Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/V5IxPmALepDAWTTcnFnlheM67Ik.roa
File: V5IxPmALepDAWTTcnFnlheM67Ik.roa (raw, json)
Hash identifier: MDtsHHPurFY2ww9ZmI/qSmExBD66NwqYlLPpLsrXhlg=
Subject key identifier: 57:92:31:3E:60:0B:7A:90:C0:59:34:DC:9C:59:E5:85:E3:3A:EC:89
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01955549941A55EA8A32566CE1C2875FEE76
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/V5IxPmALepDAWTTcnFnlheM67Ik.roa
Signing time: Sun 02 Mar 2025 05:17:20 +0000
ROA not before: Sun 02 Mar 2025 05:17:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 185.47.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:55:49:94:1a:55:ea:8a:32:56:6c:e1:c2:87:5f:ee:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 05:17:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5792313e600b7a90c05934dc9c59e585e33aec89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:9b:ef:7b:a2:59:ea:fb:55:e8:a4:54:d1:
6f:36:63:d6:f8:2e:46:ff:88:cc:a4:18:a0:cb:da:
98:cb:02:67:7f:c3:10:8c:48:ce:18:92:1c:7d:41:
63:f4:f4:c1:04:62:e0:7e:9b:53:77:eb:0c:5d:a9:
99:d3:3f:27:4e:16:51:3a:00:ee:59:ab:48:cc:d3:
90:c1:4c:70:9f:8c:8d:86:a5:df:1f:70:95:40:01:
f5:b3:d4:3a:1e:11:18:0f:a3:b3:6b:cd:37:ea:6f:
23:7b:e7:63:73:30:9d:4c:6f:a0:13:fd:ef:26:09:
bb:9c:1d:64:78:7e:c1:29:ba:fa:23:d0:2d:5e:00:
aa:b2:2f:67:e1:b9:70:13:c7:6c:20:f1:11:be:81:
49:c8:3a:98:e8:06:38:df:e3:69:4f:ba:eb:8b:e9:
f7:c9:6c:a4:2d:b8:af:48:b6:74:53:76:d7:02:7b:
8a:23:c6:7a:14:61:48:72:5e:33:92:ea:74:13:58:
7f:c8:4b:7d:90:43:8b:0c:9f:45:98:a2:0a:ef:2f:
a9:49:f7:72:b8:57:54:52:8c:b2:4b:2a:dc:32:2a:
bf:69:11:98:08:87:29:d6:49:df:26:f4:db:56:a8:
b8:78:22:6b:b1:7c:60:cf:47:a8:35:7f:ca:37:c7:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:92:31:3E:60:0B:7A:90:C0:59:34:DC:9C:59:E5:85:E3:3A:EC:89
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/V5IxPmALepDAWTTcnFnlheM67Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d6:cf:bb:8d:39:1d:7b:e0:2f:1f:a4:05:46:5e:fe:e3:93:
ee:1c:ec:5d:f2:4e:67:d0:91:ac:90:59:fa:79:c7:5f:7a:eb:
aa:e7:b6:c5:19:80:d0:54:8f:30:70:97:89:22:dc:29:de:e9:
65:70:d7:9a:4d:51:18:88:6d:f1:0c:fb:7b:88:0c:f3:bf:b5:
ce:1c:8f:f6:5f:10:84:d7:95:68:32:d2:90:29:fe:bc:bb:d4:
eb:ff:5f:c7:f8:c9:9c:20:f8:01:5f:7c:aa:a1:42:ed:be:63:
1c:27:b4:2e:17:b8:4b:98:16:0d:a6:df:07:78:e2:a4:2e:50:
8e:5f:49:15:9a:e8:7f:d0:f6:56:3e:9c:c8:a7:55:dc:21:71:
d2:d3:70:a0:12:f9:93:27:84:2b:9b:21:60:d0:04:c8:15:57:
54:54:69:86:bc:7f:43:0f:7b:f1:0d:95:3a:7c:3f:24:a8:5f:
1a:ff:21:bd:1e:43:9e:bb:82:1f:95:3e:51:47:a4:f4:58:b4:
97:47:87:3a:b6:09:0a:00:0b:a4:c2:64:b5:4f:4e:ef:43:b6:
09:79:62:2e:2f:70:b7:5b:28:5e:cd:4b:be:4b:46:69:77:17:
a0:cf:70:74:ad:f0:17:5a:76:f4:3b:42:b0:89:6c:4a:66:6c:
32:e7:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:18 2025 by rpki-client