Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/rQxSem1-Kj3lg-5PuXfuF7SI9yQ.roa
File: rQxSem1-Kj3lg-5PuXfuF7SI9yQ.roa (raw, json)
Hash identifier: PeZFKxQ+WDQbNeE8rcL9c4ZvVFWR4TshAcX7Pq7P7tI=
Subject key identifier: AD:0C:52:7A:6D:7E:2A:3D:E5:83:EE:4F:B9:77:EE:17:B4:88:F7:24
Certificate issuer: /CN=481481cc00d7f63f97c1336d32b8905c1500fc22
Certificate serial: 018CC6B86E8568EEA251B44575E997B3D493
Authority key identifier: 48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/rQxSem1-Kj3lg-5PuXfuF7SI9yQ.roa
Signing time: Mon 01 Jan 2024 20:30:24 +0000
ROA not before: Mon 01 Jan 2024 20:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60440
IP address blocks: 5.133.80.0/22 maxlen: 24
2a09:6a00::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:6e:85:68:ee:a2:51:b4:45:75:e9:97:b3:d4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481481cc00d7f63f97c1336d32b8905c1500fc22
Validity
Not Before: Jan 1 20:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad0c527a6d7e2a3de583ee4fb977ee17b488f724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:9d:5b:6a:cb:ae:64:c7:32:dc:f9:b5:d5:
3f:d0:7f:8b:25:21:63:60:d1:c4:ac:02:4e:bb:dc:
37:0a:62:9d:8d:23:bd:26:0e:0d:8c:a7:00:08:2c:
b0:24:da:b6:20:0a:7c:af:b7:28:00:f3:ed:cb:99:
22:27:d0:b9:ca:43:6b:b0:ae:65:7b:ec:30:17:2d:
f0:ea:56:b9:4e:1c:5a:ef:2d:35:09:cc:22:cb:f0:
40:63:6c:ed:16:95:37:f3:8e:74:a8:46:73:3b:29:
ac:a6:6a:7b:35:5a:1f:14:8d:73:2a:93:4d:aa:56:
40:cb:d8:c6:31:68:ac:71:2c:5e:c2:a9:3f:cb:ae:
dc:b0:37:c0:09:03:0d:14:a6:75:bb:fc:6b:90:25:
de:55:75:db:7f:5b:d1:e5:74:6c:63:93:60:5d:7e:
7c:17:00:46:c4:a5:71:d1:82:85:97:d4:28:a6:52:
93:8c:a4:37:65:5b:3c:e8:7f:50:f5:4d:8a:59:85:
01:00:5f:9f:f2:b2:12:76:20:43:44:c0:bb:c3:9e:
e2:78:19:8b:22:9d:91:97:f3:47:d9:11:89:fc:e8:
18:39:8d:0e:a9:de:93:08:67:da:63:43:69:16:b6:
05:3c:7f:b4:0e:23:ac:75:cc:a5:cb:11:a8:42:c9:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0C:52:7A:6D:7E:2A:3D:E5:83:EE:4F:B9:77:EE:17:B4:88:F7:24
X509v3 Authority Key Identifier:
keyid:48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/rQxSem1-Kj3lg-5PuXfuF7SI9yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/SBSBzADX9j-XwTNtMriQXBUA_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.80.0/22
IPv6:
2a09:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
93:e0:c4:a6:c3:47:79:ea:fb:e4:2a:28:28:95:1f:83:56:dc:
5f:86:4e:b4:9d:ff:13:04:c5:00:90:87:ce:3d:6c:00:b9:ec:
70:a4:d4:82:8a:5d:27:81:4f:63:76:7a:4d:37:96:4f:19:0e:
80:20:2e:8a:4c:88:38:3f:41:9c:4d:44:f8:29:9e:9d:2a:19:
6a:7e:1e:0c:2a:7f:20:6a:bf:d7:33:71:20:10:bb:06:94:af:
f8:5a:3c:13:93:ad:a4:0a:48:79:81:85:90:5a:82:13:76:59:
39:89:f7:1c:29:2b:73:f5:4f:86:61:c6:27:ad:33:6a:84:11:
0e:1f:8f:bc:50:8b:12:fb:25:1a:5b:65:08:58:aa:f2:19:e0:
c0:81:c4:24:a8:d9:cb:82:de:ce:1c:d0:b8:e7:68:9a:4a:22:
98:d4:d2:83:1b:36:d6:45:13:ff:cb:8d:f5:1e:b0:7f:b1:02:
b3:1a:4b:0b:c7:9a:e6:7e:01:7d:79:15:b9:80:ce:4a:ca:be:
bf:be:1c:e3:72:dd:13:38:c7:67:cf:bd:39:59:96:e3:d8:95:
6a:7b:f7:45:a7:00:67:b7:bc:e2:b1:95:81:2d:13:11:89:59:
b0:cf:bc:45:67:62:89:9a:e3:68:48:3b:66:f6:1e:a7:6a:d3:
c5:04:b3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:52 2025 by rpki-client