Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AgifPX7bQQHmHhclS3u5ulp53vA.roa
File: AgifPX7bQQHmHhclS3u5ulp53vA.roa (raw, json)
Hash identifier: L6ZehpnL8FRHETKdN1Nv/lzFbtcVPg0yevI+7WvLfT0=
Subject key identifier: 02:08:9F:3D:7E:DB:41:01:E6:1E:17:25:4B:7B:B9:BA:5A:79:DE:F0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195006BD9826B5AB462F463502155E75E9E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AgifPX7bQQHmHhclS3u5ulp53vA.roa
Signing time: Thu 13 Feb 2025 17:47:02 +0000
ROA not before: Thu 13 Feb 2025 17:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62403
IP address blocks: 5.231.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:6b:d9:82:6b:5a:b4:62:f4:63:50:21:55:e7:5e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 13 17:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02089f3d7edb4101e61e17254b7bb9ba5a79def0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:3c:92:33:f3:9a:f8:09:09:05:a6:b1:de:
fb:95:d2:11:ee:e6:c9:e0:57:82:de:4d:9d:ee:7a:
85:4e:54:dd:cb:c0:17:fa:09:58:85:73:50:38:93:
68:57:9a:d9:fa:9d:23:cd:1d:4e:7c:72:93:76:43:
fc:c7:11:cc:b4:d5:db:00:ba:2f:e6:a9:59:c8:bf:
b9:c2:da:6a:71:09:d6:8b:39:00:69:a5:7e:98:ae:
a6:2b:75:0f:54:64:e4:2d:1d:3e:36:22:f2:59:da:
96:51:c2:99:ae:a9:31:88:21:92:da:6f:b7:53:e4:
68:71:0a:ad:5d:0b:8b:1f:b0:75:62:2c:6c:54:f9:
2b:dc:1e:75:2c:58:8a:f7:a8:de:86:fa:77:46:2a:
30:90:cf:5e:6f:7b:be:91:21:b1:de:f5:39:13:ab:
6d:8d:89:49:bb:51:09:5d:60:ed:16:eb:4b:2f:b8:
f7:5a:d6:52:44:5e:c7:ea:a3:e2:92:ca:73:f9:51:
eb:c2:8e:2a:c7:7b:92:28:c3:a4:91:2e:bf:77:38:
00:b7:f8:8e:0d:36:4c:b3:19:78:a4:25:40:7a:35:
55:b1:89:2f:e1:91:fc:0e:0e:a0:d3:8f:1a:1f:52:
fe:ee:24:ec:e8:c3:12:c3:c0:a5:92:2d:a2:98:45:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:08:9F:3D:7E:DB:41:01:E6:1E:17:25:4B:7B:B9:BA:5A:79:DE:F0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AgifPX7bQQHmHhclS3u5ulp53vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1b:8f:40:61:8a:e8:7f:0a:42:d5:78:c1:be:df:aa:29:3d:
4f:9e:c0:60:68:cd:10:ed:4d:70:93:5b:c7:75:62:37:d2:18:
44:5f:1c:42:3b:e1:2d:72:c7:e5:dd:e3:d6:a8:7c:84:23:66:
a5:44:f4:2a:41:1b:85:62:52:be:70:50:86:7f:b7:cd:48:4d:
97:7e:69:e8:cb:4c:01:d1:6c:d5:8e:f3:bb:63:5c:b0:3d:bf:
d1:35:1b:86:9d:5d:95:59:ca:4a:27:d9:53:03:bf:32:6c:a5:
84:1f:ae:02:c1:56:71:34:93:24:80:e3:4d:b8:80:97:1c:3c:
64:07:16:6f:ce:c0:12:38:ad:49:6e:90:8f:48:bd:80:74:7e:
3b:c1:9e:69:1e:0f:3a:bf:df:ce:a2:05:3b:40:ee:14:6f:d7:
e6:1a:9d:05:30:bb:4f:a6:a5:99:8f:f1:dd:b1:5e:02:0c:c8:
96:f5:64:9a:b0:10:36:09:c2:99:bf:c5:6e:6e:10:21:5d:b8:
b3:21:3a:a2:ba:7d:70:5c:3f:36:46:e5:b4:11:7c:99:e6:b4:
49:f8:55:b8:9e:b4:06:ff:c0:8d:b5:03:88:35:5f:62:81:2b:
4b:f3:86:e2:50:b1:7e:49:36:60:be:94:80:4b:d3:94:d6:c9:
02:61:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:12 2025 by rpki-client