Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-_gKtBCY7RMHc_d8dE4SLFGVFs8.roa
File: 1-_gKtBCY7RMHc_d8dE4SLFGVFs8.roa (raw, json)
Hash identifier: rt96cMho5SQRC2GgaBnTGgE35SND705oFXv1U5SIRHQ=
Subject key identifier: FB:F8:0A:B4:10:98:ED:13:07:73:F7:7C:74:4E:12:2C:51:95:16:CF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194221FFE9E3C64C13F4E97C5FBB1DCC454
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-_gKtBCY7RMHc_d8dE4SLFGVFs8.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47585
IP address blocks: 5.175.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fe:9e:3c:64:c1:3f:4e:97:c5:fb:b1:dc:c4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbf80ab41098ed130773f77c744e122c519516cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:c4:69:60:20:42:1a:d3:9a:0a:e3:a7:b4:
e0:42:be:8f:79:7f:7e:f6:69:37:38:ba:d0:dd:3f:
87:88:73:20:fd:12:0c:de:00:f2:e6:63:1e:18:57:
ac:ee:9d:46:dd:5a:2d:a0:6b:6a:ff:53:eb:db:b3:
c7:b9:bc:73:e2:3b:49:47:29:af:00:fd:95:d1:7e:
9f:62:ce:d1:3b:53:49:ad:6a:cb:c6:e1:d0:9f:e5:
af:c4:e8:52:00:3b:33:1e:94:49:a9:79:48:91:7d:
63:36:33:be:81:2c:83:24:34:ed:f2:b3:de:f1:78:
88:4e:2f:43:6d:e0:ff:f0:07:fe:3f:e3:ef:9d:5c:
08:aa:e1:e5:b1:89:7d:be:c5:b1:04:8f:79:4f:a3:
1b:97:0d:54:2e:92:5f:51:da:db:8f:d3:0f:d6:e1:
07:17:4a:10:df:0f:41:51:22:d8:d2:7f:bc:4e:4a:
9d:92:8f:8b:3a:fe:5f:aa:9f:3c:f9:4a:b0:9f:1c:
f3:d8:2c:4f:37:66:4f:a4:ca:4f:65:dc:13:3f:f3:
6d:24:3d:52:ad:2f:6b:cc:f7:a4:07:d5:a1:02:18:
f4:57:29:a2:d3:a0:9c:e3:5f:2b:69:58:96:79:df:
cd:c6:8c:a9:b8:6d:58:b4:89:07:e7:86:8e:79:bc:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F8:0A:B4:10:98:ED:13:07:73:F7:7C:74:4E:12:2C:51:95:16:CF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-_gKtBCY7RMHc_d8dE4SLFGVFs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.136.0/24
Signature Algorithm: sha256WithRSAEncryption
17:15:03:97:98:49:93:58:06:9e:2e:28:e4:ea:a2:af:b4:65:
a6:c5:af:64:92:c1:7c:dc:33:f1:39:66:74:af:39:9c:ed:c6:
d9:b9:ed:7e:1b:7c:ea:17:71:f9:99:b3:56:26:97:e4:51:11:
b7:8d:b0:3e:d6:dc:a6:2c:a5:52:e1:c4:bd:2e:bb:8b:7c:21:
bc:ae:e2:97:29:3b:e3:4d:26:5e:78:0d:f8:6d:60:37:a8:0b:
04:57:54:63:ae:93:47:5a:d0:5e:4a:bc:cc:87:2b:c1:e7:c7:
df:11:a1:60:ba:d1:b4:91:2e:cf:54:4a:28:07:4e:ab:39:67:
99:34:99:40:af:40:4f:0f:2c:0d:ac:da:12:d8:76:1a:e3:71:
10:32:65:f9:65:92:71:43:d8:68:d4:24:e8:f7:ed:0b:0b:63:
06:08:82:bd:8f:60:f7:90:7a:03:6b:7b:5e:11:aa:f6:e0:c6:
a2:02:d7:f1:06:b5:98:14:e5:7b:e8:f9:30:3f:dc:35:85:13:
58:e6:3d:7f:26:0a:4a:e4:91:a6:92:c5:f2:7c:63:08:e9:88:
5b:49:b5:13:24:44:ba:39:58:63:b7:56:80:e9:ec:47:db:91:
b9:fb:90:bf:70:ce:d1:19:fa:6d:55:ff:62:80:16:e4:56:48:
6c:d3:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:28 2025 by rpki-client