Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wGS2tZGJiFeq4LW2R8WJnaqdNJk.roa
File: wGS2tZGJiFeq4LW2R8WJnaqdNJk.roa (raw, json)
Hash identifier: 5bi1Sy5GOlkU21e3oaZWHRS3bb+1/u1wWVtvtlHy1tY=
Subject key identifier: C0:64:B6:B5:91:89:88:57:AA:E0:B5:B6:47:C5:89:9D:AA:9D:34:99
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01954647C277D4160C7C2822D8D2BA8DF4FE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wGS2tZGJiFeq4LW2R8WJnaqdNJk.roa
Signing time: Thu 27 Feb 2025 07:21:02 +0000
ROA not before: Thu 27 Feb 2025 07:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62880
IP address blocks: 5.175.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:47:c2:77:d4:16:0c:7c:28:22:d8:d2:ba:8d:f4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 27 07:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c064b6b591898857aae0b5b647c5899daa9d3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3f:dd:a2:4c:ae:94:98:90:7f:ae:f6:4e:fa:
34:88:67:30:d3:f5:de:7c:6a:f9:4c:d0:88:24:f8:
88:90:be:e8:88:01:94:02:c5:09:3f:b3:91:4e:35:
e6:18:89:81:c7:b3:79:fa:a5:79:68:a1:01:2b:62:
24:61:56:bf:29:68:16:4a:92:c9:c8:d2:c5:94:8e:
bc:d1:a4:fc:f4:54:be:4c:69:ec:ba:71:70:69:31:
8b:33:81:ba:97:1b:ed:a7:83:a5:71:84:1f:08:57:
a1:02:6b:03:8a:b2:2d:5c:1a:69:7a:d4:f9:94:44:
f7:6a:b5:cf:49:87:5e:da:c3:64:31:89:88:a8:ec:
27:09:27:68:0e:25:fd:0f:1b:cd:21:7d:75:24:07:
41:4a:90:fe:f3:ff:93:dd:c7:f6:d2:14:62:60:a9:
dc:0b:84:cd:c8:17:de:32:d5:b3:cc:24:85:9e:3a:
8d:ca:34:e8:e9:ca:e5:8f:e4:4c:4e:f4:04:f3:29:
0a:ed:db:9e:2f:1f:52:66:4a:e9:5d:7a:50:f4:ca:
0d:c1:98:78:e6:66:4d:ee:97:d8:de:c0:9c:a6:9c:
10:fb:17:2d:f4:8d:6a:08:55:a8:41:ae:71:d9:06:
fa:98:a0:63:94:be:3a:6c:88:52:61:0c:76:2d:f4:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:B6:B5:91:89:88:57:AA:E0:B5:B6:47:C5:89:9D:AA:9D:34:99
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wGS2tZGJiFeq4LW2R8WJnaqdNJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/24
Signature Algorithm: sha256WithRSAEncryption
68:11:2b:54:50:86:e0:58:54:f4:c8:c6:44:34:eb:e7:9f:7d:
fe:c2:85:15:58:02:dc:15:d1:a5:b5:ce:55:21:d0:fe:1a:43:
45:70:90:81:4e:2f:8f:ea:b2:21:79:f5:24:c3:55:e4:2e:5a:
35:f1:d6:e5:14:4a:0b:90:ae:50:08:50:bb:27:f9:05:4b:f1:
42:6f:f9:31:f7:20:bf:40:14:a9:5e:00:cd:55:39:38:14:00:
4b:56:5f:ec:b3:4a:79:c2:8a:12:c5:1b:1d:dc:19:0f:0e:62:
97:b7:13:d7:17:ef:6a:ad:73:ea:5f:35:30:ba:f6:26:39:e4:
ac:d7:04:fa:33:01:0f:06:62:cd:89:eb:12:4a:53:41:1f:01:
4a:84:6c:e5:99:2c:c9:fe:05:41:fb:8a:54:df:cb:03:1a:e8:
66:28:ee:ff:80:0b:4e:c8:ee:21:3d:2d:b9:ca:c4:6c:06:23:
0c:5d:73:31:e9:21:3a:6e:25:bc:69:de:0f:96:23:c3:53:fe:
7a:2f:80:e2:a0:45:73:36:06:c3:5e:f6:d5:53:f7:af:1e:67:
73:19:00:d5:65:f2:14:fe:70:07:3a:7d:b7:33:58:2d:f8:5d:
9f:66:25:6f:93:4b:3d:65:6f:55:27:32:9e:fd:82:42:24:8b:
d5:f5:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:42 2025 by rpki-client