Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/XNe4gWTyfIdqmR-vjLc97fHH7is.roa
File: XNe4gWTyfIdqmR-vjLc97fHH7is.roa (raw, json)
Hash identifier: fiwPGYTsQhf2iD/9qCTC2e51QlFh4pDXNfoHTPwiaEs=
Subject key identifier: 5C:D7:B8:81:64:F2:7C:87:6A:99:1F:AF:8C:B7:3D:ED:F1:C7:EE:2B
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 380982DE
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/XNe4gWTyfIdqmR-vjLc97fHH7is.roa
Signing time: Sat 01 Jan 2022 04:04:07 +0000
ROA not before: Sat 01 Jan 2022 04:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60222
IP address blocks: 5.255.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940147422 (0x380982de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 1 04:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cd7b88164f27c876a991faf8cb73dedf1c7ee2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:b0:ff:52:b7:bd:54:cc:a2:93:f8:e5:ca:
7b:57:fe:c3:ca:7b:b7:d5:9b:f7:39:be:2f:6b:d3:
b9:ed:90:29:e6:88:c7:e5:80:23:db:a4:65:36:81:
9d:84:f7:c6:0f:ea:39:e8:4b:bb:04:95:29:82:40:
89:e8:dd:b2:ce:13:46:07:a4:81:a1:47:a1:06:69:
28:74:8c:6a:11:42:e6:ad:83:78:6a:fd:79:fc:e9:
64:58:d7:4a:85:fe:81:b6:b0:20:52:6c:af:2c:10:
5a:f1:ea:de:73:be:81:58:77:76:e3:b2:aa:04:34:
7a:02:f6:d2:fe:53:a1:d7:8d:de:39:c4:77:2b:f4:
5d:e6:62:75:ca:ca:6d:a6:b8:ec:47:86:ef:87:e1:
a6:c1:5f:20:a0:bf:e6:a8:59:7f:29:3e:0d:6c:81:
6c:8b:d8:c8:0e:f3:68:83:ad:8b:30:68:01:6b:f0:
96:38:ee:32:15:01:09:be:cc:0b:c4:37:fa:f7:06:
35:05:19:19:58:91:e3:5a:c9:aa:7c:98:e5:30:37:
5b:e5:a8:a2:78:f9:4b:21:5b:29:26:e5:c2:8d:2e:
17:9e:ca:da:07:5c:98:89:53:d7:91:95:63:a9:65:
a8:1a:e9:ce:bc:54:be:6c:cd:07:7f:74:42:ac:d3:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D7:B8:81:64:F2:7C:87:6A:99:1F:AF:8C:B7:3D:ED:F1:C7:EE:2B
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/XNe4gWTyfIdqmR-vjLc97fHH7is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.76.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:82:96:f5:eb:d1:8e:bb:13:ed:33:73:66:5f:51:a9:65:6c:
94:67:b6:a8:60:34:cf:39:98:9e:a6:9b:60:06:ce:58:ac:9e:
aa:10:cd:7c:da:a3:9a:a4:8f:ed:bc:1c:8c:42:cb:15:1f:0b:
3d:16:9d:ac:94:00:86:e2:03:b9:5e:da:24:2f:88:07:5c:87:
3b:c2:2f:bd:0b:cb:54:bb:9a:54:2a:36:f6:d8:fd:fa:24:e7:
e0:26:6a:76:68:45:72:48:f6:22:44:eb:4f:e7:7f:0e:91:54:
7c:cc:27:07:6b:10:5e:53:5c:0b:4c:a5:bc:fa:08:4e:e7:b4:
9f:fd:ac:9d:8a:2c:01:94:ae:66:2f:71:77:4f:d5:ff:32:48:
74:90:b0:74:5e:94:b7:1f:e8:49:e2:73:f3:16:98:06:22:33:
ae:3f:32:47:74:8e:a9:2e:84:5f:33:9a:42:94:ba:cb:13:c1:
30:db:5d:fd:bc:cd:96:92:fe:68:9e:37:12:27:4c:0a:64:fe:
5f:2e:14:c6:4a:b5:b6:61:c2:68:aa:01:3f:16:22:b6:ce:98:
9f:2e:2d:54:86:51:4b:24:38:30:02:33:d8:5b:75:93:4a:05:
68:93:2f:59:8e:36:d1:4d:52:85:32:52:e1:7e:7f:f3:f6:2d:
6f:22:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:29:26 2025 by rpki-client