Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/B3FUyAPLYdrOTdH0qyUeja50tl0.roa
File: B3FUyAPLYdrOTdH0qyUeja50tl0.roa (raw, json)
Hash identifier: nox07zmO2jYG1lQklugoFVBZ5X3TomBqDzY8VfOQsK8=
Subject key identifier: 07:71:54:C8:03:CB:61:DA:CE:4D:D1:F4:AB:25:1E:8D:AE:74:B6:5D
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01857054CE9CD17E69E9C0463A786FD691B0
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/B3FUyAPLYdrOTdH0qyUeja50tl0.roa
Signing time: Mon 02 Jan 2023 02:34:44 +0000
ROA not before: Mon 02 Jan 2023 02:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61424
IP address blocks: 5.252.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:54:ce:9c:d1:7e:69:e9:c0:46:3a:78:6f:d6:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 2 02:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=077154c803cb61dace4dd1f4ab251e8dae74b65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:05:53:1a:91:40:85:9b:c2:9c:ce:24:f5:b4:
91:e1:62:61:ee:0a:8c:de:83:52:97:57:15:f5:34:
56:ef:e7:c5:0b:20:94:ac:06:88:dd:5a:24:8e:ff:
41:1a:f2:17:b8:8a:ce:54:91:a7:37:d8:e2:2f:64:
70:42:00:26:87:45:86:84:ba:fe:56:65:f1:ac:85:
12:0d:ef:f0:f2:86:7a:fc:68:09:cc:1a:34:55:6a:
e2:13:8f:47:b1:6c:5e:3d:96:c3:30:96:d4:a3:54:
d8:b7:90:02:1c:59:0d:43:8b:71:f2:9b:52:f8:d4:
5f:4e:c2:a1:7d:42:c6:55:9d:62:49:d3:ee:3b:c0:
44:34:75:bb:79:d5:ae:e1:ab:e3:66:01:cb:ee:7f:
3f:ab:60:23:35:28:a0:d7:d0:3f:fc:44:9e:60:a6:
80:fc:12:01:e9:b2:68:fa:ba:d4:77:d2:06:7a:37:
5e:3c:f5:d8:67:ac:b0:57:4d:c4:80:d4:64:1d:2e:
cf:59:f9:46:0d:15:4c:98:b0:22:ba:be:ae:a1:53:
54:88:ad:ef:20:40:48:af:c4:90:71:a3:65:ef:d8:
bb:b3:88:71:c1:b8:1d:93:cd:82:04:ef:37:2e:e9:
c3:f9:52:1f:5e:b2:2d:de:15:17:b1:06:11:e9:ba:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:71:54:C8:03:CB:61:DA:CE:4D:D1:F4:AB:25:1E:8D:AE:74:B6:5D
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/B3FUyAPLYdrOTdH0qyUeja50tl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:10:8c:14:f0:7f:dc:85:30:96:05:60:9e:44:38:a7:7e:8b:
60:e5:2c:9e:a6:8d:8f:f8:58:d6:3d:18:49:07:a8:86:8a:17:
95:22:8c:08:e0:5c:92:4a:0a:a7:04:04:5e:32:de:c5:a1:96:
2f:5d:06:28:d5:23:2d:38:44:36:f0:f9:e6:54:d0:d6:9d:7c:
62:39:93:3b:d2:df:fc:c8:51:ba:81:42:42:7a:e9:7a:e8:cb:
c4:d2:5f:61:9e:ad:c0:3b:c5:fb:4b:ea:96:30:8b:ff:d3:37:
cf:60:cd:f6:81:82:02:a0:e6:68:1d:75:fd:13:32:b0:d0:fd:
41:5f:90:6d:fd:dd:44:0e:e0:8c:8a:7e:5c:88:94:89:0a:fd:
c1:e6:3d:97:3c:e9:4b:ba:a7:75:92:50:89:0b:8f:50:60:4f:
96:16:e5:cf:4e:4f:2a:d3:54:98:4b:24:3f:46:93:5c:3f:9f:
a8:63:1a:9a:83:c6:27:8e:95:bb:9c:aa:e7:95:b1:80:e2:58:
7b:18:cd:de:49:71:76:18:1d:40:ec:8f:ca:ac:da:b1:a0:5b:
b9:5a:b8:88:d4:e7:1e:de:53:1d:ae:61:be:51:54:06:1c:84:
3d:32:d2:43:64:b6:87:df:77:4f:39:ef:1e:20:c4:24:22:19:
94:a5:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:53 2025 by rpki-client