Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4adc61-4a35-4e3d-a648-898ea8838639/1/AzCiRLO2VhrhNbJK2Uqvp4pxQGw.roa
File: AzCiRLO2VhrhNbJK2Uqvp4pxQGw.roa (raw, json)
Hash identifier: LyLZsisgFjkwLUla81FOk94R8202C9WG/8bjkU5eBbc=
Subject key identifier: 03:30:A2:44:B3:B6:56:1A:E1:35:B2:4A:D9:4A:AF:A7:8A:71:40:6C
Certificate issuer: /CN=2fc8ca56da16608ae0a2bf275085997d39c9db6a
Certificate serial: 01856C1C87B45729A2FCD227E2432780A9B4
Authority key identifier: 2F:C8:CA:56:DA:16:60:8A:E0:A2:BF:27:50:85:99:7D:39:C9:DB:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8jKVtoWYIrgor8nUIWZfTnJ22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4adc61-4a35-4e3d-a648-898ea8838639/1/AzCiRLO2VhrhNbJK2Uqvp4pxQGw.roa
Signing time: Sun 01 Jan 2023 06:54:47 +0000
ROA not before: Sun 01 Jan 2023 06:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.180.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:87:b4:57:29:a2:fc:d2:27:e2:43:27:80:a9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc8ca56da16608ae0a2bf275085997d39c9db6a
Validity
Not Before: Jan 1 06:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0330a244b3b6561ae135b24ad94aafa78a71406c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7f:1d:c1:c3:cc:9a:d2:57:09:07:c7:58:a1:
f4:94:2e:b7:5f:57:30:91:3c:d9:90:09:da:15:a9:
67:e8:3b:71:9c:d9:f3:c3:83:da:81:71:6b:97:1e:
4d:97:f7:18:f1:96:a1:7e:06:cb:c0:93:de:aa:66:
1c:d6:62:14:94:29:5c:9c:dc:ff:f2:67:65:fc:d3:
73:2b:0f:0e:ae:70:91:3f:38:8a:0b:bf:d9:a4:be:
17:88:ad:e8:71:80:2c:81:0f:2b:b0:8c:09:80:50:
3b:52:1e:96:45:c3:25:d2:08:7c:84:31:3f:29:8c:
70:29:37:d9:e0:ed:0a:4e:9e:be:ea:f8:71:4a:3a:
dd:9a:fa:ae:58:e1:21:93:48:d1:21:10:e8:19:0e:
f7:a5:48:d9:75:96:e7:fb:b6:24:22:9a:33:a3:92:
93:fa:97:55:c4:84:f9:13:9f:b2:6a:1d:40:96:f7:
97:1b:4b:1d:a1:99:41:80:aa:06:62:47:0a:76:b8:
6e:33:cb:fb:9b:de:45:87:c9:f1:a3:62:c7:26:34:
a1:0d:34:7b:fe:f5:9b:62:0f:78:1a:e3:f7:a9:a7:
3f:c4:79:6c:2c:a0:8a:d2:21:05:b6:2b:30:f1:32:
b8:85:c6:f1:55:72:46:54:a3:e6:7a:d3:7b:c7:30:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:30:A2:44:B3:B6:56:1A:E1:35:B2:4A:D9:4A:AF:A7:8A:71:40:6C
X509v3 Authority Key Identifier:
keyid:2F:C8:CA:56:DA:16:60:8A:E0:A2:BF:27:50:85:99:7D:39:C9:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8jKVtoWYIrgor8nUIWZfTnJ22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4adc61-4a35-4e3d-a648-898ea8838639/1/AzCiRLO2VhrhNbJK2Uqvp4pxQGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4adc61-4a35-4e3d-a648-898ea8838639/1/L8jKVtoWYIrgor8nUIWZfTnJ22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.177.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f9:d7:b1:c8:40:23:78:2f:10:40:44:bc:13:8b:f1:56:8e:
94:be:0c:c9:08:76:a8:c5:6c:72:e3:10:5b:bd:8a:97:6e:25:
90:a0:f3:97:30:ac:df:dc:df:d3:fa:46:0c:a5:df:8f:92:05:
0a:83:65:85:a2:b6:6f:7a:1f:f1:5c:df:79:8e:d8:a6:4d:a0:
1e:3e:38:44:a1:94:35:ec:a1:65:1e:6a:ff:e3:8d:7e:a4:ae:
d0:2e:cc:44:00:78:db:03:d0:71:95:c3:d6:0d:c9:02:49:c3:
7d:06:21:b9:88:c1:a4:26:6e:50:fd:d6:de:d5:27:0d:58:93:
ff:90:7c:5c:ae:b3:b1:06:00:55:81:44:10:ae:36:d3:a5:ff:
32:2c:b9:ad:5c:c4:00:44:ba:d2:a8:7e:7e:8b:93:a0:95:09:
3d:66:eb:56:c4:31:cd:48:3d:d2:20:3c:3d:9c:1b:e1:3a:ff:
db:b3:80:53:01:36:38:d2:91:03:a8:01:ac:c7:5e:5b:d5:4b:
8d:2f:01:59:36:65:fd:35:2d:6c:ce:70:aa:18:db:f3:4a:74:
84:77:c4:b8:23:55:d2:cc:7d:72:ba:73:38:b5:4a:e7:8b:02:
8a:b2:57:41:82:54:80:a4:5a:64:d3:85:43:29:5d:db:12:28:
e6:4e:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:41 2025 by rpki-client