Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TjNz8EXjea50Ek50U_C4BU_W3EU.roa
File: TjNz8EXjea50Ek50U_C4BU_W3EU.roa (raw, json)
Hash identifier: MT1C1ujbxoHVoxt+WNPeIKoAUq/UqGS7aVao6SmtKyE=
Subject key identifier: 4E:33:73:F0:45:E3:79:AE:74:12:4E:74:53:F0:B8:05:4F:D6:DC:45
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194221FFF69196D60ABDBCF71848BC100BF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TjNz8EXjea50Ek50U_C4BU_W3EU.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48039
IP address blocks: 5.231.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ff:69:19:6d:60:ab:db:cf:71:84:8b:c1:00:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e3373f045e379ae74124e7453f0b8054fd6dc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:60:c4:f2:1f:d2:19:3f:37:ec:a8:bb:46:
ba:bb:d9:fa:14:fe:12:62:3b:f7:84:fd:de:2d:0f:
b2:1a:28:b8:c1:e8:61:e4:a8:5f:6d:c1:95:cf:07:
62:a5:4a:42:4f:1f:8e:d0:cf:f0:f6:9a:07:d6:37:
e0:ca:ba:06:c2:27:9e:35:45:25:32:c4:1c:87:6c:
e3:97:4f:94:cb:57:6c:ee:f1:ae:f7:3f:df:6a:af:
77:32:2e:d1:53:2a:91:dc:5c:f4:61:f3:84:a2:09:
c9:77:aa:ac:1b:1c:56:d5:49:06:7e:13:64:42:20:
aa:1b:42:71:39:85:cd:58:b5:32:59:83:9f:2a:72:
36:20:f0:f1:bf:70:b2:bb:09:ee:89:55:33:16:20:
1f:49:df:07:0c:ae:6d:80:bb:b4:c0:be:54:5e:4c:
48:85:0b:47:85:09:91:3f:20:a0:ad:b9:a9:13:2f:
d6:6b:19:e2:d0:79:cf:ae:a1:14:78:e5:85:fb:ca:
ba:b2:8c:6e:b0:b1:81:eb:d9:fa:06:21:6a:e3:49:
1c:e1:99:25:a0:d0:92:5f:a9:f0:37:69:91:7c:53:
fe:dc:97:f7:17:49:96:de:4e:19:48:08:6d:f7:f7:
83:fe:9b:6a:c7:db:7e:ce:d0:26:e3:e5:cf:48:14:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:33:73:F0:45:E3:79:AE:74:12:4E:74:53:F0:B8:05:4F:D6:DC:45
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TjNz8EXjea50Ek50U_C4BU_W3EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e6:ed:99:1a:ce:cf:cd:f9:ef:24:37:61:43:d4:c5:18:9e:
73:0e:de:13:ae:4a:11:75:65:c2:c4:e4:b6:15:ea:e4:8f:0d:
d5:cd:fe:f6:8f:c1:d0:a7:c7:03:50:93:d8:0f:77:26:26:d8:
55:c0:71:38:0f:7a:51:63:c2:c8:5a:a0:9a:f5:f4:29:88:ce:
40:1a:21:ee:4e:f1:4a:8f:c9:e6:8f:f1:61:2e:a6:c2:89:69:
81:55:b3:5d:f1:7e:b3:cb:34:3a:59:ad:ae:cb:43:bc:bf:20:
d3:02:12:b3:ee:eb:ed:d8:fc:bf:89:e9:4d:42:97:46:1b:56:
dc:af:f7:72:08:09:7f:67:70:d8:91:f3:9f:e6:b8:70:bb:8a:
29:15:43:f2:2d:78:2f:d5:70:1a:6f:ed:0f:1f:93:ac:88:e2:
7b:57:d2:66:c8:c3:6b:7d:ec:5e:cb:c8:56:69:69:ce:48:67:
e3:bd:8a:ed:55:ad:6f:a2:c3:f3:d9:ca:de:87:ad:43:e6:57:
30:1c:f9:77:34:ef:b1:ba:45:d7:fd:af:df:59:29:09:d4:90:
1d:99:d4:58:67:1f:15:80:f7:34:1b:98:f8:87:4f:09:62:58:
43:9f:24:b3:f9:9a:98:46:40:cb:72:b5:eb:24:d2:27:ca:36:
85:36:20:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:57 2025 by rpki-client