Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2zHlKsW7qcCA09qAUtJMFO-XbCY.roa
File: 2zHlKsW7qcCA09qAUtJMFO-XbCY.roa (raw, json)
Hash identifier: m78ckhSnJJpIrfOTpaSxmNzww26dPSdTAUlgytnKgNQ=
Subject key identifier: DB:31:E5:2A:C5:BB:A9:C0:80:D3:DA:80:52:D2:4C:14:EF:97:6C:26
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B24E44B15CBAB65035F767A46EDF81
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2zHlKsW7qcCA09qAUtJMFO-XbCY.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212514
IP address blocks: 5.180.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4e:44:b1:5c:ba:b6:50:35:f7:67:a4:6e:df:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db31e52ac5bba9c080d3da8052d24c14ef976c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:bd:e7:d2:d8:47:05:0d:cc:2e:77:2d:92:
9f:3d:62:47:a0:eb:69:f8:3a:15:fd:c1:50:49:d0:
3d:ab:6b:4a:02:10:32:fe:fb:1a:ec:ff:34:f9:b6:
47:10:8b:f8:cb:32:e4:a2:a3:0b:dc:e1:0e:2a:d4:
e6:4d:9a:ae:7a:79:5a:e5:7e:94:7c:e2:63:bf:b9:
0c:59:eb:ed:58:76:4f:49:a5:36:59:33:1c:e8:06:
ca:59:06:40:d5:78:fc:82:c0:6d:12:3f:a3:67:c5:
91:29:3e:a3:af:02:b3:fc:d7:32:e4:e5:c7:83:8e:
28:e1:aa:b8:ed:7f:0d:d8:a2:20:df:fb:7c:1c:ff:
31:d9:2f:fe:32:45:52:57:3d:05:8f:cc:a8:00:c1:
83:76:69:1e:c4:92:ae:ce:73:73:3d:93:61:47:b0:
c7:c5:de:02:da:f2:ea:a3:18:f4:fe:22:e8:fe:5a:
31:05:ac:0d:ec:86:b5:37:38:56:81:72:a8:6f:8e:
d0:22:fa:ec:c3:2e:1a:f3:28:94:0f:ae:06:94:ce:
7e:c5:38:11:72:12:1d:99:3e:9d:4a:a7:c9:4e:e6:
b1:fc:50:82:10:e0:a7:a1:c3:2f:b1:4e:ea:56:a7:
1b:ed:a7:91:14:25:e3:3f:3f:46:c3:1b:e3:41:4e:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:E5:2A:C5:BB:A9:C0:80:D3:DA:80:52:D2:4C:14:EF:97:6C:26
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2zHlKsW7qcCA09qAUtJMFO-XbCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.83.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:f7:81:f0:7a:4d:d7:7f:c6:c7:03:40:23:4d:50:d0:40:1f:
98:2f:33:24:92:73:74:5e:51:05:31:35:9f:10:2b:d6:ab:cd:
1d:ee:f5:12:d2:3c:94:f1:84:c2:b6:1e:9b:d0:76:05:c2:16:
57:6b:4e:ed:32:a1:6c:56:e5:9f:2c:32:40:fb:ab:04:9c:41:
29:38:70:82:d9:53:66:72:7d:ff:28:eb:bf:d6:98:81:ff:46:
14:ce:60:54:e3:33:80:76:b8:83:fe:7b:c8:57:0b:59:9e:01:
66:9e:38:44:9a:2f:3c:ea:31:de:a1:36:cc:e8:e0:94:76:31:
cb:0b:f0:67:36:ba:26:15:8a:4d:e8:f8:ad:04:6f:1b:5e:43:
0e:74:f4:7e:a5:c9:2b:b8:7c:3f:0d:f1:4c:8f:4d:d9:3b:b6:
7c:ed:77:80:65:ee:d9:12:a6:9b:89:11:34:ae:bd:35:9a:97:
80:82:13:26:2f:f9:a4:7f:17:78:e0:3a:e4:79:85:89:36:65:
b4:24:20:eb:47:42:d6:71:71:67:87:4a:3f:98:31:c3:da:68:
32:46:4e:e4:46:a5:96:54:5a:2b:40:e2:c1:01:2a:af:92:0d:
08:a1:1a:bc:95:d2:75:de:07:81:26:a9:f0:f2:93:ff:78:f2:
a6:51:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:12:49 2025 by rpki-client