Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/x1G_ChwZqaullHab7MX4dXGZp4o.roa
File: x1G_ChwZqaullHab7MX4dXGZp4o.roa (raw, json)
Hash identifier: LEMK04Ig7yTwZGyCMk3myYb/unwMaN3/b4LV+1HHTsI=
Subject key identifier: C7:51:BF:0A:1C:19:A9:AB:A5:94:76:9B:EC:C5:F8:75:71:99:A7:8A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195D637B5DD752AEEA58505A0C7F39C9670
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/x1G_ChwZqaullHab7MX4dXGZp4o.roa
Signing time: Thu 27 Mar 2025 06:08:50 +0000
ROA not before: Thu 27 Mar 2025 06:08:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 5.175.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:37:b5:dd:75:2a:ee:a5:85:05:a0:c7:f3:9c:96:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 27 06:08:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c751bf0a1c19a9aba594769becc5f8757199a78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:25:60:97:ca:34:02:a8:31:58:d7:5e:11:
4e:50:94:21:a4:1b:79:74:b9:37:60:e5:d0:b6:ec:
ef:9c:81:a3:10:40:50:44:db:63:cf:07:7d:53:18:
a6:0e:d0:8e:8e:dc:62:e3:d0:99:89:bf:7c:28:ea:
6d:96:2d:c3:2d:d6:ee:fa:82:94:7a:8d:7e:dd:bc:
4f:74:11:4a:47:69:7c:62:e4:26:27:87:46:56:91:
95:50:c1:d7:e3:0e:ab:08:d7:54:e6:b7:1e:37:97:
7a:a8:97:1a:7a:31:91:c5:08:5c:68:bc:7a:53:52:
97:28:ef:db:7b:cd:f5:b0:b1:db:78:47:0d:cc:e7:
02:2c:f1:8e:cc:5c:67:c7:3e:56:57:74:9b:12:2d:
17:1f:96:70:3e:0e:fe:de:7c:a4:fe:f5:1e:fe:e0:
1b:1e:69:e6:06:ba:a8:08:4e:b7:4e:84:86:bc:c5:
54:bd:df:c6:e7:3b:26:88:78:5e:15:a2:b2:27:5f:
62:6f:22:8e:f7:73:e0:62:34:e2:18:1e:10:35:00:
54:25:5e:ae:77:07:68:fe:02:d5:b7:cd:b9:75:05:
a7:2e:7c:fa:61:03:9f:e7:e1:11:e8:2e:04:bf:b7:
4a:50:e9:4a:3c:e0:f3:35:ef:11:62:e2:be:64:f2:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:51:BF:0A:1C:19:A9:AB:A5:94:76:9B:EC:C5:F8:75:71:99:A7:8A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/x1G_ChwZqaullHab7MX4dXGZp4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f6:fc:84:7d:9c:38:19:e9:e2:bc:32:d1:4e:de:91:c7:0b:
e5:5a:ca:f9:75:00:e1:87:c7:b5:32:0d:6e:17:0e:1d:f1:ca:
b7:f0:e6:39:7e:dd:58:1a:ed:ce:67:2c:2f:17:4c:de:15:42:
7f:4a:d6:72:bb:6c:46:42:b4:72:ae:f7:09:4d:e9:ee:07:1e:
cd:ed:fc:00:ac:35:17:45:f6:40:7f:0f:38:7e:56:2a:83:57:
3e:69:b8:f6:55:65:27:ed:56:7a:e5:92:b1:33:89:f8:10:ff:
16:d7:ba:66:9e:b8:a6:ea:68:18:d4:45:b5:a2:e1:a2:2a:8d:
45:47:a6:83:2b:13:70:7b:1f:26:ed:68:8e:05:3e:9c:14:fd:
b9:51:19:d6:6a:ac:1e:50:51:1d:b1:b3:f7:bd:6a:b2:56:30:
cd:49:05:af:82:bc:9a:8d:46:fc:1e:0a:98:89:67:6c:1d:e8:
59:6b:67:ed:28:73:a8:04:60:68:b9:60:b5:fc:6d:78:f5:7e:
0b:54:e6:8a:a6:db:6f:85:cd:a1:a1:ba:d1:28:8f:6c:54:c4:
ab:64:5a:d2:35:12:de:0c:fe:90:08:f9:23:07:ee:05:43:d5:
1f:4d:77:3c:43:4c:15:33:bf:54:1b:a0:61:4b:a5:da:a3:8c:
96:f3:c4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:13 2025 by rpki-client