Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/pjJVPFmhGgCqfL_2MIpeFSXP4dY.roa
File: pjJVPFmhGgCqfL_2MIpeFSXP4dY.roa (raw, json)
Hash identifier: QJ0Gu6MSd2Oarls3QbVhkS+jfIlmiQ3+fCJwafvcjaA=
Subject key identifier: A6:32:55:3C:59:A1:1A:00:AA:7C:BF:F6:30:8A:5E:15:25:CF:E1:D6
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5AF433F631986B728BA9666A795FA
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/pjJVPFmhGgCqfL_2MIpeFSXP4dY.roa
Signing time: Thu 02 Jan 2025 15:50:05 +0000
ROA not before: Thu 02 Jan 2025 15:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200391
IP address blocks: 5.188.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:af:43:3f:63:19:86:b7:28:ba:96:66:a7:95:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a632553c59a11a00aa7cbff6308a5e1525cfe1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:cf:cc:14:3e:ba:4b:45:b9:67:c0:81:ed:
de:b9:57:75:dc:a1:c1:61:99:02:c6:74:5c:03:6b:
51:16:13:a4:b8:1e:91:87:11:aa:7f:0b:34:02:46:
e6:c6:d3:62:21:51:82:4a:13:ba:f3:0f:e4:54:7b:
dc:6b:df:26:05:3e:4a:dc:5b:46:2a:3f:ca:59:39:
fa:15:69:b7:58:10:c9:3e:f8:fb:34:90:a9:94:42:
00:83:68:9f:d8:f0:53:a2:f0:77:8e:be:91:b3:ee:
23:8a:ab:47:10:ab:9e:2e:2d:d8:68:f1:66:8e:8e:
67:13:ac:00:fc:4e:cc:ca:c4:39:b1:e8:72:dc:7f:
2e:59:59:62:68:e8:86:e9:61:07:77:ab:56:34:b8:
1c:b6:32:ec:df:71:c7:82:c7:04:db:a4:52:f9:5c:
a7:2c:f5:ea:a0:8b:fb:9c:db:44:23:57:41:f3:16:
bd:1c:57:a3:c5:98:22:99:ba:14:71:97:5e:ff:f6:
03:4b:93:b7:ab:f8:9d:45:68:20:b5:a2:3a:f5:60:
d9:dc:56:0b:24:2c:fc:00:34:f5:8e:9e:a4:6e:87:
94:77:36:54:07:6a:ed:b0:6e:aa:8b:42:0b:39:f4:
15:0d:9e:c1:b8:be:b2:97:5a:de:d2:53:d7:f7:c6:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:32:55:3C:59:A1:1A:00:AA:7C:BF:F6:30:8A:5E:15:25:CF:E1:D6
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/pjJVPFmhGgCqfL_2MIpeFSXP4dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.206.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7a:e7:8d:1a:08:bb:a9:c1:95:75:ca:15:e6:a4:1f:28:9b:
c9:6a:d4:9b:77:f8:04:e1:ae:2c:54:db:33:5c:23:13:99:0d:
7d:1e:cd:a8:c2:13:fe:82:f0:86:fb:62:2e:33:30:de:53:8d:
02:2d:ec:65:a6:e4:a5:e8:b6:a1:20:5c:eb:07:fd:22:6a:e3:
8a:02:80:34:e1:ec:6b:8a:60:82:71:a3:af:fd:1c:1b:03:4b:
ce:7d:7d:e8:78:39:bf:9c:ca:a0:4d:99:ec:23:77:61:46:cb:
03:a4:95:ca:2a:af:20:bb:76:a4:c3:fc:a4:d9:53:28:1a:47:
3f:c1:0a:48:db:92:e4:4f:dd:54:e9:a8:97:c2:61:0e:fd:90:
77:98:76:cf:08:82:5a:0b:11:ae:cb:5e:3b:e4:b2:dc:1a:ee:
6d:67:c9:88:ac:06:6d:38:69:c2:36:82:2e:95:c8:86:76:8f:
9e:c4:f8:ff:09:76:a5:7f:c4:47:5d:71:97:f6:ab:70:6d:07:
8d:dc:dd:fd:dc:13:e0:77:e3:4f:05:62:f4:fc:2e:47:dd:d1:
95:ce:b2:bc:1a:22:19:93:e8:c5:dc:a6:f1:16:3a:87:85:a2:
e5:83:cf:59:de:e8:7e:6d:e2:4b:54:35:2d:60:49:44:86:d4:
ea:ad:8c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:19 2025 by rpki-client