Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lF_BdzhdHBhmHTij9G_I8_z1cYI.roa
File: lF_BdzhdHBhmHTij9G_I8_z1cYI.roa (raw, json)
Hash identifier: 9plW/JuNryk79brWX/jjt0j4PcSBe4UDj6cU1KUIIzY=
Subject key identifier: 94:5F:C1:77:38:5D:1C:18:66:1D:38:A3:F4:6F:C8:F3:FC:F5:71:82
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194C5C9D7E43CF5A9CA93F2E413F28DC2B5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lF_BdzhdHBhmHTij9G_I8_z1cYI.roa
Signing time: Sun 02 Feb 2025 08:32:06 +0000
ROA not before: Sun 02 Feb 2025 08:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213574
IP address blocks: 5.231.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:c9:d7:e4:3c:f5:a9:ca:93:f2:e4:13:f2:8d:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 2 08:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=945fc177385d1c18661d38a3f46fc8f3fcf57182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:fc:d2:ba:3c:0c:15:92:37:9c:92:e2:5d:
54:45:0c:73:22:9b:62:64:75:7d:67:14:fe:f4:9e:
0a:de:4e:4f:ef:6b:31:05:b6:83:a6:bb:0e:88:59:
f9:c8:c2:af:a8:8e:9d:e8:5b:17:0b:4a:5b:25:52:
68:b5:c8:51:31:b7:ae:a4:12:a3:fb:bd:b0:fd:75:
47:c3:de:63:c8:9c:c3:40:1a:59:2a:d6:86:30:bc:
3b:f0:5a:b4:5a:25:07:4c:6a:ec:65:ee:b4:94:4d:
8c:ea:35:7f:52:d7:d5:8d:cc:fa:bf:08:cc:68:5f:
15:48:e6:0f:71:b7:cd:0c:b9:25:71:88:76:e4:7f:
47:a7:fb:8a:48:7e:12:7b:b6:e2:fc:e8:8c:f7:d7:
5d:7e:d1:b3:b9:b5:fc:2e:62:25:1f:4e:db:a0:ce:
0e:12:b7:bc:db:fb:dc:a2:3f:49:ee:e1:66:65:95:
05:4f:a5:31:73:ec:77:0e:de:2b:0d:01:94:82:12:
0f:0f:a2:d6:2f:85:31:65:a3:84:3a:bf:53:30:63:
91:38:d3:a2:76:82:e8:b3:d1:42:da:af:d5:b2:14:
a1:fb:c1:9d:12:41:46:d7:c2:1b:54:79:97:64:15:
a0:d0:9a:fe:45:1a:3e:77:1d:7a:d9:45:bf:63:1d:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5F:C1:77:38:5D:1C:18:66:1D:38:A3:F4:6F:C8:F3:FC:F5:71:82
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lF_BdzhdHBhmHTij9G_I8_z1cYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.96.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ec:9c:7b:29:49:e5:af:ca:6d:ce:87:11:e5:8a:5d:b2:53:
d4:bc:5c:3c:ae:7f:31:a0:aa:43:a4:5a:02:66:17:9b:db:1f:
e4:7a:1c:34:67:ea:89:f3:1d:55:fe:f3:7e:3d:f4:92:db:78:
ae:89:93:04:4b:16:ac:3a:6e:31:31:5e:4f:9b:b2:3a:2a:35:
60:dd:30:62:3e:ad:5d:7f:bf:c7:89:42:81:c3:7c:01:f1:bd:
bd:11:21:e4:d1:ff:5d:1a:34:60:de:45:05:d2:ef:23:77:d4:
7a:d3:6b:8c:03:ab:a4:8c:d8:a8:56:d1:40:d6:fb:25:33:72:
a8:93:5a:de:4a:c5:2b:7d:c2:ea:3f:83:c5:d7:36:a8:f2:48:
64:11:7d:27:b2:b3:bc:b6:84:f0:5e:a3:a1:86:73:d7:08:d4:
bf:cd:8c:6d:af:bb:aa:50:6b:fd:82:ef:e6:b7:d3:33:7c:13:
c8:25:07:53:ba:b3:a7:ad:a0:b0:61:ea:83:3a:e7:f6:56:5e:
0d:9c:55:86:4a:a8:68:fb:f8:2c:e3:b7:2f:1c:e3:1d:aa:66:
37:93:20:66:0f:00:56:a4:d3:dd:19:5f:c2:46:42:91:fd:4b:
47:34:b3:ec:a7:1a:4c:6a:9e:be:70:36:49:f4:be:2f:17:13:
24:08:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:15 2025 by rpki-client