Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/i3VhAkwmg1Hp-iEg5-4DqgQXOCM.roa
File: i3VhAkwmg1Hp-iEg5-4DqgQXOCM.roa (raw, json)
Hash identifier: mdFfnRZh31uX+xwiVUHnQrTZIRO7yKpYbNnQm8yN5rc=
Subject key identifier: 8B:75:61:02:4C:26:83:51:E9:FA:21:20:E7:EE:03:AA:04:17:38:23
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 0194221FAB8482D3E51E2276F331C2DE32EF
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/i3VhAkwmg1Hp-iEg5-4DqgQXOCM.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16397
IP address blocks: 5.62.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ab:84:82:d3:e5:1e:22:76:f3:31:c2:de:32:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7561024c268351e9fa2120e7ee03aa04173823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:d5:71:ec:56:e6:fe:75:e5:2a:d7:44:c2:
52:9e:fe:73:76:73:b8:da:21:b8:83:4f:bf:4a:66:
99:8c:86:87:b8:24:0b:3a:b9:d4:39:ac:0a:e2:01:
1c:e5:e9:10:18:e4:c7:90:51:40:25:be:1d:e7:4c:
05:41:94:fc:d8:00:a9:71:15:44:ab:bb:64:b3:a2:
41:f6:6f:c3:b5:25:11:6c:c6:30:39:68:4b:ad:7f:
03:1e:94:a5:4a:76:1d:79:a5:23:6a:95:37:fc:fc:
08:65:90:fc:3f:3a:90:cd:7f:48:57:02:76:fe:88:
8e:9f:e5:05:70:28:29:90:29:07:d0:6a:0e:c3:0e:
19:24:7f:e7:cc:da:3b:3c:79:a2:d3:2f:4b:d4:54:
4f:6f:f6:78:e8:01:e2:84:46:90:b5:cf:69:26:db:
5e:80:66:35:4f:82:d7:86:47:88:1d:0d:01:f4:9f:
66:68:1c:b6:8a:27:32:35:bc:c6:f5:fc:dc:28:2d:
61:62:05:93:1c:84:f1:ab:48:90:5d:76:78:08:43:
7f:93:7e:d5:8e:1c:c3:58:6f:e0:59:7f:21:cc:7c:
b0:30:38:21:9e:22:a9:cb:5c:8d:82:10:46:4b:bb:
d8:c1:39:13:12:79:83:1e:ea:d7:ce:8f:98:bf:78:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:61:02:4C:26:83:51:E9:FA:21:20:E7:EE:03:AA:04:17:38:23
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/i3VhAkwmg1Hp-iEg5-4DqgQXOCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.51.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7e:b7:29:05:16:2e:df:12:0f:d1:00:b3:46:35:a1:15:7c:
3a:4f:f1:e7:f1:e8:85:27:95:01:8f:23:f0:54:ff:1f:cd:06:
81:a1:3f:9d:a2:46:b4:e6:72:0d:fc:c9:66:2b:7c:16:c9:5b:
d4:2b:7f:bc:47:8c:88:68:cd:6a:58:14:68:5b:b5:a9:71:40:
90:0c:12:8a:4c:94:b3:cf:46:79:f2:f4:16:70:75:44:da:23:
ae:ae:2f:95:ed:cb:87:63:be:4f:a6:02:92:a6:30:fd:34:6f:
83:53:7c:2d:39:aa:97:52:89:89:81:49:14:bd:21:e1:2f:86:
b2:80:60:cb:33:92:6b:19:de:54:28:1b:9a:97:51:34:43:55:
8e:d8:29:07:48:90:fb:a3:70:66:16:fe:91:ea:63:21:4a:74:
30:66:01:06:ee:12:e6:95:9f:01:c2:7d:1c:51:6f:07:70:e0:
64:86:f3:18:02:08:d0:4d:0e:8c:01:c4:88:9a:26:89:e8:f3:
00:41:9a:9a:b0:27:58:51:c8:5f:5b:f5:74:8b:05:33:78:ce:
dd:89:23:58:df:e6:9f:ff:61:8e:2e:3a:5a:83:6b:44:fa:91:
e5:60:06:80:51:c6:d7:be:fb:7f:d8:92:3c:ca:50:58:c7:48:
f6:c9:bc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:55 2025 by rpki-client