Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FZg7reE-UFm84LzEryIvmQub_E0.roa
File: FZg7reE-UFm84LzEryIvmQub_E0.roa (raw, json)
Hash identifier: r3/K49aaxMLDA6dE/HTnc/z9tSAmnVatfo1tzEug+II=
Subject key identifier: 15:98:3B:AD:E1:3E:50:59:BC:E0:BC:C4:AF:22:2F:99:0B:9B:FC:4D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019012B908A343AB8B51AF77D0718225E3F8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FZg7reE-UFm84LzEryIvmQub_E0.roa
Signing time: Thu 13 Jun 2024 17:50:34 +0000
ROA not before: Thu 13 Jun 2024 17:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36352
IP address blocks: 5.181.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:12:b9:08:a3:43:ab:8b:51:af:77:d0:71:82:25:e3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 13 17:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15983bade13e5059bce0bcc4af222f990b9bfc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5c:0f:41:6a:0d:2d:de:ec:fb:0b:f9:eb:49:
51:5a:36:e3:10:14:2c:a5:c1:6e:f4:cc:01:b4:b0:
d9:f8:d3:50:26:29:35:46:62:c3:f2:62:c3:b9:df:
65:9a:73:c2:db:d9:44:d1:1b:71:30:7c:3d:d1:d3:
29:e2:cf:cc:d8:a0:63:8c:89:15:19:c7:1c:56:0c:
30:15:1c:26:bc:15:9e:6c:cf:54:6b:b0:ee:37:24:
f4:87:e3:76:fd:c1:a8:06:26:06:94:51:ad:c6:52:
86:7f:bc:cf:21:20:5b:ea:e7:dd:8a:6d:3a:46:15:
06:5e:87:6a:41:63:e1:10:a8:2f:53:91:bd:d4:f6:
ad:79:89:c9:6b:4e:9f:8b:9e:b7:f9:a3:1c:ef:4e:
f9:90:dc:44:ad:9a:b2:3f:7d:25:b3:79:e3:72:f4:
35:aa:7f:63:e0:ea:69:3f:d3:60:d5:81:78:d0:f5:
4e:d3:95:87:e9:fc:b6:72:01:bf:ff:9c:35:1c:f3:
d1:c3:61:54:2d:64:15:c2:17:b8:93:71:a5:fc:13:
20:54:2d:a4:4b:5d:ee:50:b0:0a:6c:38:81:ac:6e:
28:cd:72:88:d2:c6:4c:24:df:b0:5a:1c:f0:b6:d7:
11:ed:2f:77:a6:99:56:69:25:4c:73:4e:31:7e:b8:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:98:3B:AD:E1:3E:50:59:BC:E0:BC:C4:AF:22:2F:99:0B:9B:FC:4D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FZg7reE-UFm84LzEryIvmQub_E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.182.0/24
Signature Algorithm: sha256WithRSAEncryption
55:83:93:4c:ae:ac:c7:d4:2b:5f:5a:91:45:e5:84:00:10:96:
3d:d2:48:e8:b7:96:dd:55:90:6a:bb:e0:5e:b2:0e:df:28:4b:
18:65:11:a5:a1:81:2a:12:42:c4:ef:93:74:44:12:95:b1:73:
f6:5f:04:b0:f3:6d:fd:d5:34:44:10:ec:71:ac:30:cb:78:61:
57:d3:e0:19:ab:4f:3c:b5:f0:cd:04:98:c7:39:58:7a:87:77:
67:69:7f:73:f8:41:07:1d:1f:74:57:63:d2:d6:54:f6:73:4c:
4f:7e:8c:24:9d:ce:c2:cc:6c:41:cd:65:6f:52:92:55:ec:32:
7b:51:f4:a0:50:84:0f:fb:df:01:b4:be:1d:95:1e:6c:75:bb:
bf:e6:82:55:e0:b7:75:f8:40:51:2a:f1:19:ef:c4:a1:05:c3:
49:15:7f:2f:4c:fb:ca:7c:5a:5c:86:14:ce:36:17:42:9f:1a:
e2:0c:5f:28:d8:c0:c6:a8:43:1c:88:88:d6:5b:ff:33:fb:fa:
9c:89:cb:43:5f:21:d9:09:a1:a1:b9:d0:76:71:40:ef:a5:8a:
f5:1a:13:2a:cb:2d:cd:7e:cf:a9:94:b5:a7:23:29:bb:eb:8f:
f8:87:e0:3e:ff:ed:d7:70:0b:fe:20:e8:69:be:22:31:e6:3f:
8e:47:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:07 2025 by rpki-client