Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa
File: UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa (raw, json)
Hash identifier: he6S2b9IPHmcJG3wUgyxY2EilJ7c6oeB4o0eAPgBdLw=
Subject key identifier: 51:59:E1:33:3E:09:87:67:A5:92:EB:E6:30:F9:BB:26:DF:6C:BE:2F
Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial: 019422FC1156A4EA33A77540603E17731A84
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 5.180.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:11:56:a4:ea:33:a7:75:40:60:3e:17:73:1a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5159e1333e098767a592ebe630f9bb26df6cbe2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:56:ea:29:fc:c6:4c:ca:46:66:e9:f9:a9:
71:fc:86:d9:86:de:19:61:76:9f:08:f8:62:89:c0:
a9:41:9b:76:f3:f8:07:da:ec:cd:f5:02:ee:86:c3:
6f:f0:07:25:78:50:36:ca:80:81:30:ac:ce:9f:f4:
d5:1c:a8:c2:f2:a9:46:e4:76:b4:3c:e0:3b:f1:c9:
d6:e0:ce:44:d6:ad:6b:dc:c1:ba:43:f1:f7:24:e8:
df:e4:7a:e9:fa:73:a4:d2:18:1c:fe:d2:98:ff:69:
fd:9a:9e:f6:a8:8c:b2:76:0a:64:a1:68:99:72:37:
40:37:1b:f7:74:16:16:2f:74:c1:9b:a9:05:6b:af:
83:0d:c9:8c:63:64:48:5a:f3:f7:80:6a:72:94:b1:
4b:b5:5b:7b:92:95:1a:ea:5b:07:26:0a:6b:b7:d2:
f6:3e:73:04:a8:5c:f6:0d:58:85:fe:96:34:ea:90:
ad:49:bc:90:29:bb:8c:73:48:dd:89:31:86:b6:47:
cd:35:43:97:a0:f9:5b:1f:83:99:79:12:3b:8c:7a:
6a:fc:9e:c7:58:dd:1c:af:b9:51:2d:e2:c4:8e:09:
e4:ac:50:b8:82:13:70:b6:04:78:67:22:b8:3d:a9:
49:58:39:79:2b:75:03:43:94:ef:ce:6a:c5:f7:31:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:59:E1:33:3E:09:87:67:A5:92:EB:E6:30:F9:BB:26:DF:6C:BE:2F
X509v3 Authority Key Identifier:
keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.132.0/22
Signature Algorithm: sha256WithRSAEncryption
91:23:7a:65:66:30:bb:ef:85:ab:25:0d:17:be:3a:3f:c7:be:
b5:3a:c6:1f:fc:50:35:77:ee:5a:e1:f6:cf:48:ed:eb:12:e2:
1e:a0:53:91:90:34:a8:90:92:fa:87:ac:f5:6e:c8:72:af:80:
97:2a:3e:ba:26:8a:d1:e4:e9:23:35:fe:e1:90:ef:11:81:08:
d6:6d:0c:02:22:a2:8f:7c:0b:43:3e:db:49:1d:98:8f:ba:4b:
a8:60:56:d4:c9:d5:7d:43:ed:3a:c0:1e:07:1d:85:af:1a:f1:
02:62:77:19:b7:02:2a:6e:f9:1f:e8:0c:48:ef:2d:a4:75:ce:
9d:f3:70:19:ee:75:1a:ce:54:d0:2f:74:d7:00:66:ae:82:1e:
a9:2e:8b:92:92:65:02:43:b9:cd:d9:ea:8e:90:23:a9:21:41:
0d:52:08:2b:e6:e1:4e:d0:aa:c2:79:67:5f:35:4b:41:1e:fd:
0c:be:f2:3a:c9:f7:38:d6:c4:9b:3f:7b:9b:56:77:4c:03:b9:
3f:83:55:ee:cb:75:b8:d5:cc:38:c3:e7:22:dc:41:8b:7b:42:
44:67:e9:b1:f5:bb:95:a7:b8:d4:ce:57:93:82:6e:f8:1a:5b:
e7:8b:5f:e7:4a:92:88:3c:49:a4:a8:09:82:9d:06:85:64:b3:
13:0c:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:54 2025 by rpki-client