Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa
File: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (raw, json)
Hash identifier: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=
Subject key identifier: 85:1E:35:45:8B:8C:04:A5:CD:E4:7C:76:A6:96:F0:FD:F2:A7:C0:4B
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 01942068509631F67264B6AA1880F038E864
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 5.252.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:50:96:31:f6:72:64:b6:aa:18:80:f0:38:e8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=851e35458b8c04a5cde47c76a696f0fdf2a7c04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:43:e6:d9:74:1d:56:e2:b1:69:0d:56:2b:
6a:28:bb:a4:2a:9a:2f:85:ce:39:fb:56:a5:f8:12:
a0:52:89:b5:3c:21:47:bb:26:1e:62:21:cd:4e:e4:
3c:d0:82:09:5d:76:03:55:17:69:0b:b5:eb:49:ec:
bd:9b:8f:1b:60:50:02:16:c0:88:26:3f:01:fd:e7:
45:06:9a:a3:66:06:eb:9d:70:94:bc:0f:2a:0f:b5:
05:d6:c3:ac:e7:df:59:98:34:11:66:e3:13:5c:c5:
5c:0c:f0:2a:45:5f:de:68:e4:5c:86:ff:ca:55:b1:
55:5f:b9:7a:6a:91:2a:92:2c:c8:4f:e0:97:6d:f8:
c7:06:90:fc:d7:18:6f:d8:e2:d0:87:21:0d:82:98:
33:13:7d:b9:2a:d6:1a:cc:ed:09:eb:a8:e2:b3:a9:
23:7b:1c:5a:cb:f8:e1:b0:8c:5c:32:d4:37:f7:19:
6b:92:eb:41:62:ad:01:72:24:be:65:84:8f:fb:fe:
4f:5a:1d:f2:bf:32:a2:79:98:04:d0:f7:a3:7d:3a:
c6:5f:60:0d:64:f2:0d:ff:58:97:4a:ad:b9:d2:35:
b5:c3:3c:11:4f:01:58:51:9a:3c:a6:92:1e:32:54:
d1:9d:16:2d:4b:57:bf:c2:b8:55:23:a2:45:36:c4:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1E:35:45:8B:8C:04:A5:CD:E4:7C:76:A6:96:F0:FD:F2:A7:C0:4B
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.152.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:5b:96:8b:9f:64:9a:6b:f0:4e:17:f9:2f:bb:16:53:10:c4:
44:5b:e2:2b:0c:5b:f8:34:e1:e5:f5:f7:37:13:0f:f8:dc:c2:
fe:7f:45:a5:21:ed:e8:36:e5:77:08:6b:01:e1:2c:84:d9:8e:
4e:fd:6e:fa:9d:65:26:b3:3c:7c:f4:dc:e3:11:23:77:21:d7:
e3:b4:4b:9d:20:91:ce:ee:95:73:34:bf:f4:46:29:08:7d:68:
3e:06:65:22:f3:91:1b:8f:41:f6:16:60:09:d1:7d:3c:bf:ee:
90:9a:81:58:09:84:04:df:c9:9e:de:d2:25:7a:8d:1e:06:b9:
02:04:00:12:f7:ea:ab:db:39:f9:70:41:e5:ae:4e:81:d0:07:
3a:91:fa:44:49:97:38:69:02:f2:38:1e:5d:62:22:9e:35:ae:
f9:8b:82:dd:29:12:e9:23:cc:e6:39:f9:c9:75:24:c5:71:d9:
d7:fe:e5:ed:85:52:b9:3f:86:6a:77:93:d4:7f:94:d5:ee:62:
7f:ec:00:ae:19:55:00:b8:c2:05:71:db:04:01:8e:c5:67:be:
99:9c:f7:bc:40:8e:e5:fb:fd:32:67:ee:c9:3b:e8:f2:24:52:
f8:da:bf:fc:dd:a9:90:f6:6d:99:96:d0:fb:f2:6b:1e:0f:5b:
e1:72:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:54 2025 by rpki-client