Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/pUXD-5Sgf5FLD29pRp3d1bn3xko.roa
File: pUXD-5Sgf5FLD29pRp3d1bn3xko.roa (raw, json)
Hash identifier: 8Mos0yKvOXLzriZt5t+Kd6lDlQuM3UUjTQMiPAgDmZ4=
Subject key identifier: A5:45:C3:FB:94:A0:7F:91:4B:0F:6F:69:46:9D:DD:D5:B9:F7:C6:4A
Certificate issuer: /CN=eb19b10727f59594743f91234c9eb7133f6c4731
Certificate serial: 1BC2C2E4
Authority key identifier: EB:19:B1:07:27:F5:95:94:74:3F:91:23:4C:9E:B7:13:3F:6C:47:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xmxByf1lZR0P5EjTJ63Ez9sRzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/pUXD-5Sgf5FLD29pRp3d1bn3xko.roa
Signing time: Sat 01 Jan 2022 06:04:17 +0000
ROA not before: Sat 01 Jan 2022 06:04:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61425
IP address blocks: 5.198.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465748708 (0x1bc2c2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb19b10727f59594743f91234c9eb7133f6c4731
Validity
Not Before: Jan 1 06:04:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a545c3fb94a07f914b0f6f69469dddd5b9f7c64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:b2:ba:71:52:cf:41:85:57:8e:0d:e5:61:
92:ac:4a:46:9c:74:33:33:60:d6:bc:28:3c:8f:aa:
59:8b:e8:ab:0a:8f:68:e8:85:ac:4a:2e:98:14:19:
03:bd:99:30:78:a7:da:32:b4:64:eb:e4:18:77:d3:
2e:06:2d:42:a0:5d:b4:33:e4:60:55:4f:a7:43:34:
f9:06:23:81:eb:04:ce:80:dd:b7:9b:8b:6c:30:92:
5a:4f:2d:23:f9:f4:3c:5e:db:99:cd:83:62:04:90:
e6:76:57:28:67:f5:66:aa:1c:48:d1:a2:62:8b:85:
bb:e5:1b:e7:e7:dd:f5:06:c1:8e:cd:cc:96:29:73:
0e:94:0b:f3:0f:9e:8d:50:23:df:c7:3e:2e:9b:dd:
fc:5c:ce:26:34:65:75:c2:c2:1b:ca:1e:f6:5c:05:
f1:4d:de:00:a2:a5:b5:50:46:f2:96:94:38:bf:b1:
28:d6:b7:a8:61:e1:20:02:57:1f:da:ac:e2:c2:f9:
bb:db:92:6d:76:76:aa:58:0e:6d:90:87:96:5c:d5:
04:50:2e:2d:4d:3b:05:02:90:a8:ae:00:19:e4:b0:
48:c2:4d:f8:8f:cb:d5:76:c6:45:ff:d4:65:c4:ad:
f6:80:2f:85:a4:cf:7b:84:3b:64:29:16:cd:93:6b:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:45:C3:FB:94:A0:7F:91:4B:0F:6F:69:46:9D:DD:D5:B9:F7:C6:4A
X509v3 Authority Key Identifier:
keyid:EB:19:B1:07:27:F5:95:94:74:3F:91:23:4C:9E:B7:13:3F:6C:47:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xmxByf1lZR0P5EjTJ63Ez9sRzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/pUXD-5Sgf5FLD29pRp3d1bn3xko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/6xmxByf1lZR0P5EjTJ63Ez9sRzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:37:56:31:0e:27:7c:59:bd:4f:19:30:60:97:92:84:c9:17:
64:85:c4:d6:75:5f:ff:7f:d9:5b:3a:b9:3c:75:c1:c4:b7:13:
ab:59:8a:6a:47:00:79:dc:49:c8:6c:d6:19:4a:eb:45:d0:0e:
96:c1:35:93:58:d5:e7:2b:ab:ef:84:e0:19:69:28:d2:43:80:
f6:18:91:e6:65:b3:94:53:33:04:7c:49:76:7e:96:23:26:8d:
3c:36:1c:37:48:9e:6b:ff:81:23:2b:7f:e0:b3:15:29:0d:0a:
dc:54:d1:27:94:04:e0:d5:2b:64:93:87:1d:57:ac:ae:7c:c0:
30:5f:ba:e0:3c:04:7f:4b:e1:74:79:57:50:38:ca:1b:96:67:
f4:fe:7a:14:95:15:bc:b9:be:e6:8c:98:15:dc:0c:8a:82:6d:
d0:66:11:28:22:7d:b6:45:5b:89:73:1c:29:a9:71:ba:cb:91:
c4:6e:72:49:08:98:ae:f6:59:cf:71:bd:46:86:df:f8:58:a6:
f5:ec:d5:f5:8b:64:a4:82:27:62:7c:b0:ac:6d:3d:0a:7c:15:
44:e4:c0:c8:14:0d:eb:f9:22:85:78:22:14:60:72:1b:af:9d:
ab:2b:83:63:fd:00:15:cb:10:81:88:11:29:53:e9:f6:95:20:
eb:08:40:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:17:21 2025 by rpki-client