Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3VH7W1BZQySzJrpbDZl5fXeC0fI.roa
File: 3VH7W1BZQySzJrpbDZl5fXeC0fI.roa (raw, json)
Hash identifier: cbOm6sRjY2CkWf6GVlwrFi2jXjjhigFUX5tUnwPk30k=
Subject key identifier: DD:51:FB:5B:50:59:43:24:B3:26:BA:5B:0D:99:79:7D:77:82:D1:F2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01943FC2CEEE1AF7C43E7E02C05C4D349416
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3VH7W1BZQySzJrpbDZl5fXeC0fI.roa
Signing time: Tue 07 Jan 2025 07:55:19 +0000
ROA not before: Tue 07 Jan 2025 07:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34899
IP address blocks: 5.230.200.0/24 maxlen: 32
5.231.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:c2:ce:ee:1a:f7:c4:3e:7e:02:c0:5c:4d:34:94:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 7 07:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd51fb5b50594324b326ba5b0d99797d7782d1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:15:65:74:5f:0f:47:c7:07:78:52:42:6d:
d4:02:86:40:f2:bc:8d:3c:6a:e4:16:7e:57:c3:14:
d8:20:05:e6:d4:70:d7:6f:a5:88:58:13:79:17:f2:
d4:2b:cb:e8:12:fe:f1:14:d0:4f:20:f7:7b:89:ca:
3a:09:2e:76:f8:99:5b:ed:57:e7:88:98:e7:df:f3:
7c:e9:6c:ef:50:3e:34:4a:ee:6d:9e:46:af:94:a1:
74:13:82:ec:8e:7f:e2:fb:6a:f5:77:38:4c:da:23:
d9:62:04:a7:c6:08:46:ef:b3:0b:98:0c:13:94:29:
dd:31:9f:af:e7:59:5b:63:33:3b:38:64:ff:80:fc:
d4:6c:cf:bf:a9:6c:c2:b9:6c:f8:83:e9:3f:c8:dc:
2d:29:b3:50:cf:2f:32:09:ce:04:16:4a:b8:d3:15:
9e:fd:4a:03:e9:df:94:7d:a7:9f:9d:7e:92:3d:02:
dc:ae:90:30:01:e8:0c:9d:2c:74:70:73:67:4d:2d:
d7:38:74:15:33:9d:f9:7a:4a:d2:95:88:1d:66:06:
53:ba:86:42:71:56:a2:9b:89:86:e4:10:6f:39:bc:
07:af:19:3d:01:a7:58:cb:5f:40:1b:22:f1:03:2f:
ae:28:e5:6e:90:aa:1c:5c:cf:63:63:35:54:1b:92:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:51:FB:5B:50:59:43:24:B3:26:BA:5B:0D:99:79:7D:77:82:D1:F2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3VH7W1BZQySzJrpbDZl5fXeC0fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.200.0/24
5.231.39.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6d:c1:1e:5b:ad:d3:3e:40:46:98:bd:8b:23:47:29:d3:98:
8a:d3:5f:d9:e0:b1:3c:91:a9:61:d2:a3:b8:bb:46:fd:45:39:
92:e4:dd:24:44:b9:dc:b2:da:d4:9e:3d:6b:23:f8:ff:a9:41:
85:e5:90:34:06:7b:ee:de:4a:17:89:d8:fe:e9:b6:36:26:f3:
77:2a:5d:e2:22:0c:c7:0a:28:8f:38:42:6e:5a:d8:fe:25:bb:
6a:8f:81:99:c3:53:26:af:71:63:35:8f:2a:1b:c6:1e:52:61:
33:f7:d1:9d:61:03:3b:bb:b4:cb:94:d4:61:9e:8a:40:b0:85:
3d:51:9d:17:48:74:90:b5:d3:4a:87:34:2e:7a:9e:d6:35:4a:
7d:ec:7c:03:cf:c7:24:5e:8f:c7:e7:e4:63:83:60:c5:65:ff:
88:c1:b9:b6:9b:bf:00:c9:1f:dd:8b:ce:7b:a8:b1:c7:88:16:
7e:2e:92:d6:0a:bd:95:46:3f:0f:9f:05:d5:8f:f9:4d:02:a3:
c3:41:86:28:d6:be:fb:7c:ae:82:c0:f3:bd:84:85:52:59:cc:
5d:fb:b5:0a:49:87:cb:73:62:5f:f3:7d:b8:06:df:54:8b:09:
83:a6:d8:41:f5:80:cd:fc:6d:f2:52:a7:1d:e1:6f:a1:18:7d:
cb:47:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:49 2025 by rpki-client