Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/5jE6Po0pndWiTEVH8D2IK64ZUbk.roa
File: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (raw, json)
Hash identifier: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=
Subject key identifier: E6:31:3A:3E:8D:29:9D:D5:A2:4C:45:47:F0:3D:88:2B:AE:19:51:B9
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 01944FD1697F03C37AD97FF374885AE9E439
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/5jE6Po0pndWiTEVH8D2IK64ZUbk.roa
Signing time: Fri 10 Jan 2025 10:45:11 +0000
ROA not before: Fri 10 Jan 2025 10:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50360
IP address blocks: 5.181.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:d1:69:7f:03:c3:7a:d9:7f:f3:74:88:5a:e9:e4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jan 10 10:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6313a3e8d299dd5a24c4547f03d882bae1951b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:d9:c2:a3:3c:5f:a6:b9:c5:3f:00:6d:89:
1f:42:6c:98:c9:37:cd:51:82:cc:87:4c:b9:ad:e6:
52:fb:73:c8:09:2c:95:97:55:6c:72:3e:9b:67:83:
ae:34:2f:68:21:48:ab:34:29:48:c6:5b:49:4f:cb:
14:10:8f:c6:f3:c3:09:ab:6c:6c:12:95:3a:a2:93:
33:58:28:07:c1:8a:7c:99:60:eb:42:fa:00:fb:06:
74:4c:27:80:10:0f:90:5a:8b:16:1a:8d:c3:3c:d9:
0b:ef:be:5a:34:57:6c:73:9c:33:9b:a1:dc:92:22:
7c:6c:50:2b:96:d8:a5:f2:1e:64:41:10:c7:99:e0:
ce:ad:66:d1:67:94:61:71:28:4e:aa:27:67:b8:75:
2a:90:b3:ae:d5:ea:e1:fa:1a:56:be:9c:ec:e9:f1:
94:62:64:d6:65:37:97:3f:89:3f:8f:0f:61:93:7f:
7a:8f:e3:db:9b:44:77:b5:5c:c5:e6:65:b2:c3:ac:
11:29:b0:9b:30:4b:1e:08:14:b4:86:90:4c:48:4b:
5d:df:88:60:c7:f6:b5:31:81:32:50:bd:e8:e9:b5:
2f:8f:a2:89:f5:28:0a:2e:96:43:d6:b4:ab:9d:01:
e8:bd:59:e3:ab:dd:66:50:f9:91:d5:62:9e:48:d6:
5b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:31:3A:3E:8D:29:9D:D5:A2:4C:45:47:F0:3D:88:2B:AE:19:51:B9
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/5jE6Po0pndWiTEVH8D2IK64ZUbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c4:f3:28:b7:d9:f4:9b:b4:a6:fa:1c:8b:de:cf:06:b6:41:
1a:de:2c:87:80:e4:bb:81:79:a1:68:e8:96:7c:0b:6c:41:42:
6c:5c:95:bd:37:4a:56:e6:b7:20:f7:ee:51:68:a9:40:d3:82:
25:75:1e:cc:40:52:d6:af:13:64:4d:58:a6:bd:85:b6:e2:0b:
bf:f4:12:c8:1a:3d:be:66:03:37:65:f8:30:f8:6c:99:27:55:
bd:9f:07:26:34:58:6a:c0:db:da:72:34:af:e0:58:c7:1c:0e:
02:a8:94:81:93:5d:f7:3b:9d:56:92:74:b7:34:07:11:95:ac:
fe:1f:e0:03:a9:aa:e1:12:db:ca:85:1c:59:07:fb:38:c9:1b:
35:85:c3:30:47:f1:00:81:7d:16:26:31:84:0b:19:0a:8b:d9:
7c:09:26:fb:33:2b:c1:bc:66:26:60:97:db:ce:24:91:10:f9:
5a:8e:36:f8:33:78:9e:ab:cf:23:65:40:b8:67:e8:01:8d:3c:
2d:b3:03:17:28:15:ca:45:90:ae:0e:ba:f1:09:ed:65:1c:68:
03:13:09:0d:03:00:42:9b:12:63:68:ef:6d:99:b2:1e:91:ec:
52:5e:de:c7:6c:57:16:81:88:c5:d4:e2:34:86:2f:c7:14:34:
9c:f0:19:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:19 2025 by rpki-client