Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/aJNwYmFgr6ViKkuqW5xEof9PXUo.roa
File: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (raw, json)
Hash identifier: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=
Subject key identifier: 68:93:70:62:61:60:AF:A5:62:2A:4B:AA:5B:9C:44:A1:FF:4F:5D:4A
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 019422FBE26ABC13E7D061431D2B75777CBC
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/aJNwYmFgr6ViKkuqW5xEof9PXUo.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39305
IP address blocks: 5.183.16.0/24 maxlen: 24
5.183.17.0/24 maxlen: 24
2a0e:7400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e2:6a:bc:13:e7:d0:61:43:1d:2b:75:77:7c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=689370626160afa5622a4baa5b9c44a1ff4f5d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:6f:8e:2f:e0:01:29:8d:46:4f:4f:68:a0:
96:e2:56:d1:af:cf:48:39:64:13:fa:b0:6f:7b:cd:
80:94:ee:d7:9c:bc:cd:92:7d:71:cd:c1:9b:42:b2:
5d:7a:c4:c9:23:9e:8d:82:ed:74:9a:6c:09:e5:3f:
5a:e1:8e:94:50:2f:2b:ab:40:88:3c:a8:ff:50:df:
2a:e5:e6:a9:27:70:1d:34:ad:3a:09:3a:83:83:24:
2c:cf:1a:98:a3:d8:e1:e8:42:a6:ae:eb:a7:c1:83:
06:25:a6:95:a7:6b:ee:ee:b1:4a:f8:7d:a4:d3:9b:
14:68:80:7e:56:82:34:ef:e2:16:dc:4c:4b:3b:18:
48:96:3a:ca:ab:3d:9b:8f:e0:30:80:5e:3c:da:30:
ed:11:ab:27:67:98:62:d1:fb:64:b6:e5:2d:57:d4:
39:fc:73:be:9a:a1:02:8d:a9:09:d6:0c:75:06:1d:
53:c5:d7:a1:d3:a9:1c:f8:77:3b:5d:75:ca:17:65:
37:bc:7e:3c:27:4e:65:8e:94:1d:d0:f5:09:d5:1e:
b7:06:74:05:b1:db:90:88:36:84:f5:3b:4f:c6:70:
68:62:2e:0d:96:0c:ae:f4:f5:23:98:a8:84:20:8b:
65:73:9c:c2:fd:28:bd:c4:85:65:74:a3:45:21:4d:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:93:70:62:61:60:AF:A5:62:2A:4B:AA:5B:9C:44:A1:FF:4F:5D:4A
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/aJNwYmFgr6ViKkuqW5xEof9PXUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.16.0/23
IPv6:
2a0e:7400::/29
Signature Algorithm: sha256WithRSAEncryption
5f:fd:7d:07:96:85:e7:bb:19:d0:73:6e:e4:d9:72:34:c7:5a:
7f:54:8a:a4:e9:f6:d7:ef:a1:6e:da:a3:de:78:67:03:3c:f5:
fd:6f:e1:0a:b4:09:5b:34:07:02:74:84:22:64:75:c4:6c:d4:
a6:ac:a7:b0:c6:2e:d5:ea:da:00:ed:e6:16:b2:8e:44:aa:17:
5d:f4:c0:cf:55:5d:86:b7:fe:87:09:56:ac:16:02:61:6a:89:
66:4b:38:89:64:41:40:e8:2b:ab:59:56:3a:17:1c:b0:da:62:
f3:15:c3:ce:bd:5b:a4:7f:00:8a:b8:09:ff:d9:27:03:7e:ba:
89:10:70:52:f7:c8:78:25:6d:39:6d:0c:11:ba:79:5e:74:44:
41:c8:36:0c:f6:88:89:c0:cd:c8:51:76:05:13:d9:2e:0b:42:
d3:62:9c:64:0a:86:0f:25:f4:4e:33:bd:b2:65:82:3b:30:2c:
29:bc:07:52:f3:04:f7:3a:7a:22:e0:95:0e:57:70:a4:41:0a:
07:76:37:a7:f2:56:dc:64:d7:d7:bd:4b:26:13:93:34:3b:de:
f3:4f:18:24:04:bf:11:6b:d8:80:4e:2d:a0:8e:e4:c7:4a:14:
92:2b:22:3a:51:78:cb:b8:50:66:1f:59:a2:a2:35:46:62:f2:
dc:11:bc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:37 2025 by rpki-client