Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/R2M29pyx5r8ksfrn5QX0UhMFM7g.roa
File: R2M29pyx5r8ksfrn5QX0UhMFM7g.roa (raw, json)
Hash identifier: UOGK3U0OeKbnFm2efRrYLHqpfB919hWYtp3pz0u0D/0=
Subject key identifier: 47:63:36:F6:9C:B1:E6:BF:24:B1:FA:E7:E5:05:F4:52:13:05:33:B8
Certificate issuer: /CN=d793a8d736beb92be16d193b101f93be55325919
Certificate serial: 018412B043116E7898A0A24913BA72AD5316
Authority key identifier: D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/R2M29pyx5r8ksfrn5QX0UhMFM7g.roa
Signing time: Wed 26 Oct 2022 05:07:32 +0000
ROA not before: Wed 26 Oct 2022 05:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 5.180.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:12:b0:43:11:6e:78:98:a0:a2:49:13:ba:72:ad:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d793a8d736beb92be16d193b101f93be55325919
Validity
Not Before: Oct 26 05:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=476336f69cb1e6bf24b1fae7e505f452130533b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:61:79:65:2e:35:7c:92:f5:a1:fb:09:34:
14:23:97:fa:ea:8a:71:f1:83:6a:a9:9c:2d:19:bb:
ef:de:b8:72:7a:57:d3:9b:6e:b6:e3:86:cb:1e:64:
a1:7c:68:4b:48:97:df:af:d2:43:58:5f:86:19:83:
21:27:5e:db:7e:de:a1:88:78:63:a4:ed:77:4a:45:
09:33:9e:21:64:f1:45:8a:c8:9b:61:06:da:fc:b9:
00:c9:69:e7:5f:a6:c9:07:ba:b5:61:ff:a4:93:c4:
4a:9a:cd:de:f1:1f:9e:48:3a:cd:72:df:1d:43:4a:
26:f5:98:48:e9:d2:07:4b:ce:79:e1:cc:fa:f9:fc:
40:30:50:7d:70:c1:c6:40:a6:98:a5:c1:98:1d:54:
5d:10:b5:dd:b2:15:33:0a:a9:31:af:75:c9:d8:43:
21:b3:d9:4e:c8:36:b6:53:42:1f:b1:20:7b:6a:9c:
44:fc:16:fb:b2:32:c6:27:6d:56:93:32:36:35:14:
d1:84:cf:69:6a:b6:46:ce:46:82:d0:fc:38:c4:71:
0a:bd:29:9f:74:e7:11:54:da:e4:bd:14:a8:c4:d8:
f8:f8:01:2f:db:2c:eb:18:b8:63:90:74:65:3a:f6:
ff:91:05:c5:4e:2b:c2:9e:27:a0:80:05:6c:97:38:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:63:36:F6:9C:B1:E6:BF:24:B1:FA:E7:E5:05:F4:52:13:05:33:B8
X509v3 Authority Key Identifier:
keyid:D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/R2M29pyx5r8ksfrn5QX0UhMFM7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/15Oo1za-uSvhbRk7EB-TvlUyWRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.153.0/24
Signature Algorithm: sha256WithRSAEncryption
be:bc:23:c3:8a:46:25:4c:0c:2c:55:7c:70:9a:32:db:9f:c8:
a4:ad:95:ea:22:95:05:fc:6d:f5:3a:31:71:a7:fb:e2:80:b9:
30:8a:69:63:f5:3d:71:48:61:67:dc:c2:10:17:33:01:6f:d3:
4b:72:11:35:a1:a7:fd:83:a5:75:ed:81:8b:30:11:1f:3d:88:
ea:56:4e:38:b4:77:81:34:32:2b:ac:b2:37:13:c0:36:0a:35:
1e:04:77:57:b0:82:0c:fe:44:b6:da:86:df:b3:ea:cd:c6:88:
72:0b:02:97:92:02:a4:bc:77:c2:74:4c:a0:61:86:ac:b0:b6:
8f:3d:a2:03:6a:fa:ed:65:b0:28:ec:59:ff:a2:e5:d2:a6:c6:
2b:a8:a3:66:7f:f4:6f:0c:eb:a7:e7:b0:38:86:9a:2d:7a:39:
49:8c:f5:1f:c7:1a:75:d1:f6:02:48:88:a3:cc:92:75:6c:ce:
f1:68:3b:44:24:db:e5:50:51:f7:a4:c3:ee:c7:fe:bc:51:e4:
67:aa:99:a8:44:da:e3:70:39:5b:03:2e:a8:dd:40:5e:46:1d:
9c:ef:d9:5e:c8:82:b3:2b:2c:04:4e:3c:6b:e2:dc:f6:89:9b:
f6:11:fa:f0:6e:7d:f5:f9:9c:6e:e5:43:5a:ad:4c:11:dc:f5:
0c:28:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:37 2025 by rpki-client