Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dYMwRi-OhkVlzx8sLtadNFItsSg.roa
File: dYMwRi-OhkVlzx8sLtadNFItsSg.roa (raw, json)
Hash identifier: /lySD2AMOwLu95+HnCjaqyGA9PIjuGnvNxnM6NF3bpA=
Subject key identifier: 75:83:30:46:2F:8E:86:45:65:CF:1F:2C:2E:D6:9D:34:52:2D:B1:28
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01951A3810645BAE61128E8B8E599980F25A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dYMwRi-OhkVlzx8sLtadNFItsSg.roa
Signing time: Tue 18 Feb 2025 18:00:36 +0000
ROA not before: Tue 18 Feb 2025 18:00:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213519
IP address blocks: 5.175.237.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:38:10:64:5b:ae:61:12:8e:8b:8e:59:99:80:f2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 18 18:00:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=758330462f8e864565cf1f2c2ed69d34522db128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:0f:51:b1:9e:2b:18:49:30:21:66:68:52:
2e:72:73:13:bd:96:ff:32:1c:9d:a5:f7:3c:96:f5:
ce:36:ab:ae:f4:d4:f1:76:4f:d5:f1:00:5b:67:9e:
71:6d:4f:39:51:12:ea:92:f8:10:80:36:e4:60:0f:
81:c6:e0:96:5b:c0:5d:e6:4d:76:30:87:5b:57:2d:
d5:14:3b:eb:00:fe:6c:7a:51:fb:4c:f0:c1:0e:6d:
b9:40:f9:01:4f:ef:35:fb:09:6d:c2:7c:b4:dd:7d:
da:f4:1b:6a:41:32:ed:ec:bd:42:2f:a1:60:5e:92:
16:e3:f6:4b:66:22:7d:90:33:32:45:7a:c8:28:6d:
f1:02:5f:f7:5b:a2:82:b3:19:8e:1b:c4:53:db:d6:
05:d9:8f:e6:b2:c0:1d:ac:af:3d:82:6b:48:0a:2b:
e5:08:df:5b:d9:da:c0:89:91:6b:74:9f:e5:6a:9d:
cd:53:2e:a6:b0:e4:36:b9:10:5b:39:43:22:2b:1c:
79:32:dd:67:d6:eb:f8:e7:30:a4:45:28:12:6a:a2:
6f:70:bc:c8:7a:c2:2f:3c:d8:f4:cd:57:87:ae:8c:
53:1c:9f:b2:fd:7d:63:6d:31:9c:60:a1:39:ab:13:
dd:42:50:eb:d4:28:bd:e8:5e:6c:25:3b:0d:5a:4c:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:83:30:46:2F:8E:86:45:65:CF:1F:2C:2E:D6:9D:34:52:2D:B1:28
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dYMwRi-OhkVlzx8sLtadNFItsSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0-5.175.239.255
5.231.96.0/24
Signature Algorithm: sha256WithRSAEncryption
38:82:43:03:25:f5:44:17:38:34:b7:22:db:32:ee:20:66:61:
dc:95:2c:0c:f9:6a:2a:e2:bb:05:52:f4:be:c7:cb:96:8b:4a:
51:81:ca:87:dc:4e:ba:0b:9a:db:76:b6:bc:84:4a:aa:3a:14:
43:9c:df:ce:2d:a3:94:3f:98:5f:40:a9:fb:79:f6:e8:79:0e:
4e:13:d8:d3:15:7f:7f:ba:c9:92:0f:b8:96:77:e3:48:91:45:
ab:2a:a1:fc:5e:1e:03:3c:a2:8f:ef:ff:a6:c1:d8:4d:95:47:
0c:48:2d:c3:a3:5d:7a:cb:49:12:54:06:e4:29:fe:13:38:fc:
7d:3f:78:6f:c2:d5:93:3c:7f:60:0b:2e:3c:8f:04:0a:8a:99:
5a:b6:e7:cf:e5:62:59:94:15:95:e4:ee:d3:72:b6:b0:ac:f8:
bb:dc:2f:97:fd:3f:1d:0d:f6:78:c8:8c:07:fe:8f:ed:b4:68:
95:66:e5:15:81:23:70:98:fa:2c:dd:bb:f3:b0:ef:f4:f6:96:
35:c2:e1:82:4f:be:bf:02:c8:6a:f8:b2:9f:f2:14:94:f5:e3:
22:10:3e:33:de:b4:dc:4b:c0:e0:e7:e1:08:43:3d:6b:2c:78:
c0:2e:de:b8:d3:f0:c7:e0:40:36:a0:c2:c5:c1:08:dc:98:3c:
50:e8:58:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:32 2025 by rpki-client