Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dp8pvQa4vbHOUBRQq7A88UhSl18.roa
File: dp8pvQa4vbHOUBRQq7A88UhSl18.roa (raw, json)
Hash identifier: 3Lmekz/0Q0BYHatiLmy2hW/4qKq+J2XWsl9s9mwNmF0=
Subject key identifier: 76:9F:29:BD:06:B8:BD:B1:CE:50:14:50:AB:B0:3C:F1:48:52:97:5F
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D3F5E0B840D82E804E161EBC19F27
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dp8pvQa4vbHOUBRQq7A88UhSl18.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3170
IP address blocks: 5.252.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3f:5e:0b:84:0d:82:e8:04:e1:61:eb:c1:9f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=769f29bd06b8bdb1ce501450abb03cf14852975f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:4c:27:a5:90:59:9f:6d:cf:22:0b:22:e7:
7a:11:78:48:de:87:bf:30:7d:c3:13:21:68:e2:85:
bc:51:e8:f2:bb:ed:33:a4:83:b2:66:71:5d:5b:1b:
cc:1d:1a:46:3f:7f:78:c8:26:2d:92:3d:08:49:b7:
67:3c:7a:f4:c0:0a:a5:0a:91:b4:b6:c0:04:2a:6f:
15:d4:80:a1:79:f5:04:58:27:70:1c:26:f1:80:cd:
24:33:29:da:de:1e:3a:ff:a4:35:fc:27:8c:cd:b5:
07:2d:c1:25:8f:90:f4:4b:0f:dd:c9:ff:cf:99:94:
50:d2:fe:37:8a:68:4b:73:89:c4:0f:08:b6:de:94:
32:07:4a:b1:8c:9f:00:e2:88:0f:be:98:4f:3f:f7:
c4:1c:49:ee:ec:d2:58:5d:f0:d6:d0:b3:c5:d2:f3:
70:d5:19:bb:7a:46:f8:1c:72:a0:a8:57:8c:01:3b:
22:0f:fa:37:eb:76:c8:e4:61:ff:94:75:bd:16:43:
68:54:1c:9c:47:12:66:09:04:d1:21:66:b6:e2:e8:
cb:0a:52:d1:2d:75:ab:ce:ba:b0:c5:ad:76:89:13:
5d:dc:25:f9:e3:75:9c:81:fd:dd:b6:68:b1:39:ba:
37:f1:04:73:4f:5c:f7:50:41:27:71:a3:e6:55:19:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9F:29:BD:06:B8:BD:B1:CE:50:14:50:AB:B0:3C:F1:48:52:97:5F
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dp8pvQa4vbHOUBRQq7A88UhSl18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.235.0/24
Signature Algorithm: sha256WithRSAEncryption
af:5e:63:02:16:c6:f5:1c:90:d9:99:e6:55:a1:76:3f:a4:63:
39:2d:57:26:b0:bc:c6:a4:fa:17:71:fa:22:35:a5:b5:50:e1:
dd:6e:85:22:fd:4b:17:11:a2:b5:1c:af:fd:fc:7e:e6:cb:c9:
56:34:5b:26:c0:40:e8:79:02:02:a6:bb:de:2c:a4:4a:18:15:
fd:6a:37:47:9f:f9:27:8c:51:1b:00:c3:96:82:42:42:d4:f4:
bb:bf:17:d4:16:8b:6a:a0:67:62:25:f7:f5:ed:fc:a2:10:c8:
37:2c:31:b6:0b:3e:e4:67:8b:2a:56:32:bc:5a:12:9b:59:75:
f5:a7:3e:bb:b0:8f:82:65:3a:39:50:f9:de:b9:43:d7:68:8d:
42:ab:ab:a4:83:5d:ca:5c:2d:84:d5:35:a5:99:67:36:79:f1:
3d:bc:80:fd:6a:bb:f0:ef:49:ea:ef:6f:98:db:8c:3a:69:7e:
45:9c:d2:57:ab:8a:ab:3d:6f:61:16:c3:7b:e4:24:db:2b:8f:
3c:28:d5:66:4e:37:f3:79:23:af:e8:87:4b:ff:77:b7:a4:94:
ad:08:2d:98:b8:7e:de:b5:81:a0:ef:8a:d1:6f:81:41:03:92:
27:a8:a3:60:65:65:a7:99:f7:9c:8c:38:9b:10:49:72:a2:4d:
da:45:32:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:48 2025 by rpki-client