Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LATPe3yahPcRg4cdV6I1CbifSOk.roa
File: LATPe3yahPcRg4cdV6I1CbifSOk.roa (raw, json)
Hash identifier: utAE42WtEFXq2ouSgVUfH5/NSE6f8TNm2g51mGQfV44=
Subject key identifier: 2C:04:CF:7B:7C:9A:84:F7:11:83:87:1D:57:A2:35:09:B8:9F:48:E9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422200016454186D0FAC11EE3DE9E84CB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LATPe3yahPcRg4cdV6I1CbifSOk.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48835
IP address blocks: 5.231.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:00:16:45:41:86:d0:fa:c1:1e:e3:de:9e:84:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c04cf7b7c9a84f71183871d57a23509b89f48e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:05:85:b4:0e:1c:3d:36:b3:36:62:7b:69:
a3:25:f0:2a:36:8d:0b:05:b9:d9:63:05:c6:45:28:
e2:fb:0c:4f:ea:d7:7d:f6:a2:be:1b:ea:a9:f0:72:
33:7f:5e:ed:8a:7d:b2:43:6b:af:99:c2:01:7e:f9:
fb:4e:ef:45:9a:c6:93:b5:bc:53:75:18:21:20:0a:
a7:87:5b:e1:73:e7:87:0a:37:b4:33:40:e5:bd:80:
21:67:f3:0d:9a:39:9d:00:36:ef:ab:25:55:bf:96:
7e:fb:bf:28:e4:dc:3f:a4:1f:07:f1:95:9f:2b:82:
b1:b2:a8:6c:67:93:9e:b8:33:15:65:b8:cb:ce:51:
c3:5d:8d:e9:e3:ab:06:8f:31:9e:b0:6b:ac:cc:9c:
68:a8:fb:7a:f5:07:46:26:93:44:c7:5c:8f:7a:26:
00:38:d6:50:87:93:f9:f8:5f:2e:55:ed:1d:46:ec:
d4:96:5b:06:f2:18:79:e6:51:7a:90:ab:8c:eb:44:
fb:b9:7a:33:1d:da:e3:ea:81:72:c4:cf:c1:16:c4:
99:03:d7:00:29:1d:ea:9c:a8:86:1a:bd:0a:96:d9:
2b:11:b8:5a:2f:86:72:39:a0:27:63:52:99:f2:35:
71:76:49:8f:de:ca:aa:bb:ad:54:cd:c6:dd:1b:9c:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:04:CF:7B:7C:9A:84:F7:11:83:87:1D:57:A2:35:09:B8:9F:48:E9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LATPe3yahPcRg4cdV6I1CbifSOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:29:05:a1:66:81:ec:f0:38:c5:80:62:3b:14:0c:cb:7b:ce:
01:2b:6b:49:35:d0:da:19:73:d4:5d:eb:b4:7f:69:08:6d:e7:
5b:49:29:d2:c3:ab:ef:83:e6:76:02:ab:66:91:53:c9:e3:49:
f2:2c:6c:63:55:3a:cc:92:26:11:ad:67:ce:0c:22:14:5f:f2:
95:08:95:dc:a2:57:99:e7:9d:5f:74:ea:01:51:c8:ab:fe:96:
b3:2b:27:e1:52:eb:9c:76:7a:4c:fe:2d:9a:29:b4:30:66:e6:
6d:d1:41:1c:07:4e:41:b5:e4:c7:95:65:29:26:33:fd:5b:c7:
a7:3f:9e:06:04:37:8d:24:12:32:3b:7e:88:fd:b7:61:b0:43:
a9:27:c1:8e:9b:c7:b7:9e:6d:95:3d:51:b0:5b:8f:df:cc:a2:
54:5b:db:4d:38:ea:c8:cb:f4:23:37:4d:79:af:61:2b:67:0b:
86:69:79:95:e9:2c:af:4c:59:22:f5:69:99:9c:42:18:e8:a8:
85:bf:ea:f4:60:c3:06:10:9c:22:89:68:6c:d8:8c:fa:08:8c:
eb:aa:42:04:5d:f6:c6:33:7e:68:26:c7:a6:85:90:6c:6b:37:
99:15:4d:8a:4a:93:cb:5d:b4:86:cc:ba:9b:03:5b:b3:f8:cd:
7c:8c:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:13:03 2025 by rpki-client