Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/guyPFxQiOsQ0yxu8Hx3OpnFLXgk.roa
File: guyPFxQiOsQ0yxu8Hx3OpnFLXgk.roa (raw, json)
Hash identifier: AyhmwouLe7tYxM9/OSXoZB6dPDQkqcJ7n9ikE6GYf4I=
Subject key identifier: 82:EC:8F:17:14:22:3A:C4:34:CB:1B:BC:1F:1D:CE:A6:71:4B:5E:09
Certificate issuer: /CN=6bd35ebf62e9c5325cd71b63fe8f39e82bbc1a9d
Certificate serial: 0235BBD5
Authority key identifier: 6B:D3:5E:BF:62:E9:C5:32:5C:D7:1B:63:FE:8F:39:E8:2B:BC:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9Nev2LpxTJc1xtj_o856Cu8Gp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/guyPFxQiOsQ0yxu8Hx3OpnFLXgk.roa
Signing time: Sat 01 Jan 2022 15:56:10 +0000
ROA not before: Sat 01 Jan 2022 15:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 5.133.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37075925 (0x235bbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd35ebf62e9c5325cd71b63fe8f39e82bbc1a9d
Validity
Not Before: Jan 1 15:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82ec8f1714223ac434cb1bbc1f1dcea6714b5e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:11:0b:32:38:24:95:22:74:af:4e:39:0f:
ee:b9:d4:92:e0:af:71:55:4c:e4:92:43:55:06:92:
cb:0a:98:db:47:72:99:cb:2e:30:3a:fb:f5:0d:14:
1e:5d:4e:30:86:df:2e:83:ce:56:78:6c:1e:f1:d1:
9a:e5:7b:b1:4d:a1:53:6f:71:1a:de:34:ed:b6:04:
63:be:25:9c:ec:a8:fe:26:a5:88:f9:c0:87:6e:65:
da:0b:61:5a:f2:37:74:f6:8b:bd:0e:f4:66:cd:d0:
9b:6a:c7:8e:fd:74:6a:6f:76:5d:57:5d:05:c6:13:
41:7d:69:48:d3:09:7c:a7:a6:07:d6:e2:2c:8a:a4:
29:77:50:e6:a0:17:df:02:21:8c:4f:3c:d2:35:9f:
d7:0d:14:ef:e2:6b:04:29:0e:09:3c:b2:6a:a4:d4:
06:62:c5:0e:48:0f:de:c2:98:f2:4a:21:1e:a2:58:
a9:3c:41:7c:7b:12:d9:e0:ba:e1:a7:be:ab:d6:85:
4f:7f:21:6d:13:e9:e2:0e:37:c7:ba:77:ca:30:ba:
fc:43:da:3d:4f:3e:35:a7:da:40:93:af:4b:f6:55:
98:ae:6b:cc:53:bb:7f:44:6a:de:eb:35:ab:ca:21:
51:5a:d3:4b:0b:f9:57:a7:35:fb:2b:48:27:c5:e1:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EC:8F:17:14:22:3A:C4:34:CB:1B:BC:1F:1D:CE:A6:71:4B:5E:09
X509v3 Authority Key Identifier:
keyid:6B:D3:5E:BF:62:E9:C5:32:5C:D7:1B:63:FE:8F:39:E8:2B:BC:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9Nev2LpxTJc1xtj_o856Cu8Gp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/guyPFxQiOsQ0yxu8Hx3OpnFLXgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/a9Nev2LpxTJc1xtj_o856Cu8Gp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1a:56:81:88:d0:0c:02:81:4c:b0:4b:2e:a9:53:10:2e:82:
03:fa:f7:c7:8b:a9:43:8d:0f:e8:06:e4:e4:7c:dc:1b:d6:e9:
ea:7d:7c:ea:66:00:a9:71:42:92:c6:e7:03:a6:fb:3c:c2:a4:
4c:27:5e:b1:cd:d4:b8:32:4e:89:c4:55:54:0c:bf:10:23:d7:
06:6d:b1:09:bb:95:ce:96:33:af:56:a3:5f:e3:8d:28:f3:e7:
a5:bb:e6:ce:b2:26:6d:24:d2:45:5b:7b:c4:f1:e4:eb:95:bd:
14:a0:f1:f5:8a:1c:b2:e0:ab:fd:6a:42:d9:45:02:b7:d5:91:
25:ae:00:0d:0d:e9:3c:ea:7e:2a:c7:97:cb:e1:ea:30:9a:d0:
64:12:c0:b2:6f:bb:97:bf:d3:c7:9f:7b:a8:bf:ce:ff:a8:d3:
ac:c1:c8:d3:74:ca:5c:ce:e4:e5:0f:58:4c:cd:01:ab:f4:aa:
c1:79:00:da:b1:2a:eb:59:43:ec:93:96:26:a9:e7:45:46:b8:
7b:23:78:73:2f:fe:cf:60:88:26:69:fb:d0:30:64:22:0c:c9:
9d:2e:16:74:82:c4:dc:4b:9b:fb:8a:0e:b2:dd:56:90:1f:a2:
8c:99:d6:9a:d2:fe:f5:00:1e:60:80:6f:5d:e5:f1:1a:0f:6c:
e4:9f:67:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:44:26 2025 by rpki-client