Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b03cbb-0c6a-4c93-9a57-582de629fac2/1/KE80XouvPqVGIt9tdMTUXxJ3yLo.roa
File: KE80XouvPqVGIt9tdMTUXxJ3yLo.roa (raw, json)
Hash identifier: +C0BDhAdX1myceE2aC/txVOMjbIcBEH/ZotrovWlC9Q=
Subject key identifier: 28:4F:34:5E:8B:AF:3E:A5:46:22:DF:6D:74:C4:D4:5F:12:77:C8:BA
Certificate issuer: /CN=1de4ff0f7dd60c9d504d56c7b4acacd4734e8dbe
Certificate serial: 0183A8BB56D66F38B07D815688AB79D0ABBA
Authority key identifier: 1D:E4:FF:0F:7D:D6:0C:9D:50:4D:56:C7:B4:AC:AC:D4:73:4E:8D:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeT_D33WDJ1QTVbHtKys1HNOjb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b03cbb-0c6a-4c93-9a57-582de629fac2/1/KE80XouvPqVGIt9tdMTUXxJ3yLo.roa
Signing time: Wed 05 Oct 2022 15:19:53 +0000
ROA not before: Wed 05 Oct 2022 15:19:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61255
IP address blocks: 5.250.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:bb:56:d6:6f:38:b0:7d:81:56:88:ab:79:d0:ab:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de4ff0f7dd60c9d504d56c7b4acacd4734e8dbe
Validity
Not Before: Oct 5 15:19:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=284f345e8baf3ea54622df6d74c4d45f1277c8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:9d:99:49:48:53:d3:97:47:89:2c:9d:4f:
96:e7:ab:d5:65:67:48:33:7c:56:79:9f:72:c0:9e:
d5:4b:b8:49:38:b9:e0:59:0d:78:17:fa:3f:00:d0:
ba:ff:11:66:06:19:44:1a:2c:a9:83:ce:92:b5:e3:
65:94:4a:f9:bf:79:b0:88:82:8b:49:e3:49:1b:f6:
4f:ac:8d:a0:a8:a6:3d:73:ca:29:cf:1c:8a:ac:36:
70:58:b8:6e:5a:9f:cb:67:8d:74:3e:78:52:dc:90:
d2:d4:26:2a:5c:65:16:69:21:04:4b:80:6e:4e:b9:
11:92:82:32:fa:00:70:c2:04:57:84:4a:35:d7:d2:
9a:a9:d8:24:96:1d:0c:73:ee:c9:25:be:ca:79:d7:
07:29:43:e7:71:49:07:34:6e:94:80:32:a9:f3:30:
fd:e6:03:30:1f:20:b4:94:4a:ae:1d:7b:84:a7:d7:
e4:f7:47:ee:c4:c8:d6:25:10:2a:c2:29:75:83:10:
b0:db:da:ee:89:35:d8:52:aa:de:60:85:20:17:71:
cc:d0:8e:e2:0f:6a:3d:96:8e:cf:16:c5:9f:49:64:
6a:22:50:ea:56:81:90:97:59:a2:38:f3:d7:33:58:
4d:29:a5:d8:b0:dc:23:0a:7c:12:19:79:3e:13:c1:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4F:34:5E:8B:AF:3E:A5:46:22:DF:6D:74:C4:D4:5F:12:77:C8:BA
X509v3 Authority Key Identifier:
keyid:1D:E4:FF:0F:7D:D6:0C:9D:50:4D:56:C7:B4:AC:AC:D4:73:4E:8D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeT_D33WDJ1QTVbHtKys1HNOjb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b03cbb-0c6a-4c93-9a57-582de629fac2/1/KE80XouvPqVGIt9tdMTUXxJ3yLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b03cbb-0c6a-4c93-9a57-582de629fac2/1/HeT_D33WDJ1QTVbHtKys1HNOjb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e4:74:9f:8c:70:af:ae:2e:8d:3b:e3:b1:8f:fb:6e:ba:25:
41:75:19:be:1e:86:70:3d:56:97:bd:5e:4e:84:64:57:88:da:
46:74:c8:b4:40:35:c4:d2:99:1f:7b:e7:ab:13:66:3f:0f:99:
6c:d3:ff:76:34:fb:05:67:fa:10:be:46:3f:c7:89:92:41:1b:
f1:a0:c5:2a:74:4e:69:1e:c2:e2:b5:b6:d2:ec:a2:69:1e:1b:
55:6e:24:a5:fb:db:38:83:ef:19:75:e4:42:bc:76:45:22:d0:
f6:7e:b3:34:35:e5:55:30:dc:1f:72:3e:7a:c7:9e:cc:08:5e:
ba:67:10:6e:3a:8a:36:30:3e:1c:ad:df:b1:2c:aa:b8:7e:ba:
00:da:91:e2:19:c4:1e:2e:6a:b4:36:9a:fb:16:7c:29:3b:d0:
35:e5:ec:6a:ce:0d:86:2f:2a:90:44:86:e0:e6:9b:8f:8c:e6:
70:da:ba:4c:4c:21:dd:a0:7a:5b:07:c2:f4:f0:e3:62:ba:11:
30:ce:89:a5:f9:27:2b:3b:7e:95:59:31:b7:6d:e6:a5:3f:6d:
31:62:a0:e2:5d:93:66:0e:29:f3:c3:16:91:b9:ff:bf:fc:18:
a6:e1:eb:60:44:b8:af:09:0d:63:6f:34:1b:25:f2:33:98:ad:
67:15:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:05 2025 by rpki-client