Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vn98fnwTkd8vItrfXgs8v3DBJh0.roa
File: Vn98fnwTkd8vItrfXgs8v3DBJh0.roa (raw, json)
Hash identifier: 5brZUME+NF3vNEUbThQWsJTIiv4CEiGCvxudr1qvk6o=
Subject key identifier: 56:7F:7C:7E:7C:13:91:DF:2F:22:DA:DF:5E:0B:3C:BF:70:C1:26:1D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193D730D888B674FDA34FAEB7E084EECDAB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vn98fnwTkd8vItrfXgs8v3DBJh0.roa
Signing time: Wed 18 Dec 2024 00:35:22 +0000
ROA not before: Wed 18 Dec 2024 00:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31025
IP address blocks: 5.231.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d7:30:d8:88:b6:74:fd:a3:4f:ae:b7:e0:84:ee:cd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 18 00:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=567f7c7e7c1391df2f22dadf5e0b3cbf70c1261d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:ba:ac:78:5f:6e:c4:15:cd:95:88:07:b7:
47:51:cc:b7:a6:17:93:fe:ad:28:f4:9f:12:ec:7c:
8d:67:15:97:4e:b8:8d:be:fc:1c:42:72:66:53:12:
18:b2:08:56:2d:3a:a3:b9:e9:69:5a:64:ed:87:4b:
f7:49:c3:16:c5:05:4a:78:e3:e8:f4:41:1c:d5:6d:
ca:2c:e0:de:3e:af:31:c2:8e:a9:6c:0a:8e:1a:51:
0f:1a:a9:23:22:7c:93:06:57:6d:65:55:49:3b:f7:
7f:a3:ad:6e:ee:f5:f0:1a:33:af:2c:2d:02:6f:f5:
87:d8:b8:12:fb:fe:19:34:80:0f:81:f4:46:a7:b9:
80:45:50:94:55:97:c9:7d:12:e0:0b:a7:bc:c3:76:
42:3f:2f:a3:8e:74:41:f3:f6:28:09:a5:3a:84:c0:
29:63:e4:71:e4:19:6b:95:31:c8:0f:58:03:65:1a:
f2:70:47:27:b5:9f:0e:f4:70:36:ed:c9:b3:b5:ea:
fa:13:c0:92:b6:22:2f:50:65:cc:11:2c:3d:4a:57:
9e:6d:6c:01:0e:eb:13:2e:a3:65:b8:d0:5c:86:9b:
02:ac:97:b5:72:0c:23:8d:e5:62:82:30:6c:34:12:
93:4b:34:3c:63:a3:00:39:ad:20:9b:5f:45:cd:90:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7F:7C:7E:7C:13:91:DF:2F:22:DA:DF:5E:0B:3C:BF:70:C1:26:1D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vn98fnwTkd8vItrfXgs8v3DBJh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.254.0/24
Signature Algorithm: sha256WithRSAEncryption
af:56:e5:57:71:e6:9f:61:5b:3c:69:e5:ad:1e:36:6b:0b:28:
1c:18:18:cf:a6:e8:c2:d7:21:09:e2:8a:54:d2:cc:d1:b8:22:
3b:b9:a2:f5:60:c1:28:16:fb:20:73:ee:0b:1c:a9:68:fe:b3:
f7:3f:ef:64:a4:09:ff:19:a6:e1:de:8f:dd:18:91:e8:1f:a9:
a1:5a:51:6e:b9:81:d3:c5:58:61:cb:e5:79:f8:e6:1c:59:74:
30:91:d1:a5:73:62:eb:31:a1:52:ff:6e:dd:b0:2e:eb:dd:4a:
3a:11:b6:01:19:13:e4:fa:ca:5e:f3:b8:e6:80:0c:46:b3:82:
e7:0e:4b:69:f7:24:9f:ff:78:d5:26:59:02:ca:a7:e8:ef:f0:
92:c0:ef:b6:9f:1a:13:8b:81:f2:f2:55:f2:52:30:f7:d7:e3:
2f:b4:a0:59:6d:dd:f1:51:ba:d0:f9:43:39:cf:82:b3:06:e8:
6d:2a:b9:80:a6:4e:ec:85:12:de:17:a9:98:d5:be:03:8f:ce:
d5:b9:6b:23:29:ef:72:e6:31:1e:e4:b6:16:e7:81:f2:5d:45:
53:c6:33:53:3c:1e:b0:17:fc:c0:cd:aa:ab:95:38:7b:1e:96:
63:b8:5f:98:b4:08:69:b6:b3:0e:ea:dd:a2:80:3b:94:4d:7d:
4c:0d:9d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:40 2025 by rpki-client