Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pQWjLtAtAThqEV2dJ2ScnAGj3YY.roa
File: pQWjLtAtAThqEV2dJ2ScnAGj3YY.roa (raw, json)
Hash identifier: 0UVPCCTVl3Eqls2D9OdQkojtFNMPmQzGAlymCAwzUuM=
Subject key identifier: A5:05:A3:2E:D0:2D:01:38:6A:11:5D:9D:27:64:9C:9C:01:A3:DD:86
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019460B1CAFF8C2990216EDED09CC6206EFE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pQWjLtAtAThqEV2dJ2ScnAGj3YY.roa
Signing time: Mon 13 Jan 2025 17:24:12 +0000
ROA not before: Mon 13 Jan 2025 17:24:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213622
IP address blocks: 5.175.236.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:b1:ca:ff:8c:29:90:21:6e:de:d0:9c:c6:20:6e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 13 17:24:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a505a32ed02d01386a115d9d27649c9c01a3dd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:87:29:76:ff:0e:73:95:34:90:09:6e:10:
33:85:94:14:a3:8b:1d:d1:5e:19:13:5a:bb:02:d5:
b6:40:ac:cf:fb:56:6a:d2:5a:39:0d:24:cc:62:f8:
92:4b:ee:c7:d7:de:b4:b1:55:20:cb:ca:55:4e:83:
67:94:c2:51:81:da:2f:e1:8b:0f:1a:8a:fe:b4:91:
51:e3:4d:6f:ae:ce:67:3a:e6:da:cd:85:18:0e:0a:
6c:40:29:b2:5a:8f:49:f3:80:17:14:b4:54:64:10:
1a:d9:04:79:f4:75:4e:0d:d5:84:7b:c5:f9:89:58:
10:44:e5:ee:15:77:cc:ab:d7:3a:0c:e6:a3:84:91:
49:e8:65:89:32:90:d6:b0:fb:f8:3c:e9:d3:e3:23:
b3:f8:ab:ba:da:4d:74:a9:b3:6a:93:cc:95:9a:57:
64:6f:dc:8b:8c:5a:3d:15:e3:a7:01:59:f1:d3:d5:
d9:ea:36:63:89:29:3f:33:38:45:55:07:d6:82:af:
ab:a5:d3:fd:8e:bc:74:69:57:61:53:46:ca:6a:4b:
50:91:87:d5:f7:e7:f1:e9:78:36:ea:0b:c9:88:2f:
01:33:4a:0f:68:eb:c6:ce:bb:5f:aa:c8:69:84:ab:
1c:f0:ca:a0:3d:f6:a4:64:64:9f:7a:35:d8:c3:9c:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:05:A3:2E:D0:2D:01:38:6A:11:5D:9D:27:64:9C:9C:01:A3:DD:86
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pQWjLtAtAThqEV2dJ2ScnAGj3YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/22
Signature Algorithm: sha256WithRSAEncryption
48:e6:19:f1:3a:80:c8:fb:fd:88:af:5e:3a:66:0f:35:a0:a4:
29:86:38:d6:62:ea:2e:3a:48:39:6e:68:ce:53:ec:95:22:a5:
13:80:23:86:aa:84:79:a1:5d:6b:32:1a:c9:3a:5f:aa:54:f0:
e5:2e:15:fd:5a:de:52:77:bc:e3:56:a2:8a:ae:b6:44:4f:2a:
b5:86:7f:e7:02:42:75:f4:a8:1a:cf:b6:b0:04:d2:86:4d:58:
33:7a:9c:f7:a5:0a:ba:f8:da:cc:64:38:4d:c8:69:69:c5:cb:
fd:3a:e9:2b:6e:83:ab:70:df:c4:6b:75:ce:f6:df:56:c8:d1:
99:ab:b3:cf:63:f6:5b:e3:16:0d:c2:71:c6:e0:ce:df:a7:f3:
72:b5:eb:8b:23:83:fd:a2:67:35:ec:04:bf:0e:82:ba:11:63:
a9:3d:43:b2:2f:ce:8d:81:10:96:36:18:68:84:0d:de:f8:f0:
9d:c2:b6:96:ec:df:02:9a:a2:20:47:03:e0:b1:a2:29:cd:01:
79:8a:c2:67:ca:36:74:d3:ac:a8:a1:2e:52:2f:f1:fd:67:b4:
47:20:74:7a:17:4b:2e:9f:54:9e:9b:ad:77:c1:3b:d3:b8:3d:
fe:6e:13:14:60:be:b2:c1:e8:5c:9f:df:57:f0:41:4e:0d:f9:
12:19:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:09 2025 by rpki-client