Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/t6183SgO3eA2OamsYHRaC95MQ2A.roa
File: t6183SgO3eA2OamsYHRaC95MQ2A.roa (raw, json)
Hash identifier: +bWWD5RE+G9P3iUiaDCSNoJ6XNDUFIHKODRPKnM9bJM=
Subject key identifier: B7:AD:7C:DD:28:0E:DD:E0:36:39:A9:AC:60:74:5A:0B:DE:4C:43:60
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194B31B1FBA4D789B61573F5438F0B2592B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/t6183SgO3eA2OamsYHRaC95MQ2A.roa
Signing time: Wed 29 Jan 2025 17:28:06 +0000
ROA not before: Wed 29 Jan 2025 17:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214052
IP address blocks: 5.83.139.0/24 maxlen: 24
5.83.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b3:1b:1f:ba:4d:78:9b:61:57:3f:54:38:f0:b2:59:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 29 17:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7ad7cdd280edde03639a9ac60745a0bde4c4360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:28:60:0b:ba:c6:b3:52:36:c7:f4:ff:58:
55:c6:85:1f:5a:6c:2d:e4:ac:82:9c:46:b9:be:da:
39:55:f1:6b:cc:73:3a:1e:e0:6b:40:5a:63:29:08:
8b:23:c9:f9:ac:83:0b:46:d8:5d:d7:62:3d:ae:84:
ed:44:55:83:f4:fe:b7:af:d9:25:21:b4:8c:21:b9:
a1:0b:8c:eb:63:89:a3:4b:88:6e:17:88:02:fe:19:
9c:55:60:73:70:73:5d:3b:1a:e2:a8:0b:89:11:52:
5b:ed:6e:36:ca:21:62:20:88:9d:86:9d:c6:21:45:
f2:c7:f7:a6:b0:fd:2c:b2:7b:fd:28:42:b0:0f:c2:
78:9d:0f:ab:9e:3b:68:d9:cc:b7:65:17:77:ee:07:
3e:ca:bc:d0:03:ca:47:1e:9a:b9:49:9f:72:25:27:
13:b8:8a:bc:ce:be:de:a6:18:ca:d0:ab:2c:98:d3:
84:67:b8:93:27:e7:8e:35:7a:ec:04:15:52:93:90:
c0:dc:14:5c:38:1a:0d:0e:64:57:9d:f6:35:29:8e:
04:8b:69:a5:b6:51:55:32:8f:be:60:79:68:15:b4:
9c:c5:da:f6:99:d6:90:ee:fd:51:9f:05:5b:9e:a0:
a9:e4:e2:59:aa:26:44:fb:df:ce:a7:a3:05:48:3e:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AD:7C:DD:28:0E:DD:E0:36:39:A9:AC:60:74:5A:0B:DE:4C:43:60
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/t6183SgO3eA2OamsYHRaC95MQ2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.139.0/24
5.83.159.0/24
Signature Algorithm: sha256WithRSAEncryption
39:31:ea:e7:b2:91:c1:d9:c2:14:c7:90:9e:df:0e:2b:cc:95:
00:fe:9f:8d:df:8b:8f:fd:78:33:5b:59:3a:4b:b4:ed:88:e0:
b8:0c:86:34:c0:07:c9:de:f6:38:bc:72:92:0f:50:8d:74:bd:
3a:31:70:fe:48:86:db:26:c9:33:4b:f4:b9:7f:82:76:7b:e0:
94:96:45:4d:9a:60:85:ff:1b:eb:b7:53:85:b7:b3:a4:d0:37:
34:04:ee:2c:49:d6:70:a8:2c:79:7d:88:3d:69:e1:fc:ed:c1:
f1:6e:70:f5:ac:21:d6:bf:89:c3:fa:d5:a9:7f:11:75:c2:ba:
8d:4d:47:d6:f0:f1:1b:42:d3:92:49:22:40:2a:32:54:76:12:
6b:f5:09:97:49:d4:44:63:67:cb:77:51:2e:bf:19:bf:d5:a1:
ba:d1:d2:83:5a:68:e4:07:f4:d5:81:41:08:cb:76:a7:ae:4b:
ec:e7:79:db:9b:81:11:90:61:11:5e:33:37:c1:1b:ad:45:7c:
39:01:a3:ab:4e:91:a9:6a:51:39:d8:fd:3c:32:5a:30:9b:ee:
24:1d:1c:df:6f:52:5b:81:c5:59:64:ed:02:7c:2f:56:75:c1:
87:08:a8:50:a8:af:a0:fa:a0:59:3b:3c:ec:24:e9:68:df:00:
92:6d:65:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:42:46 2025 by rpki-client