Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/8-93OMrmQnq37SA3EZFu06ZiFkw.roa
File: 8-93OMrmQnq37SA3EZFu06ZiFkw.roa (raw, json)
Hash identifier: qExj9gcuddGaznWLw3/dfoZDhY8hMlt6QTwFvQ8AHnk=
Subject key identifier: F3:EF:77:38:CA:E6:42:7A:B7:ED:20:37:11:91:6E:D3:A6:62:16:4C
Certificate issuer: /CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Certificate serial: 01BA0033
Authority key identifier: 28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/8-93OMrmQnq37SA3EZFu06ZiFkw.roa
Signing time: Fri 13 May 2022 13:12:40 +0000
ROA not before: Fri 13 May 2022 13:12:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34569
IP address blocks: 5.181.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28966963 (0x1ba0033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Validity
Not Before: May 13 13:12:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3ef7738cae6427ab7ed203711916ed3a662164c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:21:bf:23:af:b0:8d:26:36:71:18:d6:92:
fe:24:30:24:10:9c:50:5b:6a:00:35:d0:86:08:52:
17:31:0a:a1:b3:dd:47:5f:c8:40:69:20:43:c2:9d:
da:88:f7:7c:0e:fb:70:7e:52:fd:50:25:5a:12:ea:
b4:e6:31:51:50:39:65:c4:bc:13:e3:82:17:b4:40:
06:91:88:9c:0b:18:53:d4:26:60:3d:6b:5c:94:b2:
a4:ae:58:02:27:25:73:a6:21:da:16:04:df:36:ad:
6a:5e:f6:67:13:a2:3f:b4:26:51:74:05:d8:c6:3b:
c9:83:21:91:3d:95:3b:95:22:83:bd:df:52:5b:44:
68:80:6a:dc:ed:08:95:da:85:48:94:65:9f:60:fe:
40:db:1d:b0:90:9c:af:7a:97:b7:0d:e3:bd:cf:42:
ab:59:cb:01:75:08:13:e0:86:cc:d8:90:f9:dc:18:
24:96:f0:70:ef:ce:fa:68:20:99:9f:15:ea:e8:26:
7c:88:c7:31:86:71:23:86:01:6e:80:d7:d0:83:5d:
1d:31:1b:4a:8d:82:5c:29:e7:62:aa:b7:fb:49:60:
a8:4f:27:e2:09:2b:50:ec:0b:df:59:03:a4:b2:65:
34:43:35:2b:0b:57:e4:bb:3a:4f:b2:1e:21:a9:42:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EF:77:38:CA:E6:42:7A:B7:ED:20:37:11:91:6E:D3:A6:62:16:4C
X509v3 Authority Key Identifier:
keyid:28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/8-93OMrmQnq37SA3EZFu06ZiFkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.19.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d3:f2:5f:55:64:9d:fb:ab:a2:72:3e:19:af:9f:bc:a4:be:
59:fc:10:60:20:5c:12:df:55:4f:51:6e:79:e6:00:fa:b1:75:
31:91:24:55:39:92:aa:19:e1:14:76:59:a4:be:e9:7a:36:f0:
86:84:41:6c:51:00:dc:f6:18:e1:71:b5:32:b4:2f:74:20:9b:
8d:4a:b8:c1:5f:24:b2:ba:47:1a:3b:3e:3c:1f:57:67:a5:dd:
c1:b8:36:ab:85:9c:c1:8f:08:53:03:3f:76:c3:17:8b:cf:b0:
f1:c6:4f:35:55:c3:87:01:cc:72:1b:32:30:66:39:76:03:70:
a8:5d:b7:d2:af:fb:f9:c5:4d:8a:23:b1:a0:2f:09:cb:af:a1:
61:a2:3d:2e:74:d5:ed:e4:55:3f:5f:70:d7:fe:d7:c7:e9:37:
91:42:2b:4f:24:84:7f:a3:a2:0d:e4:7c:9d:de:a9:60:45:46:
b5:10:94:a1:48:0f:53:71:07:48:23:70:ad:5f:c4:44:a4:1a:
b7:8a:84:0d:ee:cd:04:4b:c3:44:1e:72:74:dd:e5:71:bf:55:
25:3d:30:0b:fc:b4:40:90:12:c4:e6:bf:b5:81:22:49:d6:e3:
4f:89:32:e0:d0:c8:d7:77:b3:80:e9:ed:01:2b:60:1a:c6:a0:
b2:d3:90:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:34 2025 by rpki-client