Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/nGpFOcjWirP-fohytRFNxAllJ_M.roa
File: nGpFOcjWirP-fohytRFNxAllJ_M.roa (raw, json)
Hash identifier: H+Il4Ma1MbUoFQAwUyNexH2fygIr6C/z/fo5jOeRIIo=
Subject key identifier: 9C:6A:45:39:C8:D6:8A:B3:FE:7E:88:72:B5:11:4D:C4:09:65:27:F3
Certificate issuer: /CN=db3f546b24b7dbb0984a09c62660a52bad287757
Certificate serial: 0137CAAC
Authority key identifier: DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/nGpFOcjWirP-fohytRFNxAllJ_M.roa
Signing time: Sat 01 Jan 2022 05:01:44 +0000
ROA not before: Sat 01 Jan 2022 05:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 5.172.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20433580 (0x137caac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db3f546b24b7dbb0984a09c62660a52bad287757
Validity
Not Before: Jan 1 05:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c6a4539c8d68ab3fe7e8872b5114dc4096527f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:ec:e5:5f:6a:65:88:e8:ac:e2:f1:d9:cc:
47:b7:75:06:ee:fa:3c:3f:7e:9a:47:2d:1f:fe:87:
54:1e:47:79:73:cd:d4:c5:16:1c:1c:0c:40:1c:42:
4c:3e:fa:9a:e6:af:e0:6c:4f:6b:0d:ec:30:3d:7a:
96:7c:b7:2e:23:b4:19:3f:e0:ac:88:75:22:ab:12:
54:29:de:20:5c:38:d4:f4:b3:ab:4f:aa:0d:1c:70:
e2:da:ca:7e:15:38:7c:61:80:f3:fe:53:47:3c:e7:
a2:b1:9e:88:02:b5:f4:29:d4:48:6c:a3:e7:72:20:
a5:d5:c1:ab:48:7d:b1:94:3f:cf:8a:a2:32:e1:0b:
96:e3:45:71:b7:2a:c7:a3:01:c1:c4:43:f4:83:6c:
11:20:51:fc:d3:88:6c:86:af:58:49:d8:6e:aa:46:
4b:74:20:38:2d:a5:ff:61:e4:bc:47:68:5b:36:51:
53:3d:54:0f:e4:af:c4:63:a3:a2:e5:95:0d:f2:94:
6a:da:b2:ff:29:78:be:6b:19:12:de:cb:29:c8:9c:
4d:60:75:7f:fd:53:22:2b:ba:da:ed:fe:1a:9c:4f:
62:97:e9:fd:7d:8e:24:5d:a6:22:2b:14:85:1e:ea:
42:de:2e:6a:d5:c2:d9:ed:22:e1:e9:32:fd:18:77:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6A:45:39:C8:D6:8A:B3:FE:7E:88:72:B5:11:4D:C4:09:65:27:F3
X509v3 Authority Key Identifier:
keyid:DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/nGpFOcjWirP-fohytRFNxAllJ_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/2z9UayS327CYSgnGJmClK60od1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.180.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:48:b8:36:d4:d6:09:f6:ea:9c:f5:3f:04:e1:5d:10:77:3b:
43:ce:93:8d:00:dd:8e:66:b9:37:31:c4:dd:15:ed:21:30:d5:
da:ad:dc:7f:c3:3f:45:5e:c7:db:c4:d6:b0:46:cc:4e:f0:16:
7e:4e:b0:f8:a5:c4:a9:f7:6a:69:93:ee:a2:b0:f5:17:56:28:
0a:40:96:96:32:0d:3a:7b:5e:66:24:cd:ab:f3:1f:50:42:1b:
e4:bf:80:fe:9e:e5:7e:9b:df:c5:be:aa:e2:bc:0d:db:46:18:
f7:ee:d5:2e:8e:1c:b5:0f:88:c6:11:54:74:4f:df:1c:4d:cb:
a7:fb:a6:ad:6e:55:2e:f1:e6:e0:b3:03:d3:8a:18:b9:24:d3:
69:e1:48:97:fd:e7:2d:25:24:8e:f3:3e:d6:51:b2:f2:35:be:
28:2f:9d:9f:22:bd:6e:d0:a5:64:2e:b2:8a:3b:7f:58:b2:59:
8e:fe:bc:e7:92:74:0b:0f:62:c4:34:72:03:1e:02:7d:bc:5e:
24:56:58:72:16:e8:b4:ab:40:2f:c7:9d:d1:55:76:7f:17:0b:
5a:af:6e:71:9a:61:52:52:26:4d:4f:e7:cc:d2:05:7e:c4:4d:
4b:5b:fe:75:99:31:f4:77:1a:58:58:4b:c2:20:c9:1a:75:21:
85:36:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:43 2025 by rpki-client