Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Wre2FVVqY3-G4MQjguYjzHIYHeQ.roa
File: Wre2FVVqY3-G4MQjguYjzHIYHeQ.roa (raw, json)
Hash identifier: USGDUKNCAJhrRBfTOINOKyTBWTjy+NnKNIx6uX0XZxM=
Subject key identifier: 5A:B7:B6:15:55:6A:63:7F:86:E0:C4:23:82:E6:23:CC:72:18:1D:E4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194221FFC4D921D24BE05AFE75A1422405A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Wre2FVVqY3-G4MQjguYjzHIYHeQ.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31025
IP address blocks: 5.231.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fc:4d:92:1d:24:be:05:af:e7:5a:14:22:40:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ab7b615556a637f86e0c42382e623cc72181de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:bf:7a:ad:9a:fd:40:c3:70:c1:31:d6:81:
f0:db:51:8f:e2:95:db:5c:71:ed:88:96:d6:eb:fe:
d9:9d:0d:a4:52:db:f6:69:5d:ee:ad:23:ed:24:05:
f0:7f:44:cc:9b:f8:89:80:4e:b6:48:bf:18:97:f6:
4b:05:28:37:26:f1:16:51:9c:dc:89:0a:77:6b:0c:
97:d3:9e:ad:8e:9e:fd:a8:26:1c:7c:98:40:3f:7e:
21:f9:e1:06:18:09:e3:5f:30:5b:3c:0f:09:f2:52:
44:d4:30:38:40:76:92:59:0d:da:99:46:1f:26:f9:
93:9b:42:58:e9:ef:e0:ee:bf:d2:03:e0:8a:a4:57:
65:91:b8:7b:69:96:e2:ed:ce:5b:d1:d2:bd:14:72:
d6:63:fb:7f:d1:b6:35:a1:ef:3d:3c:3f:64:48:ba:
5f:74:03:ce:63:87:33:70:b3:46:d4:37:50:52:ab:
cc:ff:d7:7f:eb:50:17:fd:5a:0b:90:d4:5d:ab:13:
57:37:8f:3e:fd:2f:f2:91:64:f1:8d:44:18:d5:2f:
1e:72:a5:0e:3d:98:86:9c:dd:a9:74:27:68:98:05:
25:69:5f:e6:b6:d2:22:bb:8f:3d:50:b7:6a:f7:93:
ab:f3:13:9a:ec:34:b2:9c:d9:dd:30:99:17:bb:56:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B7:B6:15:55:6A:63:7F:86:E0:C4:23:82:E6:23:CC:72:18:1D:E4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Wre2FVVqY3-G4MQjguYjzHIYHeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:07:dc:06:13:79:2d:86:52:fc:25:ba:ad:de:35:e1:5a:8e:
52:6c:27:e5:3d:b8:e9:45:aa:9a:90:b0:a9:89:87:19:42:ca:
8a:ac:c0:08:42:9b:c6:23:be:3e:52:43:84:28:0a:07:cc:2a:
82:9d:ce:a2:6b:53:fd:1b:00:06:5c:e3:67:65:47:e7:3c:0e:
28:de:80:3a:7c:e5:14:01:3f:6c:7c:79:00:dd:4e:3f:a0:b9:
48:f7:b2:66:6a:28:33:7e:71:3f:60:6d:0d:db:75:c8:1d:73:
4b:9e:34:05:41:82:c1:ca:9b:a7:3c:ad:4d:7c:be:02:8a:b5:
a1:d1:05:dd:4b:06:90:76:84:d1:38:9a:74:a0:9b:0c:87:05:
51:0b:3b:07:24:20:08:68:b9:17:6d:41:31:3b:96:d3:4c:5e:
32:0c:61:75:e6:5b:86:20:cd:a6:09:2f:67:1f:6b:95:64:b5:
de:4d:2d:cd:82:38:65:5a:d3:8e:9f:96:b4:e3:fd:db:a4:d3:
50:47:cc:56:5e:df:16:bf:fe:9f:c9:5a:39:db:c8:91:5c:ac:
41:c4:f3:e5:ba:42:f2:f0:71:5e:87:fb:51:f7:6f:33:3f:81:
c4:aa:3d:ec:c8:b3:9f:97:81:e6:8a:ab:43:5a:83:cc:34:f7:
40:8c:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:59 2025 by rpki-client