Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/5Kl_Zx3j_xk8mjHJ3d9ph4BtHWU.roa
File: 5Kl_Zx3j_xk8mjHJ3d9ph4BtHWU.roa (raw, json)
Hash identifier: gGR0ya71uGNbAaoebVuyagHCCbjVmuFFXguFGxY2VN0=
Subject key identifier: E4:A9:7F:67:1D:E3:FF:19:3C:9A:31:C9:DD:DF:69:87:80:6D:1D:65
Certificate issuer: /CN=c00216f3c879332fe26ea943b29a64d5520069b4
Certificate serial: 03C446AA
Authority key identifier: C0:02:16:F3:C8:79:33:2F:E2:6E:A9:43:B2:9A:64:D5:52:00:69:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAIW88h5My_ibqlDsppk1VIAabQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/5Kl_Zx3j_xk8mjHJ3d9ph4BtHWU.roa
Signing time: Sat 01 Jan 2022 05:02:53 +0000
ROA not before: Sat 01 Jan 2022 05:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.140.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63194794 (0x3c446aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00216f3c879332fe26ea943b29a64d5520069b4
Validity
Not Before: Jan 1 05:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4a97f671de3ff193c9a31c9dddf6987806d1d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:ba:a0:b1:d6:b0:8f:92:7a:a3:a2:2e:61:
cd:86:64:01:0d:c1:2a:2e:c9:eb:b9:cc:13:47:20:
1d:19:bc:40:02:84:75:03:a0:7d:a7:e6:b5:69:a0:
f0:79:00:cf:41:a5:63:c0:c1:20:55:79:a4:48:b8:
ff:29:17:0f:ed:46:55:47:bb:a0:5e:52:a0:48:37:
27:b0:70:0e:34:70:55:a8:22:3f:1f:c6:f7:56:f6:
58:82:f4:6f:ce:cd:da:2f:e4:97:ba:0e:80:e3:2c:
e0:f0:44:f8:32:bc:1a:b3:8a:3b:2b:63:67:3b:d0:
20:f0:17:95:91:65:b8:bc:c3:e1:9d:23:8c:a3:3d:
fd:b8:c9:80:14:07:95:ef:f5:5d:5f:ae:81:dd:da:
d4:f9:11:ff:17:61:62:a4:5a:f0:42:aa:3d:ed:8a:
78:5c:be:95:08:63:c7:fa:05:dd:b4:1d:d3:81:a9:
47:8e:9a:ce:57:6c:21:74:13:f9:c9:6a:b1:9f:25:
b3:64:3c:ae:fa:60:d6:aa:ce:a4:42:17:04:4f:a2:
4f:06:7e:87:20:df:45:c3:3f:c2:2d:d3:73:88:15:
1d:0d:e9:d7:95:3a:38:e5:9e:df:82:e8:c1:63:5a:
d2:aa:a5:1f:25:fe:95:04:86:fa:fd:a1:22:55:d3:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A9:7F:67:1D:E3:FF:19:3C:9A:31:C9:DD:DF:69:87:80:6D:1D:65
X509v3 Authority Key Identifier:
keyid:C0:02:16:F3:C8:79:33:2F:E2:6E:A9:43:B2:9A:64:D5:52:00:69:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAIW88h5My_ibqlDsppk1VIAabQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/5Kl_Zx3j_xk8mjHJ3d9ph4BtHWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/wAIW88h5My_ibqlDsppk1VIAabQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.7.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1d:96:cd:f6:12:c2:fa:3e:b2:6a:cb:54:de:fb:79:f6:23:
ff:78:f6:4d:7c:19:40:e9:85:34:d8:75:d7:0f:24:40:a5:6c:
b6:06:05:7c:0b:67:32:70:2d:b6:f3:eb:23:fa:18:9c:9d:85:
58:c9:d8:70:ee:38:ff:ab:7c:55:17:36:42:c5:be:a8:fe:5a:
45:56:19:47:cd:17:ab:a7:57:b4:9a:92:ec:d5:31:19:fa:9f:
14:b6:54:be:16:dd:95:93:57:57:69:8d:a0:fb:c3:4d:2c:91:
32:c6:99:76:45:2a:1e:7b:fd:04:ef:4e:d7:80:05:7a:31:f5:
00:ad:57:b3:1f:06:1e:1b:ab:0e:e4:49:50:0e:6a:bf:16:82:
15:0f:22:fb:15:7d:59:da:a2:1d:9b:70:c9:fa:42:82:6b:c8:
14:30:5a:36:3c:0f:a1:f2:20:64:8c:91:c1:82:c3:7c:cf:12:
a8:d7:d8:14:ea:35:05:50:be:ab:64:d4:f0:56:b6:c7:9f:46:
5d:2f:b5:f9:87:b7:1f:3a:8f:7b:ed:db:5b:4a:e3:eb:a5:87:
5c:b0:a4:e9:14:63:14:3c:05:8c:3d:d0:c6:78:7c:a3:4e:4f:
d4:f7:8c:fa:b3:22:78:fb:24:e6:9e:59:74:af:23:a3:e8:91:
67:52:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:15 2025 by rpki-client