Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hh51j7Sb2kJMa1LlMm1RMKEVmQk.roa
File: hh51j7Sb2kJMa1LlMm1RMKEVmQk.roa (raw, json)
Hash identifier: 2dRDyk4TYg0ZVyGUEgJOgWs4leHuYvGQM/byqB4BVFw=
Subject key identifier: 86:1E:75:8F:B4:9B:DA:42:4C:6B:52:E5:32:6D:51:30:A1:15:99:09
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01936D59A1A1A3239C15D8215DAC99D4BD29
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hh51j7Sb2kJMa1LlMm1RMKEVmQk.roa
Signing time: Wed 27 Nov 2024 11:20:10 +0000
ROA not before: Wed 27 Nov 2024 11:20:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401502
IP address blocks: 5.175.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:59:a1:a1:a3:23:9c:15:d8:21:5d:ac:99:d4:bd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 27 11:20:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=861e758fb49bda424c6b52e5326d5130a1159909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:73:a8:58:56:94:ef:40:01:e7:b0:d9:bc:1c:
48:14:ea:50:1f:34:4b:36:28:7b:5e:64:81:fe:44:
eb:b5:38:89:46:d1:49:e1:1b:7a:64:e4:9c:44:96:
d3:0d:b9:3a:92:bb:47:e5:be:17:eb:99:23:1b:ca:
25:83:0a:f5:58:e3:08:16:37:3f:b2:a3:04:8c:58:
71:36:5c:15:ce:c1:56:79:60:e8:36:7d:2f:64:2b:
b0:1e:a3:80:5c:17:d0:4e:0b:c8:8b:d2:19:74:f4:
43:78:4e:ce:23:a0:83:05:24:5d:bb:53:56:56:4b:
f3:31:2e:ff:da:d5:26:d7:c3:13:37:3c:9a:67:9e:
ae:6d:41:3a:88:2f:09:09:25:6f:37:d2:5a:0f:3d:
49:70:68:f7:67:3a:99:8b:bc:43:48:bc:cc:c1:e1:
00:c7:ef:d5:e7:d5:13:a3:8b:07:03:84:d6:6f:28:
32:6a:44:95:7b:75:3c:ac:95:dd:f5:6c:33:96:c2:
a4:c1:33:ad:bd:b8:b1:19:b2:a8:61:95:12:92:7e:
4c:57:0f:a1:60:d8:7f:9f:e0:f3:16:ee:83:75:0e:
71:98:91:af:75:a1:9e:5e:be:b1:76:b0:50:6b:78:
55:c2:17:9a:c5:28:e0:f3:e7:af:e0:45:7d:9b:ad:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:75:8F:B4:9B:DA:42:4C:6B:52:E5:32:6D:51:30:A1:15:99:09
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hh51j7Sb2kJMa1LlMm1RMKEVmQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.238.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ba:0b:11:a1:d8:29:d4:7f:03:c5:2d:e5:00:f5:e2:7e:83:
5a:78:86:92:1f:c3:7f:9a:2c:c7:f8:f7:e8:23:7d:23:57:1a:
e8:b2:dc:f5:67:d2:58:81:87:2e:93:a8:2d:97:67:04:50:c7:
5e:a0:28:e7:b8:fc:fd:33:3a:13:c3:d5:b0:50:18:ff:6e:29:
c7:b5:cd:be:bd:be:03:74:4a:9b:53:1a:35:16:71:68:53:b1:
2b:3c:99:9c:61:8e:0c:be:b9:c2:2b:51:8a:8d:f6:35:2e:00:
4b:6b:5f:8c:c1:6d:60:67:88:c4:70:0d:e5:77:d2:53:1a:89:
dd:41:5d:87:bf:ef:bb:7a:76:54:65:24:77:69:90:9a:8b:b3:
07:f9:ab:33:0d:f2:7f:f2:45:b0:6e:c1:33:42:28:0a:fd:fe:
83:9e:82:c5:d5:71:ab:ce:05:7b:91:b6:a4:c5:15:ae:f3:73:
85:6f:51:b5:3d:48:91:ca:08:a8:80:90:dd:4e:06:96:10:48:
46:b2:19:8b:e5:b8:ce:03:ee:af:cf:1d:97:2a:68:4f:be:17:
c9:eb:c4:86:8f:20:32:7f:e3:99:ea:dc:6f:ac:32:a4:f9:df:
a2:20:19:4b:c2:ce:30:d3:bc:0c:61:88:57:9a:59:a2:bf:e8:
65:dd:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:16 2025 by rpki-client