Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/JLY9G6rvTDVQsSmyCmAGrh7a4p8.roa
File: JLY9G6rvTDVQsSmyCmAGrh7a4p8.roa (raw, json)
Hash identifier: 7X4VsoCCU4c3iby/vlrnKSK6yAGn8zU7+BAXf1kARSo=
Subject key identifier: 24:B6:3D:1B:AA:EF:4C:35:50:B1:29:B2:0A:60:06:AE:1E:DA:E2:9F
Certificate issuer: /CN=cd5aca299d355aadfe1ef939546280e588d249a3
Certificate serial: 01856EB8FA1886FEC99E7BD70B14C0A6565B
Authority key identifier: CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/JLY9G6rvTDVQsSmyCmAGrh7a4p8.roa
Signing time: Sun 01 Jan 2023 19:04:54 +0000
ROA not before: Sun 01 Jan 2023 19:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.172.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:fa:18:86:fe:c9:9e:7b:d7:0b:14:c0:a6:56:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5aca299d355aadfe1ef939546280e588d249a3
Validity
Not Before: Jan 1 19:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24b63d1baaef4c3550b129b20a6006ae1edae29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:34:06:89:8c:ad:7e:1e:58:3a:db:59:fb:
4d:ea:b3:d8:15:ba:6b:b5:92:f7:c1:1b:13:12:bf:
9b:aa:f5:3d:69:ac:43:b6:e0:7c:03:84:ad:0c:91:
2a:46:fb:87:35:27:4a:86:1d:1c:5a:54:32:8d:31:
d0:10:c7:52:ef:66:59:e3:d4:af:12:86:a2:d2:2d:
25:5c:95:c4:a2:f1:5f:7a:d1:ff:27:f0:8a:ae:17:
0b:ce:ac:ca:c5:a0:35:db:d4:38:8d:fe:b0:79:49:
e2:d6:7e:71:b4:75:d1:ae:b8:d8:ff:53:57:8c:a5:
03:20:b8:05:4d:2e:6e:8f:5a:7d:80:5b:89:ca:08:
b9:f4:a1:9f:bd:fb:04:f4:73:c8:20:d6:ea:db:48:
a0:9d:8f:59:ed:d4:29:b9:cc:bf:00:e1:11:52:c3:
c6:ec:8d:8d:fd:b5:d8:9f:d8:29:3a:e8:9e:a7:9c:
cb:30:df:9e:72:9b:eb:dd:1a:2e:9b:cd:5f:d3:54:
a5:ec:ae:a7:0e:8d:d9:14:b4:7b:a9:f3:2e:06:2e:
4e:de:62:ce:dc:72:9f:d7:61:81:2a:26:7b:cf:1e:
37:68:12:12:14:ff:f2:50:73:30:e5:a7:d2:1d:5c:
f6:d7:e9:d1:92:3d:67:0c:2b:7d:13:1a:0c:f3:9b:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B6:3D:1B:AA:EF:4C:35:50:B1:29:B2:0A:60:06:AE:1E:DA:E2:9F
X509v3 Authority Key Identifier:
keyid:CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/JLY9G6rvTDVQsSmyCmAGrh7a4p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9f:d8:6c:b0:7b:24:fa:59:5d:d7:58:5c:56:c2:f8:65:4e:
99:ee:dc:3f:e3:4a:f0:55:93:99:8a:07:4d:b0:ee:bb:86:bb:
e4:2b:10:08:da:ee:da:cf:34:16:71:8f:ac:32:83:65:eb:ec:
22:75:96:4b:21:32:59:cc:b2:05:88:05:98:8e:37:0c:7e:4d:
03:35:a6:71:b7:11:3d:a2:5f:f5:5a:08:4d:e0:4a:de:68:49:
ae:b0:aa:ee:85:c2:a4:c0:c5:f8:34:91:4a:fa:07:7f:26:b5:
52:d7:e5:de:b5:90:cb:05:00:39:83:b9:50:e9:3d:af:2c:19:
4d:df:6c:7e:f5:5a:ee:12:0a:c9:55:f0:71:b8:7f:a7:0b:b0:
4e:03:aa:2d:f9:f3:2c:c8:95:ea:16:3f:68:3e:f9:fb:10:7d:
a9:36:5a:be:07:64:da:37:87:d9:67:51:c0:15:b4:78:ff:50:
ff:c9:23:dd:64:31:ad:30:53:55:23:23:58:34:33:5d:3e:87:
5b:3f:ab:be:27:7c:d8:ff:3c:db:31:d0:ea:dc:73:f7:b3:31:
50:3e:25:d2:94:e4:3e:ed:ea:c8:76:d2:d2:df:a2:2a:a3:e5:
21:36:30:18:93:fb:84:75:bb:ce:b1:26:6b:ca:2c:38:08:3e:
8d:10:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:15 2025 by rpki-client