Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/f_GqC1XPR5j1xQ9wx4ufJl_Rd-U.roa
File: f_GqC1XPR5j1xQ9wx4ufJl_Rd-U.roa (raw, json)
Hash identifier: aYUNPOgdNdCoca1IUIG9CezcfCnorRh9j4TjoJLBrH0=
Subject key identifier: 7F:F1:AA:0B:55:CF:47:98:F5:C5:0F:70:C7:8B:9F:26:5F:D1:77:E5
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244521CC4AB273A3BC7B6FE0FFB51160
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/f_GqC1XPR5j1xQ9wx4ufJl_Rd-U.roa
Signing time: Wed 01 Jan 2025 23:48:17 +0000
ROA not before: Wed 01 Jan 2025 23:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56985
IP address blocks: 5.183.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:21:cc:4a:b2:73:a3:bc:7b:6f:e0:ff:b5:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ff1aa0b55cf4798f5c50f70c78b9f265fd177e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:bb:60:66:a4:b7:ca:86:de:de:ab:13:7a:
9b:3d:87:7d:8a:c9:59:0d:02:eb:6e:ef:4e:d1:df:
5c:67:85:62:4b:e7:7b:56:f7:f7:fa:a9:d2:3d:04:
b6:7f:3e:fc:b6:29:e2:02:68:7c:57:8f:df:a5:ad:
0f:3c:5e:98:eb:13:da:ec:24:86:df:b3:e9:5b:74:
5b:f1:53:80:4b:9a:f3:a2:bc:26:60:84:74:4d:56:
99:52:95:ff:f0:90:84:52:00:0a:c1:f6:12:bf:4b:
08:18:b0:98:39:71:57:eb:7d:59:1a:d8:01:22:32:
f2:b4:64:f4:89:c5:77:e8:f0:8a:d8:76:0c:ae:ad:
c8:cc:88:60:e3:b8:1a:2b:f9:04:11:cc:40:54:e8:
e3:1a:17:ae:8a:ad:a1:cd:f8:0d:80:1d:7b:4e:73:
35:9d:8f:55:f7:3d:71:f0:18:ad:ef:1e:79:e8:d5:
21:31:9a:d2:51:c5:5c:70:85:3a:e0:48:8d:3b:b3:
fb:85:8a:8b:25:71:4b:1a:c8:9b:a2:76:a3:b8:b5:
71:14:dd:a7:eb:40:e9:81:a3:7b:90:ec:9b:1c:fa:
85:e8:c3:e6:a7:96:0c:2e:35:98:50:dd:3f:91:b5:
d2:0c:96:f1:e5:69:8e:eb:37:d4:93:5f:a1:9b:32:
f3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F1:AA:0B:55:CF:47:98:F5:C5:0F:70:C7:8B:9F:26:5F:D1:77:E5
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/f_GqC1XPR5j1xQ9wx4ufJl_Rd-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.131.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6c:70:5f:ed:10:26:a6:9e:f6:b1:7a:98:c2:99:ee:e6:ba:
51:14:75:32:b7:69:16:a3:64:ea:90:50:33:19:38:2e:25:df:
a1:38:d0:cd:fc:0e:46:6c:1a:7a:9e:ed:0e:49:e4:eb:27:9b:
e2:35:92:3a:41:b5:ca:c6:23:fa:7a:a4:97:e7:6a:d8:cd:c4:
5a:9d:fc:22:02:30:0d:64:e6:ae:c2:02:75:f2:74:fc:ad:1f:
b5:6b:83:7c:37:63:65:0e:6f:fe:00:44:45:78:7b:fe:2f:6d:
e8:13:bd:0a:fe:3b:43:40:44:e6:27:8a:ee:9a:3c:9d:1c:9a:
cb:2f:de:8b:2b:1f:d5:54:c4:6a:3d:59:09:ed:44:76:b3:3e:
69:6c:5a:69:d1:bc:f0:44:71:cb:ae:5f:06:c4:92:1c:2c:48:
7c:c0:aa:b9:06:55:47:0b:b0:91:be:1e:39:6d:47:e8:1a:9a:
41:99:2c:16:91:2a:2f:ae:8a:ef:7f:38:80:b4:33:a7:86:eb:
2d:2a:f2:81:e9:92:3e:91:0c:e1:d7:76:82:63:c2:3e:8e:61:
b2:30:cd:5d:02:25:b2:60:dd:1f:38:20:4b:8b:55:a3:9a:61:
69:cb:fb:cf:6f:a2:84:46:97:60:22:24:53:4f:c7:f8:0a:57:
72:d4:9b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:54 2025 by rpki-client