Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/1ZlBvvuOKKMYX8MHWAFPnpm6RxA.roa
File: 1ZlBvvuOKKMYX8MHWAFPnpm6RxA.roa (raw, json)
Hash identifier: WwHfIJBCJOWZwmBHZAmytj+3RwfqBNsJp6wnUSyBihs=
Subject key identifier: D5:99:41:BE:FB:8E:28:A3:18:5F:C3:07:58:01:4F:9E:99:BA:47:10
Certificate issuer: /CN=481481cc00d7f63f97c1336d32b8905c1500fc22
Certificate serial: 01877AA9337837065CF77BC2F084485D9F67
Authority key identifier: 48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/1ZlBvvuOKKMYX8MHWAFPnpm6RxA.roa
Signing time: Thu 13 Apr 2023 12:48:41 +0000
ROA not before: Thu 13 Apr 2023 12:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208293
IP address blocks: 5.133.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:a9:33:78:37:06:5c:f7:7b:c2:f0:84:48:5d:9f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481481cc00d7f63f97c1336d32b8905c1500fc22
Validity
Not Before: Apr 13 12:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d59941befb8e28a3185fc30758014f9e99ba4710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:4e:71:99:ad:82:3c:c8:ee:4f:53:61:0a:
9a:96:a0:79:bf:38:8e:89:23:8e:fa:90:8e:b9:1a:
f7:1d:f6:74:86:1b:d6:59:ba:c2:4e:83:70:2b:7f:
4e:3c:de:53:b4:3d:4d:a7:ab:8d:8e:41:50:e7:0d:
2a:b4:21:0d:8a:f1:b7:9c:9d:d7:67:2e:04:f3:31:
d3:d7:a4:61:c2:ba:93:04:27:19:11:e8:e2:1a:0c:
7a:47:66:09:dc:1b:ff:99:a8:56:e6:3c:ed:18:be:
8a:d2:34:e2:ec:0a:b7:fb:f3:f9:65:7b:9c:70:98:
34:70:cb:4c:0d:87:4c:33:4a:84:e5:38:46:8e:43:
e6:0f:d3:61:59:ca:a6:33:ea:72:7f:be:74:79:ce:
2d:c4:de:47:8e:a7:b0:cc:fe:71:15:7d:3e:94:e6:
e2:93:f5:22:8a:1b:b8:17:87:91:42:e2:c9:91:fe:
29:dd:7a:1c:f3:c7:6b:ee:3a:f7:ff:0e:72:6b:8b:
4d:21:1b:e1:da:3a:93:03:3f:7d:0a:e8:b2:16:0e:
79:f0:f0:8f:fe:4e:cd:a3:c8:5c:62:fa:ee:b7:28:
06:81:1e:9d:bf:35:bf:8f:7b:d1:c8:6d:f8:a2:ee:
8d:4c:33:47:d2:a8:12:75:51:8b:7c:77:2f:d7:84:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:99:41:BE:FB:8E:28:A3:18:5F:C3:07:58:01:4F:9E:99:BA:47:10
X509v3 Authority Key Identifier:
keyid:48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/1ZlBvvuOKKMYX8MHWAFPnpm6RxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/SBSBzADX9j-XwTNtMriQXBUA_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.83.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:06:da:e8:b0:d5:fb:0f:51:70:9c:aa:e0:6c:78:0d:6b:4e:
94:1e:8e:12:8e:f9:72:f9:2e:a8:dd:23:7e:ab:34:e1:c3:cc:
7a:0b:36:1c:be:a3:e0:bd:7f:03:d5:33:55:ab:fe:da:40:8f:
82:9e:24:99:9d:9d:6b:17:fc:b6:57:21:cd:b8:6b:51:d9:02:
94:c6:a6:6e:7e:6a:cc:0b:b2:8d:ef:1a:75:5e:5b:f5:5f:bb:
70:66:87:b3:43:40:e3:27:a1:50:7c:7b:ef:a9:15:17:cb:67:
ec:37:b7:ad:5f:59:c0:cb:b4:c1:ab:b2:2f:17:1e:6a:24:7c:
e7:b0:ec:0b:2a:ba:3e:d5:90:76:92:dd:b0:82:08:93:20:aa:
4c:6d:34:38:42:d5:71:01:23:23:6d:a9:94:3d:d9:10:5e:e7:
e8:59:54:01:ad:b2:94:7b:9f:a8:ec:a6:fa:9d:4b:61:3a:ab:
32:b4:e1:3d:54:26:f0:9d:d7:6e:ec:6d:2a:2a:13:43:90:79:
8a:b2:72:98:ab:70:77:eb:15:2a:c0:17:96:2d:57:16:51:3b:
fc:70:17:0b:a0:07:10:ca:88:4e:cf:9b:91:5e:e4:f9:c6:83:
43:89:a8:11:e8:05:ad:be:0c:38:f1:f2:43:b1:c1:6d:aa:ff:
b2:f1:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:20 2025 by rpki-client