Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa
File: Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa (raw, json)
Hash identifier: eziQ7XMSYSqm81hOKI2ro+JxV8C/1wp4JXGTh7G4cO8=
Subject key identifier: 0E:2F:FC:1E:C9:1D:44:DA:CD:B1:6E:56:91:FF:50:D8:12:31:52:31
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BAD42C61AD54F8B5C5802DBDF5FCB
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201671
IP address blocks: 5.104.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ad:42:c6:1a:d5:4f:8b:5c:58:02:db:df:5f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e2ffc1ec91d44dacdb16e5691ff50d812315231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:c8:c0:4a:b5:9c:2c:0d:1a:19:1a:dd:4b:
85:b6:32:a5:d1:54:f2:3b:92:56:45:e4:e2:42:76:
14:fe:2a:ad:e5:13:82:e5:a2:5c:06:58:69:fd:b6:
e0:7a:e8:81:f4:e0:a8:59:29:cc:30:21:60:92:ea:
00:a8:9a:ec:bc:d4:fe:7b:3a:88:09:9d:d5:37:e0:
70:18:72:81:94:d1:d9:03:0e:80:65:b5:1f:ad:62:
4d:3c:c4:8f:08:de:26:af:bb:1e:0a:6e:3b:9c:6e:
8d:36:79:9a:48:2f:39:b7:ee:3b:6d:b4:09:64:64:
30:81:20:56:b1:69:83:8f:bf:5f:71:2c:c5:36:b3:
a9:1d:ee:f2:bd:b9:eb:d8:34:37:bc:a3:18:e5:b1:
f3:cc:9a:ac:93:fe:35:a9:f4:c0:df:64:ea:d2:9c:
8f:7b:eb:94:1c:58:24:51:a7:de:07:47:2a:5c:67:
3f:41:c2:65:2d:c4:db:cb:21:6f:40:f3:63:52:1a:
85:93:c9:cd:16:ad:09:4e:58:e3:ba:c0:b7:76:16:
45:9f:14:12:29:ac:c7:5a:77:69:a9:48:92:f3:d4:
c2:94:39:91:7c:cf:55:d3:39:aa:cd:48:42:ae:9b:
b7:aa:4e:c2:87:0d:69:49:34:6d:59:ee:48:37:3e:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2F:FC:1E:C9:1D:44:DA:CD:B1:6E:56:91:FF:50:D8:12:31:52:31
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Di_8HskdRNrNsW5Wkf9Q2BIxUjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:59:02:c9:2f:19:47:be:7a:ef:ab:25:9f:fa:01:e8:97:e1:
86:f8:b1:36:bd:95:6c:f9:2c:f4:65:c6:99:95:66:11:f7:a6:
1b:76:b2:36:d2:0d:7d:91:c9:4a:7e:fa:65:80:16:2d:81:47:
44:b9:2c:06:89:73:e7:44:2c:f7:96:2f:07:f8:24:b7:49:cf:
0f:4f:ab:97:ee:79:1a:8a:54:64:dd:40:d6:64:58:13:fd:c2:
61:bd:37:63:f7:dc:cc:3f:ec:14:fb:a5:94:4e:50:fb:7c:9c:
30:7d:57:d4:55:5a:e8:6b:3b:8c:0f:de:25:6f:e7:9a:ff:84:
33:99:42:ae:d2:45:fe:ec:5e:cf:81:6a:83:90:cd:fe:e8:74:
c9:e4:e2:21:09:5b:db:64:b1:63:79:96:84:4c:9d:a6:f8:a7:
bd:6f:f0:be:09:21:ba:18:80:2c:c4:51:77:54:64:94:e0:59:
d8:41:b5:6f:77:08:c4:f7:17:60:b9:45:7c:2c:5d:f4:4f:a6:
bf:9f:37:8c:08:57:19:29:50:4b:26:f5:3c:73:7a:67:51:86:
76:eb:23:29:cf:21:83:f0:6c:30:4e:42:ea:7a:07:15:35:1b:
45:10:08:dc:da:89:75:02:e7:2e:31:41:3f:a7:c4:08:df:03:
e6:cf:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:22 2025 by rpki-client