Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_esT_CcUUYUe8bibO45ehQ7xXsc.roa
File: _esT_CcUUYUe8bibO45ehQ7xXsc.roa (raw, json)
Hash identifier: 5B+rx+G5J4rF4elVsIgjr8P4w7A1XaI32g9VF5nbH2k=
Subject key identifier: FD:EB:13:FC:27:14:51:85:1E:F1:B8:9B:3B:8E:5E:85:0E:F1:5E:C7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194942DA4FD39AFE793869A56CBFEF120FB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_esT_CcUUYUe8bibO45ehQ7xXsc.roa
Signing time: Thu 23 Jan 2025 17:20:06 +0000
ROA not before: Thu 23 Jan 2025 17:20:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 5.231.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:2d:a4:fd:39:af:e7:93:86:9a:56:cb:fe:f1:20:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 23 17:20:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdeb13fc271451851ef1b89b3b8e5e850ef15ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:19:5b:b2:fa:a7:13:f9:6d:ae:49:d4:ff:
14:3d:aa:80:b6:c4:c6:56:53:d1:9f:db:79:03:36:
72:04:c1:5a:9c:b7:c9:8e:7f:a4:2c:cd:43:3f:96:
00:e1:94:33:16:b1:b9:8c:64:fe:91:ca:2b:f3:83:
c8:52:ab:b6:36:59:00:96:66:bc:5e:5a:74:50:f9:
72:cf:ea:ca:38:55:2e:3f:3d:a5:df:9f:8a:21:e3:
fa:0d:31:0f:d7:ef:a8:1c:76:26:24:ba:9a:d2:8a:
db:4a:cb:e5:c5:a7:7a:49:fd:39:46:68:ea:82:51:
d0:59:e8:43:51:93:22:cc:a8:60:65:d9:f8:a6:e1:
a2:1c:7e:f5:17:2c:d7:6e:b6:0c:84:ed:52:94:70:
5e:78:e9:85:0b:ea:07:e9:e7:98:ff:5f:f0:8a:6c:
f1:0d:aa:e6:b2:29:6e:a5:34:c6:1f:03:40:f3:ed:
73:6e:87:6c:89:c9:d0:13:67:0e:59:59:4f:56:cd:
9c:c9:64:f3:de:7d:fc:df:21:c8:f4:d6:40:b2:5d:
44:28:96:42:e3:84:5a:58:be:53:52:47:03:c3:5b:
5d:c6:e3:af:54:bd:82:89:aa:f8:6d:2b:f4:f1:4d:
bf:97:6a:5a:46:cb:ba:70:f9:b1:b7:1a:9a:2b:86:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EB:13:FC:27:14:51:85:1E:F1:B8:9B:3B:8E:5E:85:0E:F1:5E:C7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_esT_CcUUYUe8bibO45ehQ7xXsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
05:86:76:f1:46:5a:89:71:c4:a2:5e:5a:95:48:7e:c8:b6:ed:
cd:34:e0:d5:9b:e2:a9:0f:9f:fe:8c:0d:da:e5:e9:f8:26:62:
80:9f:ae:90:2d:45:7c:94:b6:81:f2:ce:b9:a6:27:62:49:77:
fc:a1:58:f5:db:1c:7c:aa:ce:c2:cd:e5:f2:04:42:5b:9d:7f:
b8:e0:65:a1:22:e0:78:6d:59:98:7e:df:07:3b:80:7f:fd:e0:
20:74:ad:ab:31:e5:e6:c3:e0:39:c6:25:a0:63:43:bc:82:f7:
6e:8f:35:d8:18:06:2d:d9:6d:67:b0:72:0f:52:6e:f4:42:51:
28:11:ce:cc:45:ce:d9:d3:6b:c7:b6:06:80:dd:e6:bc:35:83:
f5:11:28:30:26:35:9f:09:26:8b:fc:3f:de:43:34:89:63:81:
35:88:a4:df:1c:a6:c6:ee:41:fd:12:6c:1f:e9:00:bf:5e:07:
49:a8:e6:49:b7:54:70:51:26:1e:70:ee:f0:a7:30:b2:1e:78:
05:21:93:be:c7:f3:b5:fc:3a:5d:7f:d2:da:74:ba:84:b2:32:
bc:81:d3:b4:47:e8:e9:57:2f:48:13:73:44:2d:76:95:fa:99:
bc:79:7b:8b:1e:15:d6:e3:c6:68:43:fc:63:2f:5c:3e:f5:63:
e4:4b:a4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:32 2025 by rpki-client