Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YIqF8iSwikAl9PRs1lTfDUjGAsE.roa
File: YIqF8iSwikAl9PRs1lTfDUjGAsE.roa (raw, json)
Hash identifier: aJz6b54bXb3+mvorUYmM+C6okcZOxXG7c5ulJGqGJa0=
Subject key identifier: 60:8A:85:F2:24:B0:8A:40:25:F4:F4:6C:D6:54:DF:0D:48:C6:02:C1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019521C17A90417E58500747E7DBDEAFA6B3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YIqF8iSwikAl9PRs1lTfDUjGAsE.roa
Signing time: Thu 20 Feb 2025 05:08:02 +0000
ROA not before: Thu 20 Feb 2025 05:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.47.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:21:c1:7a:90:41:7e:58:50:07:47:e7:db:de:af:a6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 20 05:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=608a85f224b08a4025f4f46cd654df0d48c602c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:c1:a1:0a:f0:8d:74:31:45:91:a3:b4:d3:
95:fb:6b:ec:6b:ce:bd:05:8c:d4:06:cf:8f:9d:bb:
d5:c2:1a:6a:24:68:34:f6:88:1c:24:5e:92:64:bf:
e8:fc:03:56:5e:36:0e:df:4f:bc:25:6c:7c:69:41:
94:83:ad:71:a1:1b:84:aa:99:ec:8f:90:2e:c9:d9:
b6:25:cb:95:3c:28:44:62:1f:4d:33:8c:92:91:64:
8d:47:ae:af:3d:03:51:bc:2e:ba:0a:73:91:f3:e5:
0d:02:19:44:18:e7:73:82:24:70:5e:9a:77:b9:61:
e7:62:e6:2e:48:23:d7:56:44:38:1a:19:e6:22:89:
5a:fd:c1:ca:96:88:e2:9b:84:96:99:3a:a9:5f:da:
3a:14:1c:a6:99:b4:20:15:6f:61:6f:b7:0d:a1:93:
f3:9a:14:f8:76:8b:72:e2:0c:7f:88:02:27:2c:69:
6f:aa:4c:e9:95:68:43:01:83:8a:c0:88:56:6a:e9:
3d:ee:fd:80:94:43:12:68:70:7d:80:16:2e:7a:a6:
0f:83:ef:10:e5:dc:37:a1:f5:39:c9:17:78:06:6c:
d1:54:23:89:91:68:e4:45:49:78:04:a8:dc:0f:08:
89:6d:8b:30:21:9b:aa:10:51:2c:81:4a:e6:fd:11:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8A:85:F2:24:B0:8A:40:25:F4:F4:6C:D6:54:DF:0D:48:C6:02:C1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YIqF8iSwikAl9PRs1lTfDUjGAsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.47.0/24
77.90.37.0/24
Signature Algorithm: sha256WithRSAEncryption
11:bf:24:d8:af:f3:dc:56:06:32:4a:c0:99:6b:81:af:20:51:
af:d8:4d:4a:91:95:48:c5:02:dc:ba:4e:42:a5:af:37:22:da:
45:60:99:b2:be:a6:82:61:99:4f:4a:5c:8d:e6:44:8a:64:90:
5b:0b:af:5e:6c:e4:44:83:24:eb:0b:bb:8e:b5:9c:15:97:b3:
22:e3:b0:2c:ad:78:9d:79:8d:50:f3:57:cb:e5:33:3c:6b:5f:
0c:d7:f9:9a:5f:37:68:8e:48:e9:5c:18:32:40:67:e9:4c:e7:
14:e8:6a:74:39:70:bf:68:25:f4:fc:84:43:3b:fa:be:27:54:
29:a9:62:b8:1c:0f:c3:93:54:3b:fe:16:80:c6:dd:c8:e6:bf:
2d:b9:1e:36:d0:02:32:3e:ed:32:c0:16:e0:16:9d:79:8e:e7:
c8:09:7c:0c:24:dc:d9:cc:29:53:91:c7:d7:da:18:0e:64:e6:
e5:8a:3d:8e:cb:dc:7c:6f:af:75:2e:e7:8d:5b:35:61:97:5d:
d2:04:c4:63:eb:fa:72:ee:03:2b:6d:7d:18:80:55:75:4f:37:
b1:75:d7:d7:f3:fe:c6:dd:75:13:c0:1b:3c:a4:66:93:d5:89:
b0:60:2e:00:70:35:52:5c:0e:82:95:fc:d7:2d:f9:32:64:91:
0b:77:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:26 2025 by rpki-client