Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zMJETxLsWTAKKQAfukhgO31305s.roa
File: zMJETxLsWTAKKQAfukhgO31305s.roa (raw, json)
Hash identifier: WhIX26XzF7FuSZOfkdVhWWsEE5Vfe4tbUMIAoSLVDUw=
Subject key identifier: CC:C2:44:4F:12:EC:59:30:0A:29:00:1F:BA:48:60:3B:7D:77:D3:9B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019423D7FF8AA0ED27ADF9380CB98302C68C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zMJETxLsWTAKKQAfukhgO31305s.roa
Signing time: Wed 01 Jan 2025 21:49:05 +0000
ROA not before: Wed 01 Jan 2025 21:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 5.181.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ff:8a:a0:ed:27:ad:f9:38:0c:b9:83:02:c6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 1 21:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccc2444f12ec59300a29001fba48603b7d77d39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:ac:a0:cb:dc:49:c7:b4:69:80:43:cb:de:
16:35:8f:11:51:89:50:d0:43:77:02:67:22:23:c4:
06:cb:8e:c9:8d:86:ae:9b:e5:a5:87:ad:85:87:c2:
ac:7c:1b:e9:18:45:35:b9:7d:dc:53:99:77:5d:3c:
64:34:5b:66:a6:84:35:34:ae:8b:6c:e0:44:39:23:
96:89:90:b8:c2:c5:5b:15:81:e5:ff:ab:d4:54:6a:
11:0e:8e:df:bf:af:aa:ef:1a:6e:a7:39:94:61:ca:
0a:9a:e7:d0:00:d9:49:67:14:d2:e1:db:e5:a5:8d:
79:39:50:80:8d:66:68:10:c2:d3:bb:cf:73:d3:a8:
ab:3a:17:11:68:dd:ac:fb:71:4b:35:cb:7c:6d:79:
21:75:0c:f6:fa:7d:c1:d1:8b:41:87:c8:8d:1c:0a:
dc:a9:5f:27:d4:0e:c6:8b:1a:fa:10:88:92:12:8e:
16:d9:31:9f:75:06:5a:1c:fb:c8:7d:ac:59:34:c0:
69:6b:4c:90:8f:61:15:ed:ee:07:db:ab:73:92:9d:
b1:48:a5:6a:f2:57:e0:f8:a1:eb:46:ce:b1:fd:c3:
1b:9e:d9:26:b1:27:56:53:45:ea:f8:e8:50:03:59:
58:1d:88:e5:fd:15:98:3c:fe:72:6c:bb:af:34:30:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C2:44:4F:12:EC:59:30:0A:29:00:1F:BA:48:60:3B:7D:77:D3:9B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zMJETxLsWTAKKQAfukhgO31305s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7d:e0:3a:1e:05:7b:9e:98:01:45:e6:0b:cf:22:a7:6a:a5:
45:50:e9:3d:25:22:75:45:d4:20:d3:3f:15:b5:cf:85:ff:c2:
ba:f2:1b:1b:a6:1b:ff:10:36:72:73:52:aa:fd:8f:9b:3b:d4:
2d:9c:09:98:ab:52:1c:6a:1b:63:b7:8a:fc:82:77:ce:2e:72:
da:a3:e6:9a:db:3a:06:fe:2d:c8:cb:57:52:a6:ee:85:35:e8:
70:76:d5:73:99:68:bf:5d:aa:56:64:6e:4c:23:e3:b8:98:70:
31:96:9c:e1:3b:8a:cf:57:14:f4:b9:8b:28:3a:d7:06:46:b1:
e5:f8:be:8c:08:09:a8:36:e2:b7:fd:38:f9:ac:1b:d8:8b:1a:
97:3b:53:65:f2:92:a1:cb:b5:41:08:d7:2f:17:85:4d:f6:71:
67:4a:24:7a:4e:37:76:f6:ad:0d:d4:e9:ef:c3:b4:fc:51:e8:
86:c0:44:e0:cc:81:59:0b:a5:09:99:dd:8f:96:e2:30:6a:b3:
10:80:d6:7b:e2:0f:d9:bf:e2:c3:23:35:c3:d5:9c:a7:64:c8:
52:24:24:d1:0a:13:b9:21:f2:f9:25:2d:7d:15:14:b2:0a:ea:
cc:32:3a:0e:e7:e7:2f:3f:54:67:89:b5:3f:61:21:95:b3:d2:
9b:0e:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:01 2025 by rpki-client