Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SKubuQaA6WLmLYt3lJ7dgxxXcvY.roa
File: SKubuQaA6WLmLYt3lJ7dgxxXcvY.roa (raw, json)
Hash identifier: qkhdr//cQpCckAyvPlGijWLqK31FMPmAQ72Q7Kp1Uzw=
Subject key identifier: 48:AB:9B:B9:06:80:E9:62:E6:2D:8B:77:94:9E:DD:83:1C:57:72:F6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422201395A1FFFBC0625D849E1A2D1B64
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SKubuQaA6WLmLYt3lJ7dgxxXcvY.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213915
IP address blocks: 5.83.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:13:95:a1:ff:fb:c0:62:5d:84:9e:1a:2d:1b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48ab9bb90680e962e62d8b77949edd831c5772f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:27:c6:99:9b:27:0c:30:65:78:a8:6b:2d:
9a:76:85:f6:73:89:8c:04:73:1f:53:b7:aa:6d:52:
39:27:4e:fc:85:23:44:5f:7a:c6:9d:e0:dc:8d:6d:
56:a3:af:61:ab:3f:ce:0e:81:9c:00:fc:be:f1:fa:
b2:3d:cc:5d:11:86:30:9d:a4:d7:76:32:6f:dc:d4:
00:a4:c5:ff:6a:40:56:95:de:17:8d:f5:02:4c:75:
42:83:b9:b1:f2:2d:dd:7f:50:7c:5c:b3:7a:69:7b:
31:8e:e3:69:40:a6:c3:73:3d:c2:b5:11:1e:72:a8:
d9:b1:5b:62:44:96:f7:58:5e:54:36:ce:61:a7:96:
d7:cd:20:ef:5f:95:5b:c6:9b:6c:33:0a:68:5b:87:
24:0a:ba:63:a6:46:05:f8:68:97:5b:50:8a:b7:b9:
85:8d:95:b6:3a:a0:f0:fc:e1:44:41:bc:27:fb:73:
1d:32:b0:88:0a:1e:db:59:34:54:b8:9a:f7:a6:d3:
5c:10:19:9a:32:d1:79:54:ff:0b:a0:25:8f:ae:89:
35:60:5f:12:c8:d8:18:c7:67:09:73:cc:ad:ac:4f:
38:ea:ce:0c:f1:59:82:02:4f:9f:cc:3b:8a:33:84:
11:1e:01:41:a2:5a:3d:5d:e3:1d:77:31:2b:fe:c5:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AB:9B:B9:06:80:E9:62:E6:2D:8B:77:94:9E:DD:83:1C:57:72:F6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SKubuQaA6WLmLYt3lJ7dgxxXcvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.154.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8c:76:a0:27:28:d8:d2:76:cb:ea:89:fc:d9:fb:5b:ff:ee:
59:fc:e2:10:36:0e:13:72:59:1d:a2:7c:39:39:91:b8:d3:d6:
b2:c2:0c:75:4a:55:2c:40:58:cc:27:dd:6a:49:6c:83:62:57:
9c:f1:6c:39:17:4b:32:18:a5:20:bf:37:2c:5a:a7:7b:ef:12:
93:86:08:f1:6e:12:4c:3b:41:d1:03:b7:38:c8:a1:4d:4a:e3:
f4:21:4f:bb:7a:78:84:66:68:d4:f9:bb:4f:89:5e:18:78:1d:
b4:1e:38:e5:b9:25:97:d9:3b:9c:7a:42:4a:28:11:81:de:33:
91:99:0c:f6:65:50:72:e7:88:f2:07:c8:dc:f2:b8:16:3c:3d:
ce:d4:21:a8:8d:31:ce:10:35:92:e0:9f:b9:e4:5a:ad:c6:78:
0e:8e:31:bc:0c:d3:fb:9e:9d:42:6c:f5:54:82:46:ab:ac:fd:
8d:1d:e4:d0:da:88:c1:dd:0c:b9:8b:f0:a2:45:6d:42:a4:42:
01:d5:da:53:46:e0:30:72:84:72:a9:18:36:37:c9:9d:e6:31:
23:3d:a6:4c:fb:1b:ee:c5:8b:58:b3:e0:e3:34:c4:c8:ee:78:
62:05:0e:68:cd:81:be:f4:42:cd:6e:46:97:23:08:ff:03:10:
bc:ef:b4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:11 2025 by rpki-client