Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KIJoRu4PhT48SSu2MYHtL0bNf20.roa
File: KIJoRu4PhT48SSu2MYHtL0bNf20.roa (raw, json)
Hash identifier: r2ilXAvclNbVm5zDHoqVHmMQbQlyiQEcyOlA/PU/W3Q=
Subject key identifier: 28:82:68:46:EE:0F:85:3E:3C:49:2B:B6:31:81:ED:2F:46:CD:7F:6D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01956B3A56489F0E59A5E5A5B1F68097E71D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KIJoRu4PhT48SSu2MYHtL0bNf20.roa
Signing time: Thu 06 Mar 2025 11:32:19 +0000
ROA not before: Thu 06 Mar 2025 11:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.180.233.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:3a:56:48:9f:0e:59:a5:e5:a5:b1:f6:80:97:e7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 6 11:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28826846ee0f853e3c492bb63181ed2f46cd7f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:42:b2:d3:1f:c2:28:04:db:26:ea:74:b8:
f4:02:ec:7d:33:b4:b0:7a:34:0e:d1:64:23:35:80:
28:c1:d3:2c:b0:82:c7:83:83:38:07:41:1f:ea:8a:
f2:a9:8c:80:6b:34:f2:ec:cd:c8:a4:f6:cf:fa:61:
6d:eb:6b:0e:55:bf:cc:9a:21:d7:a2:66:26:43:2b:
58:77:12:28:f2:1b:50:dd:5c:76:12:03:2e:97:65:
52:0b:1d:d6:7e:2c:6f:dc:38:0b:78:db:e6:6c:04:
aa:e8:7e:d8:af:9a:44:af:13:20:f3:89:aa:be:50:
79:73:2a:79:8e:85:79:57:58:9b:d4:e9:49:f3:e7:
a2:9f:1f:a1:0d:ab:47:e4:02:c0:3f:ee:52:16:1e:
67:4c:69:72:b4:41:f1:48:2e:d2:00:74:88:c8:ae:
25:fe:9c:5c:9a:70:6a:82:b5:15:6b:3e:35:db:6c:
c4:c6:ea:66:61:91:d1:4a:e2:49:3f:41:31:ee:f3:
94:df:10:e0:8f:d3:e3:0b:72:71:bd:1a:2a:92:2a:
8e:3c:a1:49:3a:37:14:0c:b7:4c:62:9a:24:71:1b:
d8:0f:b9:0c:8f:03:b1:1a:ee:dd:8e:66:0d:8f:27:
83:73:b4:ad:45:b9:a6:cf:f8:31:15:ba:9e:71:24:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:82:68:46:EE:0F:85:3E:3C:49:2B:B6:31:81:ED:2F:46:CD:7F:6D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KIJoRu4PhT48SSu2MYHtL0bNf20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
45.8.252.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f5:97:76:0a:ad:09:4c:7d:0b:64:ee:b5:9f:85:51:d4:13:
ac:e1:5c:05:9b:b9:e6:6f:af:76:05:a3:93:e2:d1:d4:00:19:
45:e1:82:a6:d1:7e:07:a3:63:d2:88:f8:18:a9:f9:bb:b1:9f:
66:1d:86:e2:15:ce:1c:0e:62:25:ed:6e:22:3b:ee:db:fa:cc:
cb:05:80:72:42:ef:86:19:64:68:73:98:3a:61:09:52:25:b5:
44:e3:f4:a5:22:c7:45:ef:44:63:55:18:5f:86:b6:3c:25:65:
a5:c6:35:92:e8:ad:9e:15:78:50:99:5e:c5:2b:4a:91:e3:a7:
11:a1:58:25:6e:04:52:83:7c:78:db:5f:ae:3f:1d:73:22:d4:
ff:f3:bf:4e:bc:51:ce:30:e0:c0:14:83:46:63:af:ba:35:c1:
56:a1:69:5a:f4:45:df:f0:b3:6e:5f:02:c4:86:51:2a:14:f6:
85:1e:7e:28:18:49:a7:cd:5c:75:8e:bd:2a:5b:dc:db:d7:c4:
03:d0:ea:b3:f0:e5:f7:ab:55:19:31:2e:45:dc:0a:a1:fb:26:
2a:dc:af:bd:e4:e2:1d:29:d9:1f:11:21:02:ad:ef:00:41:54:
7d:30:aa:11:10:ad:45:ad:6c:0c:8e:c0:2b:54:17:27:8e:dc:
21:d2:44:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:38 2025 by rpki-client