Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/7DHU0Zi6WA3AMSBWnNH4iSIQCmk.roa
File: 7DHU0Zi6WA3AMSBWnNH4iSIQCmk.roa (raw, json)
Hash identifier: hztjRg8Vlmb1yCxgyojtyLH67fMJoy5GDt/JgtCtCD0=
Subject key identifier: EC:31:D4:D1:98:BA:58:0D:C0:31:20:56:9C:D1:F8:89:22:10:0A:69
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 01856C53AC44EBA010658F348FE25D016FC5
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/7DHU0Zi6WA3AMSBWnNH4iSIQCmk.roa
Signing time: Sun 01 Jan 2023 07:55:00 +0000
ROA not before: Sun 01 Jan 2023 07:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205282
IP address blocks: 5.181.161.0/24 maxlen: 24
213.130.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ac:44:eb:a0:10:65:8f:34:8f:e2:5d:01:6f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Jan 1 07:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec31d4d198ba580dc03120569cd1f88922100a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:ec:9f:17:cc:ab:ea:37:67:cb:53:c3:3a:
c1:3a:41:b0:46:a9:19:38:a4:44:e5:6d:0c:63:d7:
3e:4a:82:a9:23:8b:bf:d2:c0:71:8d:71:86:30:26:
d6:7d:15:f6:77:39:43:90:15:4b:5d:56:25:10:35:
ab:69:eb:f6:f6:32:5d:cc:e8:25:a5:66:86:33:33:
45:13:49:dd:ed:a6:87:5a:fc:af:7d:ca:3d:81:8a:
1c:71:ca:cf:79:39:0e:a3:fd:d7:8c:92:2a:87:7e:
ec:bb:20:1a:70:82:32:3a:d0:fc:a1:43:cb:1b:e4:
82:14:71:05:bd:7c:eb:ec:10:b6:da:11:c4:c5:1a:
38:a3:2b:d8:35:3d:0c:6a:50:af:e3:11:28:30:ec:
f7:e8:85:da:7f:08:05:4e:44:e9:21:98:72:88:b3:
72:f3:eb:18:c7:eb:19:70:cc:bb:1e:fd:54:43:6b:
46:85:e6:07:7d:1b:98:17:29:e7:bd:62:c6:7a:94:
84:89:5a:cc:5c:9d:1c:e0:ee:0f:0d:b7:85:9c:3c:
6a:a0:41:60:69:03:70:e6:f2:94:2f:79:54:88:3d:
7e:c5:13:c7:41:1d:81:1f:64:cc:26:b9:f3:be:b7:
3a:b6:02:c9:64:31:96:84:b7:15:59:fa:c3:eb:fa:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:31:D4:D1:98:BA:58:0D:C0:31:20:56:9C:D1:F8:89:22:10:0A:69
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/7DHU0Zi6WA3AMSBWnNH4iSIQCmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.161.0/24
213.130.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:11:1d:2f:32:12:79:0a:02:82:3e:73:4d:03:ee:49:bf:9f:
fb:49:21:fb:24:c9:2d:bf:1f:b8:fb:60:0e:5c:96:33:a9:1a:
54:a5:74:1f:f3:06:1b:7d:66:a4:32:a4:73:30:5f:06:81:30:
d7:58:51:49:e2:56:e7:19:09:98:47:aa:e9:68:49:d1:72:08:
7c:db:35:df:e7:14:a0:04:77:7c:4e:ec:d4:53:f4:53:f8:dd:
b7:fa:41:2f:0d:79:2f:05:6f:44:7f:05:76:02:23:d6:fd:30:
99:2e:db:d5:ec:bd:8b:4b:87:f0:e3:31:a9:bd:ba:55:5d:7f:
33:47:dd:35:71:36:05:05:f5:c2:6f:0b:11:d8:13:1e:87:c8:
71:63:a4:0e:6d:6d:69:ba:d3:07:df:f3:63:63:ee:38:e9:b7:
01:0f:cc:d9:8b:16:c4:ee:f4:8d:ff:de:4b:14:1c:ae:15:8a:
39:09:b6:c0:04:07:43:32:a7:8c:b2:eb:77:d7:91:70:23:a2:
f2:0a:ba:ef:f7:a3:08:ee:09:70:c8:0a:6c:c4:1b:bb:bb:b9:
7c:d7:95:70:e7:92:e1:27:35:83:a6:c5:a6:05:22:ad:e0:c8:
7b:bf:60:5b:86:75:b6:6e:dd:f0:97:0b:95:46:21:14:4b:47:
7e:a1:2d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:53:18 2025 by rpki-client