Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9hF4vLhtIXARAVRYJ3uPfw-TIfg.roa
File: 9hF4vLhtIXARAVRYJ3uPfw-TIfg.roa (raw, json)
Hash identifier: r2s5zASneHDeryw030I3OBiYYUXOL7E7ukUHmNeR2jg=
Subject key identifier: F6:11:78:BC:B8:6D:21:70:11:01:54:58:27:7B:8F:7F:0F:93:21:F8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194222008F0808812F5FA71B36CEC92E303
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9hF4vLhtIXARAVRYJ3uPfw-TIfg.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200032
IP address blocks: 5.83.136.0/24 maxlen: 32
2a00:cdc0:11::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:08:f0:80:88:12:f5:fa:71:b3:6c:ec:92:e3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f61178bcb86d217011015458277b8f7f0f9321f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:bb:d3:04:85:11:0f:02:7c:9f:bc:81:12:
c2:08:83:42:06:76:11:c0:7c:5c:5b:fa:23:06:0a:
a5:5c:3d:9d:c0:79:fc:54:09:ed:36:9e:43:0f:6f:
7c:ec:1b:99:5f:b8:2a:00:72:06:95:7a:34:f9:57:
71:7e:fb:15:32:8b:24:b0:d5:1c:e9:24:96:12:0b:
4f:26:9f:1c:85:b9:9f:d8:a4:3e:6b:4a:54:e4:ac:
c8:28:0f:c5:d3:52:75:e3:68:28:50:24:3e:0e:d2:
48:57:dc:4d:43:dd:d9:67:79:8b:49:6b:52:b8:b3:
b1:af:fe:a8:12:29:f3:59:93:2a:2b:25:bb:2d:a7:
36:58:bc:ff:a0:d4:1a:61:6a:ef:75:87:ba:56:1d:
e5:df:2e:47:8b:a0:ab:b5:42:cc:13:c3:2f:eb:95:
0d:ca:49:6d:17:ac:fe:22:91:22:e4:80:81:aa:dd:
51:b7:70:66:23:61:80:aa:8e:3a:de:36:dc:aa:d1:
ca:3c:9f:8d:9b:05:c8:c2:d2:84:ef:96:2e:65:72:
80:3a:6a:ca:f4:63:d5:82:2f:f7:1b:3c:0d:06:2f:
3c:8c:e7:aa:72:4d:89:30:b1:0c:d8:e0:0e:2f:41:
13:37:42:5c:30:4b:af:e1:2f:a4:35:16:cf:22:ca:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:11:78:BC:B8:6D:21:70:11:01:54:58:27:7B:8F:7F:0F:93:21:F8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9hF4vLhtIXARAVRYJ3uPfw-TIfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.136.0/24
IPv6:
2a00:cdc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
7a:c2:9f:e7:56:28:1a:83:a5:44:f4:3d:12:25:b3:98:de:1d:
16:9b:ab:dc:3c:38:0c:3e:d6:43:10:ca:53:fe:a0:a3:df:12:
e9:c3:8e:30:cd:9e:dc:a7:ea:fd:bc:59:ce:45:27:7a:56:2e:
f2:4f:08:31:e2:c1:a5:0e:ca:6d:37:ac:4e:0a:19:19:8f:ae:
6b:e1:e9:da:7a:04:77:e3:d0:10:54:78:d3:6f:ba:8e:54:ed:
24:b2:ac:67:ff:17:03:8b:30:38:1a:da:5b:fd:75:42:4a:9c:
90:c0:ac:8b:87:ea:ab:65:e1:21:54:13:f3:ce:62:f2:5b:0f:
66:66:7d:8a:6e:be:98:be:b4:ab:06:67:f1:99:a9:51:33:38:
1f:90:7e:34:68:fa:a2:68:4e:01:19:49:0a:a9:c1:9d:81:dd:
65:d7:84:4d:ab:87:d3:4e:42:40:38:6b:e7:0d:69:2f:5a:9d:
9a:11:dd:86:b9:03:f2:b9:90:69:d9:39:99:7d:e0:25:93:6b:
57:c3:dc:08:c3:93:1a:35:64:28:0a:bd:e5:3d:48:6a:77:16:
c1:ff:42:09:1c:96:97:15:28:7d:e1:33:3f:c7:8a:44:c1:bd:
95:dc:3d:c8:2f:6c:1d:64:f4:0d:3d:d0:7c:39:35:82:3d:2d:
9b:8d:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:52 2025 by rpki-client