Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MLCWG5U_sIacu_J1_SBpIhsn6gQ.roa
File: MLCWG5U_sIacu_J1_SBpIhsn6gQ.roa (raw, json)
Hash identifier: 00M6DwD5Ooy4A5zsbDI9QylrHItljms3BCG6wPWPz34=
Subject key identifier: 30:B0:96:1B:95:3F:B0:86:9C:BB:F2:75:FD:20:69:22:1B:27:EA:04
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01942220116E8B9A8D2327CCF40AB6BEB186
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MLCWG5U_sIacu_J1_SBpIhsn6gQ.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 5.83.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:11:6e:8b:9a:8d:23:27:cc:f4:0a:b6:be:b1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30b0961b953fb0869cbbf275fd2069221b27ea04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:4f:e6:06:4c:4e:97:79:77:d0:73:46:fb:
8b:46:16:de:ec:68:52:03:96:75:fb:17:70:29:f2:
c9:9e:40:9c:1a:7d:b1:ae:41:4b:07:7a:85:a2:96:
ec:4e:91:10:6f:ce:e3:65:7d:e8:ed:d0:7a:c0:ad:
54:21:4a:59:00:4e:1f:da:a3:60:47:0f:46:ad:8e:
9e:2c:76:a8:8a:bb:4a:5e:db:2f:68:78:79:1e:18:
0c:0a:34:44:04:d2:15:41:66:69:d6:18:5a:0d:95:
df:46:25:fd:8d:32:89:d0:6b:61:f9:25:5e:7f:c4:
7d:b6:72:78:19:4d:1d:b5:fe:ee:b0:13:2f:b0:79:
be:82:c6:ad:fc:ac:10:94:c9:94:94:8b:66:4f:c7:
1c:4c:1c:ec:3f:55:61:5f:c9:c9:af:49:60:29:11:
49:4a:58:9c:87:88:8f:84:3d:01:e8:a1:05:ed:3b:
85:69:1e:9c:a9:a8:1a:77:88:42:be:21:2d:63:8c:
66:08:00:68:ce:e5:c8:ec:10:c4:4e:00:42:77:d3:
1a:86:35:1e:24:41:8b:69:e8:dd:f7:3e:43:2e:fd:
d7:ae:4b:1a:e4:01:7b:ec:08:56:ce:d1:3c:ea:3b:
c0:61:a2:76:3a:8e:c4:d6:e8:1d:39:a9:88:4a:8c:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B0:96:1B:95:3F:B0:86:9C:BB:F2:75:FD:20:69:22:1B:27:EA:04
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MLCWG5U_sIacu_J1_SBpIhsn6gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.141.0/24
Signature Algorithm: sha256WithRSAEncryption
09:30:9d:b9:77:5b:ea:75:f7:82:6b:b7:0c:9c:c4:b1:ea:a0:
b8:84:ae:b2:c1:9e:e2:8f:a9:bd:ec:57:30:ec:f8:13:38:4e:
e8:7d:0f:4a:21:75:89:41:ff:66:2e:4b:39:65:a2:3c:cc:60:
2f:82:33:13:16:9e:47:f8:e4:7e:da:4e:3a:d6:97:fc:c4:41:
13:d0:7d:3c:69:f8:29:b0:7f:f4:6b:2a:74:79:a1:bf:a8:03:
05:59:de:88:13:24:b0:d5:0e:2a:3c:0d:35:ab:0d:85:54:42:
29:18:cc:c7:30:dc:bc:52:96:f1:b1:8d:8f:c8:20:20:10:6d:
03:b6:78:eb:f2:d8:70:9d:33:bb:06:44:46:0e:44:c5:48:64:
b8:7e:7c:ba:b5:e1:f0:6d:a3:31:86:02:7d:a7:e3:66:13:69:
83:13:ea:28:bd:5a:2e:f0:1d:17:b6:6b:76:c2:c3:b0:03:37:
b4:f9:de:3c:34:94:cd:1e:cc:9f:e8:9f:94:e1:1b:ac:be:b2:
8a:9e:1c:46:ae:2b:81:39:5e:35:91:00:ba:3f:e3:86:01:af:
90:7b:79:f0:41:a4:68:ba:a8:09:b5:f2:76:49:36:48:5a:01:
a9:0f:b2:5c:13:12:19:e1:e7:4a:df:84:fb:15:4e:68:13:6e:
32:b9:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:21:54 2025 by rpki-client