Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/DJbVqIjFzT3n0RwLm0EjiMy5q7Q.roa
File: DJbVqIjFzT3n0RwLm0EjiMy5q7Q.roa (raw, json)
Hash identifier: gYznx0LmljZeY/CqrkpdvmnUUfRkkem8r2ZfhYNlpvs=
Subject key identifier: 0C:96:D5:A8:88:C5:CD:3D:E7:D1:1C:0B:9B:41:23:88:CC:B9:AB:B4
Certificate issuer: /CN=bd8ab5805d77b8614efad2f9acb83e304d4cdfac
Certificate serial: 0216E4
Authority key identifier: BD:8A:B5:80:5D:77:B8:61:4E:FA:D2:F9:AC:B8:3E:30:4D:4C:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYq1gF13uGFO-tL5rLg-ME1M36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/DJbVqIjFzT3n0RwLm0EjiMy5q7Q.roa
Signing time: Mon 07 Mar 2022 16:10:54 +0000
ROA not before: Mon 07 Mar 2022 16:10:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5089
IP address blocks: 5.180.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136932 (0x216e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8ab5805d77b8614efad2f9acb83e304d4cdfac
Validity
Not Before: Mar 7 16:10:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c96d5a888c5cd3de7d11c0b9b412388ccb9abb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:ed:0c:0c:aa:44:97:92:ae:04:b8:ba:6d:
db:0f:46:7f:df:ff:34:c2:b6:75:b5:22:33:c7:d4:
d1:43:d7:26:24:93:ad:89:2e:02:b2:ba:11:30:88:
e6:cc:90:33:45:df:aa:1e:16:dd:db:b1:44:70:1d:
29:8a:4d:b7:ec:4e:f0:8e:f1:7e:61:52:0d:78:d5:
bc:dc:84:94:1f:4f:11:b0:47:d1:41:9c:73:0f:5a:
28:54:f3:e4:1b:08:51:13:ce:80:47:e3:f8:a2:4c:
2e:2a:6a:01:83:48:08:8f:74:eb:fe:ae:0b:86:89:
88:7b:f4:2e:bd:6c:ea:70:7e:10:7c:25:f7:20:bb:
6d:f2:c2:36:2b:f7:c8:3c:72:f9:c8:cd:13:96:79:
5d:e1:5d:09:eb:a9:c1:de:58:f2:a7:4a:a9:dc:95:
d9:eb:a9:8b:ce:a3:9b:59:e0:2b:84:f8:54:07:ec:
10:9f:f9:73:c1:c0:d4:61:41:fe:56:7b:2f:0b:36:
a8:a6:3a:5e:54:c4:b0:ba:dd:8d:ad:2f:d2:93:d9:
b3:6e:b1:5c:11:8a:02:2b:07:b9:a3:82:45:d8:e1:
97:b1:45:4e:54:36:bb:83:ef:b0:d0:a5:f1:67:c4:
28:32:27:d0:f1:07:37:9c:38:3d:f0:3b:4a:84:c5:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:96:D5:A8:88:C5:CD:3D:E7:D1:1C:0B:9B:41:23:88:CC:B9:AB:B4
X509v3 Authority Key Identifier:
keyid:BD:8A:B5:80:5D:77:B8:61:4E:FA:D2:F9:AC:B8:3E:30:4D:4C:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYq1gF13uGFO-tL5rLg-ME1M36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/DJbVqIjFzT3n0RwLm0EjiMy5q7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/vYq1gF13uGFO-tL5rLg-ME1M36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.112.0/22
Signature Algorithm: sha256WithRSAEncryption
95:03:38:4d:c7:aa:b1:7d:fd:15:50:c3:6b:ba:07:b6:c6:0d:
6e:73:ad:73:3d:97:79:d2:53:4d:ea:4b:b9:55:df:37:eb:93:
08:e4:5d:67:7f:de:1b:29:dd:b1:e7:cb:fe:bb:1e:e9:6a:af:
ca:d9:f5:dd:d1:00:a4:c7:9e:d2:e0:d7:e9:a8:2a:12:b8:e1:
c9:a2:2e:d3:74:48:a1:89:00:0b:86:d4:3c:f1:7a:02:21:c0:
1b:9f:3d:5e:c9:34:3c:0b:a1:ad:c5:f9:92:ed:91:b1:51:cb:
5e:35:02:37:96:34:f3:49:1f:55:b5:fb:97:a6:a1:1a:68:d6:
03:de:50:63:fc:c4:d4:21:23:82:a1:fc:76:0a:5a:d8:58:50:
c6:eb:55:4e:d2:d4:87:26:3b:14:e2:01:1f:d9:39:84:63:cc:
12:d2:fe:6c:c1:a7:b5:e0:cb:72:7d:65:31:9b:b2:64:4b:7d:
be:11:48:e9:e1:a1:29:04:31:2a:21:fc:bb:38:67:8f:da:fe:
d9:71:98:bf:24:94:50:7d:c5:36:06:1d:7a:bc:4d:d9:f6:f3:
c2:08:28:86:ee:e2:80:2d:24:aa:58:8a:44:bb:9f:b3:40:58:
71:cf:88:9e:5e:a9:0e:42:cc:03:99:eb:6e:84:8c:91:5e:b8:
3e:91:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:38 2025 by rpki-client