Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MqRjQhdK9o6r8eqsrVJpf2XY_GI.roa
File: MqRjQhdK9o6r8eqsrVJpf2XY_GI.roa (raw, json)
Hash identifier: sLW98vuM8+J3zqfLADiAN0xoqjLZBJmNdCfwdbK31gU=
Subject key identifier: 32:A4:63:42:17:4A:F6:8E:AB:F1:EA:AC:AD:52:69:7F:65:D8:FC:62
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01942CAD8E9DFE9250C83D73F3C796174A6B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MqRjQhdK9o6r8eqsrVJpf2XY_GI.roa
Signing time: Fri 03 Jan 2025 14:59:19 +0000
ROA not before: Fri 03 Jan 2025 14:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48835
IP address blocks: 5.231.42.0/24 maxlen: 24
5.231.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:ad:8e:9d:fe:92:50:c8:3d:73:f3:c7:96:17:4a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 3 14:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32a46342174af68eabf1eaacad52697f65d8fc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:79:6b:09:33:c2:8a:dc:b7:7e:05:26:9d:1f:
90:83:e2:e0:9f:a3:42:56:89:04:c9:d2:66:d9:19:
4c:a0:54:a0:04:cc:6f:9b:d7:50:f0:24:36:98:d1:
91:5a:43:20:5f:42:a9:57:71:7d:48:61:c6:cf:26:
98:d4:f3:53:6e:f0:a9:bf:0c:2b:4a:6b:ed:5a:e9:
bb:7b:b4:f6:ca:ec:42:34:cf:08:cc:a4:48:76:11:
57:a7:ef:e8:6b:b8:89:f4:25:51:7a:0e:be:a4:d7:
83:15:5a:6f:63:30:90:d7:98:a8:9b:ff:cf:d1:ce:
81:13:36:da:76:b8:06:b9:7b:6a:84:09:c5:b1:ce:
02:03:31:22:47:cd:da:49:d7:0d:7b:35:bf:fb:b6:
c3:7f:52:9b:e2:62:5c:43:2a:25:2f:a3:af:2e:f1:
d6:ba:70:05:bd:fd:ed:b5:49:09:7a:5c:20:24:1b:
06:00:88:b9:8e:d6:02:14:ac:14:a6:42:68:88:0f:
11:2c:1c:e1:86:87:cd:58:cf:f1:44:f0:30:9e:65:
db:6e:df:de:f6:67:7a:0e:07:cb:42:ad:2a:4c:6e:
c5:97:f4:ba:18:54:83:70:36:b8:66:d7:a7:79:f6:
5e:21:b5:c3:af:0d:9d:08:6f:8a:08:83:c8:5a:d0:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A4:63:42:17:4A:F6:8E:AB:F1:EA:AC:AD:52:69:7F:65:D8:FC:62
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MqRjQhdK9o6r8eqsrVJpf2XY_GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.42.0/24
5.231.254.0/24
Signature Algorithm: sha256WithRSAEncryption
45:24:9b:8c:a6:06:62:02:e3:d4:f5:4f:63:c3:da:a3:18:d2:
c6:dc:e5:d4:38:e1:49:55:15:4a:9f:8d:16:79:ec:d5:f7:8a:
57:77:ab:5e:19:d0:ac:5f:85:cd:e5:4f:ba:74:65:68:26:57:
64:fe:65:34:7a:07:89:7b:9a:f4:ce:2d:50:fe:a4:b8:ca:62:
44:b3:2b:04:67:2e:7f:9a:e4:02:44:a9:81:8b:fe:fd:f4:62:
35:5e:83:eb:09:e1:e5:e2:67:8a:1f:b4:b2:c0:44:ff:b7:f7:
45:53:fd:a4:f5:81:d5:59:c6:ac:0f:e3:d5:f9:09:79:2a:1e:
62:f3:3f:8d:a3:8b:d0:97:de:9e:a9:82:14:69:e0:72:42:e8:
aa:00:e7:c0:6e:56:b4:1f:78:92:4a:0f:2c:21:1e:8f:8c:1c:
80:c7:09:60:7d:6b:52:0b:8c:6a:0e:2a:88:f3:df:c3:ab:e3:
9f:e5:94:8d:b5:6f:45:ef:00:df:eb:7d:43:f0:01:a1:81:48:
ac:02:64:d6:72:9f:89:5a:69:73:b3:44:6c:23:69:ae:1e:32:
84:c3:d9:12:35:70:4a:93:5a:ac:0b:36:e3:e3:7c:ee:7c:8b:
53:53:20:73:38:4b:61:de:d6:1f:59:3f:8a:60:fc:55:4b:99:
e1:8d:e9:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQsrY6d/pJQyD1z88eWF0prMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAzMTQ1OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmE0NjM0MjE3NGFmNjhlYWJmMWVhYWNhZDUyNjk3ZjY1ZDhmYzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HlrCTPCity3fgUmnR+Qg+Lgn6NC
VokEydJm2RlMoFSgBMxvm9dQ8CQ2mNGRWkMgX0KpV3F9SGHGzyaY1PNTbvCpvwwr
SmvtWum7e7T2yuxCNM8IzKRIdhFXp+/oa7iJ9CVReg6+pNeDFVpvYzCQ15iom//P
0c6BEzbadrgGuXtqhAnFsc4CAzEiR83aSdcNezW/+7bDf1Kb4mJcQyolL6OvLvHW
unAFvf3ttUkJelwgJBsGAIi5jtYCFKwUpkJoiA8RLBzhhofNWM/xRPAwnmXbbt/e
9md6DgfLQq0qTG7Fl/S6GFSDcDa4ZtenefZeIbXDrw2dCG+KCIPIWtA+4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDKkY0IXSvaOq/HqrK1SaX9l2PxiMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvTXFSalFoZEs5bzZyOGVxc3JWSnBmMlhZX0dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABecqAwQA
Bef+MA0GCSqGSIb3DQEBCwUAA4IBAQBFJJuMpgZiAuPU9U9jw9qjGNLG3OXUOOFJ
VRVKn40WeezV94pXd6teGdCsX4XN5U+6dGVoJldk/mU0egeJe5r0zi1Q/qS4ymJE
sysEZy5/muQCRKmBi/799GI1XoPrCeHl4meKH7SywET/t/dFU/2k9YHVWcasD+PV
+Ql5Kh5i8z+No4vQl96eqYIUaeByQuiqAOfAbla0H3iSSg8sIR6PjByAxwlgfWtS
C4xqDiqI89/Dq+Of5ZSNtW9F7wDf631D8AGhgUisAmTWcp+JWmlzs0RsI2muHjKE
w9kSNXBKk1qsCzbj43zufItTUyBzOEth3tYfWT+KYPxVS5nhjen1
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:56 2025 by rpki-client