Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2RdKlTuJG6mD-Vy_tmUPT5hh3JA.roa
File: 2RdKlTuJG6mD-Vy_tmUPT5hh3JA.roa (raw, json)
Hash identifier: AQaY2CzaRH86FXc+hNJTrskmMjbuYa2tDda9rWCaiTw=
Subject key identifier: D9:17:4A:95:3B:89:1B:A9:83:F9:5C:BF:B6:65:0F:4F:98:61:DC:90
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019373AB5BBD52CCD521DCD199F7FABD7340
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2RdKlTuJG6mD-Vy_tmUPT5hh3JA.roa
Signing time: Thu 28 Nov 2024 16:47:10 +0000
ROA not before: Thu 28 Nov 2024 16:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200993
IP address blocks: 5.175.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:ab:5b:bd:52:cc:d5:21:dc:d1:99:f7:fa:bd:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 28 16:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9174a953b891ba983f95cbfb6650f4f9861dc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:ea:94:0e:53:7d:5d:ce:8d:eb:e2:e9:5f:
80:e6:fc:fb:12:6e:77:de:e8:cc:cf:c9:89:29:83:
55:b6:f6:8b:ed:6f:21:9e:3d:58:65:ac:96:69:73:
c0:cc:1c:7f:54:79:62:83:5c:28:64:cb:5d:1b:b5:
e7:24:a5:62:b5:67:ad:6f:0b:2a:1f:39:a3:c9:4b:
43:39:7c:06:83:55:5b:64:fa:db:33:da:e3:dc:50:
76:4c:ea:36:6f:6a:9a:3f:b6:21:3b:1c:37:8c:88:
f2:37:c3:57:d0:3b:7b:c0:62:3b:91:3e:dd:d2:dd:
8c:82:3e:28:75:b2:53:cd:16:df:29:a7:67:7c:b2:
3b:4f:34:b6:03:1a:5c:af:41:01:37:29:db:d7:d0:
e2:d8:d9:ca:ff:3c:2e:f9:8a:eb:3b:f9:10:42:d6:
02:8f:a9:98:8f:99:16:22:6b:b1:f7:5b:b3:71:78:
54:79:dc:1c:f4:1b:b2:07:0d:d0:e1:82:a1:c8:cd:
07:c8:4c:84:c3:2b:7e:38:cf:5f:a0:92:c2:67:41:
e0:f2:00:ed:9c:ab:45:d5:ed:fa:b7:cf:b5:d0:c2:
0a:e9:c3:67:b0:5d:1f:56:b7:47:d8:52:80:cb:00:
7e:f6:28:77:6c:ce:8e:d1:e1:63:a5:9b:2a:a6:1e:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:17:4A:95:3B:89:1B:A9:83:F9:5C:BF:B6:65:0F:4F:98:61:DC:90
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2RdKlTuJG6mD-Vy_tmUPT5hh3JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.134.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:da:5a:aa:16:3b:1d:6f:93:c3:44:ab:ca:64:c7:87:66:c5:
34:ff:a6:63:db:2d:46:f7:fe:76:ce:32:b0:b3:89:8e:1a:a2:
11:37:d3:ce:d3:b1:eb:31:cd:48:63:7c:60:f7:17:1b:c0:c8:
8f:23:aa:ca:3c:db:3f:d4:40:16:23:d3:44:88:2f:f2:9a:59:
0c:34:72:b2:36:b7:16:02:d4:74:c7:71:00:0d:f6:ec:fa:e8:
85:c6:2a:61:6e:35:63:4e:18:9c:67:10:28:3d:4a:7f:df:2a:
1e:22:e4:1a:04:06:e3:59:0c:a7:20:d5:aa:b8:00:35:fa:27:
c8:54:01:60:93:ce:d2:e4:b6:74:f0:5b:6d:11:09:e3:e5:80:
e5:e7:1b:93:b7:f4:bd:c6:7e:2e:93:80:5e:54:34:b0:61:0d:
e8:60:c5:37:6b:9e:69:e4:fb:1b:46:18:ce:81:d2:e2:e7:5f:
c8:a5:ff:20:25:39:70:2a:53:12:32:4f:60:e0:ea:8a:4d:ea:
3d:35:d5:b0:06:48:37:30:8e:ae:91:4a:ff:ad:ea:c2:dc:68:
67:ae:6f:f7:1b:c3:1d:38:f8:15:cb:9e:cf:d6:86:f9:a6:35:
5f:13:76:9b:a3:22:a6:bb:51:88:aa:d0:e9:2c:21:51:0e:44:
8a:a7:56:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:08:02 2025 by rpki-client