z2dl98.roa
Signing time: Sun 01 Jan 2023 16:44:44 +0000
ROA not before: Sun 01 Jan 2023 16:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12722
IP address blocks: 5.182.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:a7:63:79:17:07:b5:c8:93:22:0f:35:9f:db:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jan 1 16:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1316ba3fc535eb0070cb6e3d5e5dd2e33d9d97df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:44:90:2d:b1:a9:d4:39:d6:fc:48:88:24:
bd:8c:53:42:98:9a:b4:9f:52:df:8f:98:0c:1f:08:
35:30:fb:d7:1d:54:70:07:a1:b2:2d:a3:ed:2c:35:
be:78:cd:a2:2a:fe:31:ee:a2:1b:e2:b7:82:b6:6d:
f8:37:89:64:3d:b8:51:0a:33:c3:35:37:6b:18:3b:
32:c9:9c:98:7d:5f:3b:f3:35:a0:f2:e9:ba:d4:ce:
6d:cd:5d:fd:2c:10:5d:f9:50:0b:57:49:d9:50:c0:
6a:03:c5:cb:f4:6e:ee:77:50:06:bc:a5:b4:f8:ae:
2f:cb:89:6f:ae:1c:67:3f:a5:e4:0b:c1:59:4f:17:
d3:ea:40:46:5a:51:bc:a4:93:b5:cc:03:f1:9e:5f:
74:e4:c9:c6:d1:f3:78:1b:0e:7e:67:a6:b9:40:5e:
33:b2:be:51:60:df:21:6d:0e:0e:1c:10:c1:55:c1:
80:01:09:05:67:33:00:26:28:10:c1:93:1d:e6:11:
da:b9:36:25:ad:a5:cf:d1:4f:a5:80:c8:eb:f3:0f:
e5:eb:17:b7:b6:bb:bf:9f:b6:f7:25:cb:fd:26:e0:
11:b3:58:78:7a:7b:77:50:54:d8:09:17:1e:e4:1f:
2c:85:90:f8:43:2e:db:31:12:5d:f1:db:09:4e:ca:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:16:BA:3F:C5:35:EB:00:70:CB:6E:3D:5E:5D:D2:E3:3D:9D:97:DF
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/Exa6P8U16wBwy249Xl3S4z2dl98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.116.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:55:2c:fb:fd:d1:9a:ba:d9:11:98:4a:1e:bc:4f:d9:e9:62:
51:bb:7c:a3:b2:6d:b5:ad:d6:ce:fb:fe:d1:b8:62:03:70:8b:
b7:6e:41:8a:00:08:33:4c:ea:16:02:6b:93:bc:ad:6d:b8:e8:
8c:b8:08:c4:3f:c0:34:8d:6e:d4:12:a3:f1:cc:30:fe:e8:30:
f9:35:6b:25:47:5e:85:75:11:47:76:9e:ff:65:b6:68:99:1d:
c1:0c:62:97:24:d8:ac:0e:e2:ee:c8:05:8c:be:0f:c8:9a:7f:
82:c2:71:e8:d1:c8:5c:ae:01:b6:ec:ff:61:3e:43:6c:8c:5c:
ec:54:0b:1e:a1:4a:b2:61:b5:8a:e0:67:9b:87:26:66:bb:02:
16:c1:63:22:10:79:5d:9c:b9:89:a6:7f:ec:49:42:b4:48:8a:
66:f2:aa:f9:72:88:c8:a6:d8:bd:dc:50:ff:c4:71:12:86:1a:
8f:bd:8c:e4:ee:8d:98:16:c2:b6:39:cb:a0:39:26:20:f8:76:
84:a6:5a:f1:fb:b8:1d:86:f6:9e:97:31:a2:5f:82:36:17:f2:
d2:5a:0f:0e:7e:9d:ba:c9:89:eb:b5:b1:98:96:d1:24:1e:75:
b3:ed:fa:f6:e5:cb:6e:e1:6e:0c:75:cd:95:9d:c2:5f:cd:19:
e3:c9:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:10:05 2025 by rpki-client