Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/cELOQkpxllhiZl9Xvz2BfMjleVo.roa
File: cELOQkpxllhiZl9Xvz2BfMjleVo.roa (raw, json)
Hash identifier: nio4THbYfaQqCa++ILFh1XVFv9HP03fmj23ZAEjFvng=
Subject key identifier: 70:42:CE:42:4A:71:96:58:62:66:5F:57:BF:3D:81:7C:C8:E5:79:5A
Certificate issuer: /CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Certificate serial: 01845DB6602442E2337368FEAA758403020A
Authority key identifier: 28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/cELOQkpxllhiZl9Xvz2BfMjleVo.roa
Signing time: Wed 09 Nov 2022 18:45:44 +0000
ROA not before: Wed 09 Nov 2022 18:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48737
IP address blocks: 5.181.17.0/24 maxlen: 24
5.181.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:b6:60:24:42:e2:33:73:68:fe:aa:75:84:03:02:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Validity
Not Before: Nov 9 18:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7042ce424a71965862665f57bf3d817cc8e5795a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:0f:f2:c6:9b:c0:2c:90:c6:08:af:68:03:
3f:65:05:19:ca:30:7a:ce:d0:1c:80:0c:df:60:a4:
58:72:f4:80:46:b9:df:7c:a5:89:4a:e4:4e:3a:0d:
6a:2f:86:bd:d6:9f:3c:8d:54:71:25:ed:37:cd:65:
d0:aa:5b:a7:a4:d3:b1:64:e9:9e:09:dc:4c:b0:90:
67:81:09:1b:01:da:77:51:9a:7d:73:2a:aa:6e:69:
dd:f0:6a:66:d3:96:e3:81:cd:82:f8:35:57:ba:e7:
95:dd:39:c0:6e:0a:67:c9:84:98:1a:7a:28:2c:a2:
f5:94:a8:94:48:9a:1a:53:d3:a6:09:40:e7:e4:7e:
e0:a1:ce:8e:dc:a2:a3:bb:46:a5:be:7c:0d:cc:17:
73:90:78:6a:6e:e9:cf:a5:71:72:19:dd:91:93:96:
ea:47:60:77:18:61:4c:ac:ed:41:98:d8:a2:d0:0b:
4a:10:79:5e:b4:cd:48:d1:7c:6a:ab:46:d9:c8:5c:
dc:2b:9e:06:16:78:a0:90:4d:1d:12:35:91:2c:f9:
46:ae:bb:90:fe:7d:60:f1:45:04:ac:ea:0b:b9:06:
d8:84:63:fd:cf:3b:13:16:10:1c:c7:22:48:43:61:
cb:82:11:26:de:8f:76:ee:ea:d0:14:73:b6:d4:8e:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:42:CE:42:4A:71:96:58:62:66:5F:57:BF:3D:81:7C:C8:E5:79:5A
X509v3 Authority Key Identifier:
keyid:28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/cELOQkpxllhiZl9Xvz2BfMjleVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.17.0-5.181.18.255
Signature Algorithm: sha256WithRSAEncryption
74:ba:d9:fa:08:29:9b:5a:ee:23:66:d1:04:7c:86:32:8e:a8:
c0:3a:d4:8a:e7:ad:9e:b6:13:06:b3:6e:aa:a0:c4:1b:1b:8c:
5a:71:43:0f:ce:7e:3e:03:21:0d:84:61:e2:51:ce:69:f1:59:
f8:2c:29:0f:69:18:d4:a8:df:ff:06:eb:04:d3:d2:db:30:63:
e8:f6:a3:0d:dc:af:60:28:be:74:6c:cb:f2:d7:db:79:d2:80:
72:e3:69:a8:66:22:b8:32:36:c6:5a:34:51:2d:a2:d0:0c:1e:
9f:f3:d3:48:b1:a6:82:42:ea:25:40:ba:cd:0d:d8:5c:7f:1a:
3e:64:98:f1:93:b1:ab:db:20:3f:a3:4e:f7:01:8c:ba:96:51:
09:dc:6a:dc:c2:07:04:86:67:fd:70:c9:1f:87:ff:cb:00:0d:
a5:7a:fc:6f:1c:0b:48:19:ef:c2:3f:94:e9:53:d0:32:f9:c1:
54:2b:be:31:83:90:41:af:86:46:1f:af:02:e4:91:6e:81:e5:
ed:e1:c1:cc:2f:dc:8a:4c:11:a4:cf:e0:4f:07:9c:8a:32:50:
51:95:6e:6a:0c:0b:79:a6:34:6e:cd:a2:df:32:b6:05:53:79:
86:e8:38:a5:7b:75:6a:b0:30:b5:f9:c0:11:38:b5:3a:18:b3:
95:bc:ad:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:37 2025 by rpki-client