Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6zz4sQS76cS8Vlgw8N7InmYYBx4.roa
File: 6zz4sQS76cS8Vlgw8N7InmYYBx4.roa (raw, json)
Hash identifier: aLcpCMiaEj0heluOyTo8CWfnF5xGtrQIripK4n/Z/DA=
Subject key identifier: EB:3C:F8:B1:04:BB:E9:C4:BC:56:58:30:F0:DE:C8:9E:66:18:07:1E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194B5FB353F622CAA63AD062671B838BC5E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6zz4sQS76cS8Vlgw8N7InmYYBx4.roa
Signing time: Thu 30 Jan 2025 06:52:06 +0000
ROA not before: Thu 30 Jan 2025 06:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215232
IP address blocks: 5.231.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:fb:35:3f:62:2c:aa:63:ad:06:26:71:b8:38:bc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 30 06:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb3cf8b104bbe9c4bc565830f0dec89e6618071e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:38:6a:fc:8e:ff:26:39:26:e7:bc:e3:0c:
de:e5:c6:8e:3a:1e:ca:a2:64:41:d1:f2:68:87:01:
21:88:e4:ac:9b:db:cb:53:db:1c:4a:70:db:8e:ed:
04:ab:58:f1:47:3b:64:9b:d1:a7:bd:d6:f7:c0:8c:
63:96:de:a3:c8:70:4f:25:6e:4b:1d:60:44:c7:ab:
ac:97:14:71:7f:6d:98:97:0a:ba:3c:1c:2f:ac:a0:
b8:2c:dd:e1:bd:d6:1c:bf:6d:b9:f6:42:e8:43:86:
87:c4:a9:5f:3f:26:bb:2c:77:d9:8f:1b:8e:99:a7:
ea:c4:83:1c:4b:1f:3d:07:49:be:16:bd:5b:5b:f3:
71:f3:fb:c3:19:d8:8f:fb:42:55:55:74:c3:60:79:
0b:57:cf:cc:ab:a6:e8:44:b0:73:91:3f:32:12:8d:
d8:ec:8c:e6:40:ca:62:c2:5d:d0:e1:85:2a:4f:e5:
88:8c:66:2c:8f:00:f4:d6:00:e7:9c:66:36:23:05:
33:73:06:82:42:50:d2:99:f8:e6:26:20:5c:d1:44:
0e:6a:47:81:8e:91:e9:be:66:29:e7:f4:63:a1:96:
29:19:0f:78:bb:0a:71:21:1b:88:0e:66:a9:e4:90:
3e:92:fc:14:b7:a4:14:03:1e:a2:43:1a:17:76:96:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3C:F8:B1:04:BB:E9:C4:BC:56:58:30:F0:DE:C8:9E:66:18:07:1E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6zz4sQS76cS8Vlgw8N7InmYYBx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.230.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7c:60:9d:b6:b6:f7:b6:80:2e:7a:8e:63:d1:e4:4d:3f:5f:
c4:c0:01:da:fc:9a:e6:ba:1e:eb:f3:3c:e8:12:c2:66:03:a8:
9f:68:0c:59:7a:45:6d:30:ac:67:61:0b:0a:b5:d1:4a:3a:af:
f8:46:91:9a:2b:2f:a0:6c:5d:06:f4:01:98:f7:59:b3:4b:03:
47:41:85:9e:18:9f:b7:6b:7a:c2:40:b1:42:c4:51:6a:e5:c4:
07:68:59:5e:3f:eb:7e:3c:06:10:84:3a:98:d8:5e:23:34:7a:
7c:f0:83:28:8d:9e:98:a9:df:03:04:ac:b4:bd:22:3f:83:e1:
ac:8a:62:94:32:ad:2f:e5:56:c1:b6:95:9a:5b:54:13:7d:6a:
3a:92:b8:d5:da:28:a2:45:83:c2:9f:a3:a1:0d:89:e8:20:62:
61:ab:31:ff:a4:59:9e:db:96:15:57:30:e3:6e:22:d7:82:26:
cb:99:6e:1b:74:12:25:d6:65:97:6b:f8:81:7e:fa:07:06:a9:
d8:09:20:9c:77:d2:07:bf:41:71:78:5f:f5:10:f3:32:67:74:
d0:bb:ff:ac:29:62:5a:87:91:23:a1:1f:90:70:6c:9a:76:ce:
c6:20:d8:38:25:f2:13:0a:3c:2b:bc:61:45:62:ee:09:d8:5b:
87:05:6f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:39 2025 by rpki-client