Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa
File: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (raw, json)
Hash identifier: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=
Subject key identifier: A0:4D:A4:96:02:97:71:4E:99:14:16:B1:0F:96:1E:E5:D1:6C:E1:BD
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 019420D6663C4E13E751C57CEE6216E15796
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa
Signing time: Wed 01 Jan 2025 07:48:29 +0000
ROA not before: Wed 01 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52209
IP address blocks: 5.63.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:66:3c:4e:13:e7:51:c5:7c:ee:62:16:e1:57:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Jan 1 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a04da4960297714e991416b10f961ee5d16ce1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:6d:b2:9a:8c:32:79:0e:f5:38:4e:b8:16:
f9:4d:45:f3:64:6a:57:1a:ba:e3:7f:cd:e2:05:78:
15:74:b9:8a:87:3a:ac:5d:74:ca:2a:30:b7:b3:1f:
93:2a:4a:01:ac:bf:b4:41:50:99:97:d7:06:f2:36:
c8:55:dd:7a:7f:3f:17:6c:55:41:51:8e:c0:a4:1a:
03:47:6c:c5:f8:23:c9:df:1a:7a:98:f1:8d:c1:66:
f3:b9:38:45:2f:cd:21:58:0f:a4:60:4e:92:9f:83:
88:c7:3a:91:aa:e7:c0:11:3b:ff:76:25:77:f6:c1:
19:b9:3c:75:b7:34:82:c3:f9:c1:7f:3f:ac:96:c6:
10:52:2f:36:d7:06:5a:02:58:b1:e6:eb:52:ec:4d:
a1:d8:5e:75:82:7c:02:f7:bd:db:b9:1c:4e:3c:21:
80:cd:af:b4:91:db:39:bc:74:5c:97:ff:47:9c:2d:
9f:44:1a:ce:cb:2b:f8:7e:68:10:2e:41:66:87:e6:
24:53:05:76:87:16:30:01:b3:46:0e:76:06:fe:2a:
1e:a8:61:ad:f8:11:63:40:de:85:97:25:66:a5:15:
0d:82:f6:fc:cb:a4:a4:ad:60:08:9d:b7:de:21:ad:
04:69:f0:2c:0b:4b:ba:01:ce:48:00:47:2a:6d:41:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4D:A4:96:02:97:71:4E:99:14:16:B1:0F:96:1E:E5:D1:6C:E1:BD
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:42:7e:78:fc:0a:3c:91:c7:28:fa:ae:1a:19:4e:b5:7f:0f:
1c:e3:35:43:07:3e:a5:13:04:ee:bc:a7:49:46:e8:f2:49:99:
be:77:81:2e:b1:00:e9:2f:99:e6:04:29:a9:b8:2b:1e:ca:28:
c1:a9:8c:1c:c4:08:63:e0:c2:b0:29:b4:55:d5:04:4a:06:a0:
65:53:4b:7f:0d:cb:7c:44:71:76:97:7e:70:cc:61:0d:77:a1:
55:22:df:25:c4:b3:d6:8b:ec:d6:5b:73:33:8b:26:2d:7f:82:
4d:e7:ed:0a:dc:f2:ab:ef:24:f2:0f:0f:6f:6e:0a:67:df:15:
55:52:aa:4d:1b:a4:d3:41:93:ab:9a:1d:48:99:00:3e:6c:d2:
21:b1:b7:7e:36:a3:f0:b6:6d:29:d5:5d:be:e4:bb:15:93:17:
7d:51:87:2f:04:85:cc:0f:18:df:f9:30:c9:42:18:d1:d7:19:
8f:de:66:f4:38:d6:ce:7a:aa:ff:77:d1:6e:f7:9f:e6:80:ff:
8c:2a:66:43:d1:1f:00:08:29:06:25:39:ce:cc:8d:74:23:41:
e1:5b:63:85:a8:81:c1:4c:d1:6d:3a:a5:8f:d8:32:5d:59:be:
f9:78:eb:ee:52:8e:fe:2b:2b:5b:a6:b6:2b:31:b2:1c:74:ae:
5a:64:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:05 2025 by rpki-client