Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/T5PdaN-HyV7-ou4eQJhHhbfubes.roa
File: T5PdaN-HyV7-ou4eQJhHhbfubes.roa (raw, json)
Hash identifier: 5pDhZFAEDa80Ho3pL+B+LIEfXQjj+Lhce8jSFaMOXyk=
Subject key identifier: 4F:93:DD:68:DF:87:C9:5E:FE:A2:EE:1E:40:98:47:85:B7:EE:6D:EB
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427484B4BE4DE37A8BE53BAAB813F4290
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/T5PdaN-HyV7-ou4eQJhHhbfubes.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208888
IP address blocks: 141.136.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4b:4b:e4:de:37:a8:be:53:ba:ab:81:3f:42:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f93dd68df87c95efea2ee1e40984785b7ee6deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:63:5e:76:43:8f:f4:93:38:07:62:0e:ba:
d1:4f:ef:42:22:24:75:a4:fa:2f:5e:3e:a0:a3:fb:
b8:8f:6e:a0:5e:ef:83:08:91:82:63:3c:c4:1e:68:
b2:8d:3c:26:82:83:3c:fc:3c:b8:e2:48:e5:00:42:
fb:d8:83:f4:e1:6a:e1:86:b5:9e:68:66:b0:d9:58:
a4:59:5d:dd:3c:59:dc:05:e8:aa:b8:20:5d:ce:1c:
5b:af:0d:b8:43:cb:60:0c:8f:d5:22:02:ce:80:9e:
ea:df:d4:f4:0d:9b:64:46:4c:3e:40:e1:ca:47:17:
53:62:09:da:67:a0:5b:8c:22:7f:a7:ca:58:f0:05:
eb:65:06:5d:66:68:c9:55:15:b0:55:2b:fe:c5:94:
de:eb:b5:44:77:df:75:ae:48:7b:f9:03:b4:88:c2:
58:e1:37:4c:50:14:bf:89:6e:21:5e:66:9d:d3:6d:
09:e4:da:00:f8:91:ca:5a:36:61:e3:fb:dc:78:da:
71:38:f0:3b:07:e4:96:ec:49:03:5f:4e:ee:9e:4a:
c2:d4:b9:6f:06:58:47:f9:7c:22:12:6b:b3:43:cf:
03:8e:a2:61:e6:1c:d8:7f:f2:cb:0a:31:5e:a9:e8:
45:76:fe:23:05:5e:c8:df:fe:c9:13:96:7b:70:ed:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:93:DD:68:DF:87:C9:5E:FE:A2:EE:1E:40:98:47:85:B7:EE:6D:EB
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/T5PdaN-HyV7-ou4eQJhHhbfubes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9f:42:28:50:1b:0f:44:db:e7:74:5d:92:5a:0b:25:4f:06:
86:b7:13:ba:48:3d:21:4b:b0:06:79:ed:15:f4:5a:34:a4:32:
c0:2e:33:5d:fd:07:c9:50:ac:33:91:da:9f:76:50:c5:3f:af:
4d:8c:58:53:67:5a:66:c4:b5:71:80:ae:cd:d1:29:e9:ec:47:
89:41:f1:4e:b0:37:c9:d1:63:38:35:b3:fe:03:e9:d3:23:3c:
cf:f3:76:f7:3f:5d:9b:fd:de:76:11:a9:b2:7b:dc:9f:94:11:
e1:6a:26:95:22:9e:58:68:c6:1c:b6:02:47:15:b4:79:39:7c:
2d:92:7a:44:74:45:cc:48:44:98:93:59:d2:df:50:81:1e:db:
56:43:c2:12:be:0f:f0:be:c5:3d:24:c6:a0:7a:29:84:40:a9:
fb:13:4e:56:34:cb:18:be:ef:a9:91:1f:f7:33:2f:a3:0e:9a:
cd:2a:1d:0a:79:00:57:e3:4d:c4:12:43:c5:2a:9f:99:7a:e1:
b4:cc:24:a2:42:b9:0a:18:79:b8:b3:52:0a:ee:f3:d0:2a:75:
cc:b4:6f:0b:04:50:d4:1a:7a:de:f7:ed:35:8f:e9:f6:48:ab:
6f:69:42:35:bc:77:d6:7e:54:f8:c1:b5:06:22:57:94:06:53:
3a:e3:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:24:31 2025 by rpki-client