Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uXmWQwmjXXh5eNjzT2O4zJFDm2Y.roa
File: uXmWQwmjXXh5eNjzT2O4zJFDm2Y.roa (raw, json)
Hash identifier: Eh1sU+dYTg8laZu624+URaIKuBc2KmutRPr0afHQy7E=
Subject key identifier: B9:79:96:43:09:A3:5D:78:79:78:D8:F3:4F:63:B8:CC:91:43:9B:66
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01936714B34FA97726C1D5EAA4FB86D003E6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uXmWQwmjXXh5eNjzT2O4zJFDm2Y.roa
Signing time: Tue 26 Nov 2024 06:07:10 +0000
ROA not before: Tue 26 Nov 2024 06:07:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214537
IP address blocks: 5.175.134.0/24 maxlen: 24
77.90.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:14:b3:4f:a9:77:26:c1:d5:ea:a4:fb:86:d0:03:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 26 06:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b979964309a35d787978d8f34f63b8cc91439b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:7d:66:5a:0d:43:1d:74:80:0b:73:c1:e0:
78:4a:e9:6f:b5:44:fd:54:e0:e1:0e:b6:39:77:8b:
62:37:57:d2:bb:8b:3a:84:2c:38:46:48:c8:f9:f2:
2b:ed:29:07:95:7a:77:a0:9b:5a:18:2a:0e:6c:e5:
b7:72:19:f4:83:5b:b0:fe:66:07:58:fc:66:df:ab:
e9:9a:a2:58:0c:44:be:87:42:a1:52:d4:64:47:10:
99:65:65:ae:13:80:3a:20:4a:0f:de:3f:5e:f7:8e:
23:0f:bd:76:df:26:b5:9c:87:7f:6d:8f:82:c5:cc:
11:d4:75:46:18:0c:9c:55:25:98:91:d3:6a:8d:42:
94:98:ac:c0:5a:b8:21:74:ef:b6:8c:53:4e:23:23:
2d:07:ea:7d:12:ab:f8:69:fb:38:c1:38:9d:44:68:
04:ed:37:7b:a2:bb:65:d6:ce:da:37:f2:12:00:df:
f9:a1:e1:06:59:be:a3:bd:33:ac:57:72:ef:be:b9:
28:ec:d2:2e:7f:bd:9b:70:0b:44:1f:cd:ba:d6:36:
42:5b:ae:54:51:13:59:c6:08:d3:ea:0b:cb:e0:9e:
8d:7d:3a:01:d6:a3:62:5a:a8:82:00:15:03:03:92:
e5:9e:d1:69:7d:e9:db:6e:95:57:8f:5f:5c:35:2b:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:79:96:43:09:A3:5D:78:79:78:D8:F3:4F:63:B8:CC:91:43:9B:66
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uXmWQwmjXXh5eNjzT2O4zJFDm2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.134.0/24
77.90.44.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e2:a6:e4:2b:06:4c:65:a9:15:01:0a:b6:91:33:8f:2e:00:
fc:c7:bc:13:c9:b0:74:29:b7:37:cb:02:12:ce:54:2d:dc:7a:
ec:ba:12:dd:eb:ee:c7:3e:2b:6d:9d:8b:79:ac:9c:b8:61:b4:
01:bd:4b:51:83:31:8d:31:07:d2:b4:70:45:ce:77:fe:5e:43:
5b:11:40:f1:80:f9:42:c5:32:92:09:56:12:37:15:83:b7:e3:
a1:3c:d3:33:cb:83:7f:c6:23:14:f8:ba:19:94:42:95:57:cd:
76:15:84:68:a6:8b:14:b0:a7:e4:e0:c7:46:c6:8f:63:b4:8e:
5b:de:62:a4:44:62:8d:49:89:37:63:36:a3:cd:20:01:3c:ec:
f5:1e:74:4f:a5:24:18:75:76:79:87:b2:95:35:8d:4b:aa:79:
05:ec:23:97:ff:27:c7:d6:c0:59:24:23:81:17:dc:ad:62:ca:
cb:3b:90:ce:26:17:df:8c:12:29:31:64:d8:6f:a7:8a:0e:db:
72:5b:c6:21:45:04:b9:6f:d5:68:ed:7a:78:29:97:b4:da:e8:
cb:75:6d:de:23:44:bf:af:4b:82:38:4a:1a:a7:ef:f0:3b:92:
c5:da:3f:35:76:c6:73:48:76:b0:c6:e1:09:b8:1c:10:bf:d1:
b7:b6:2e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:13:03 2025 by rpki-client