Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hTj7YlMCME0eZAwUAMP_QJqIP9E.roa
File: hTj7YlMCME0eZAwUAMP_QJqIP9E.roa (raw, json)
Hash identifier: B+Eh3mFM5CNd9m0nbSMIi/ip5Qi3CCuYLejRN5UYHCw=
Subject key identifier: 85:38:FB:62:53:02:30:4D:1E:64:0C:14:00:C3:FF:40:9A:88:3F:D1
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 08F992C7
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hTj7YlMCME0eZAwUAMP_QJqIP9E.roa
Signing time: Sun 03 Jul 2022 12:21:25 +0000
ROA not before: Sun 03 Jul 2022 12:21:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212512
IP address blocks: 5.180.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150573767 (0x8f992c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 3 12:21:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8538fb625302304d1e640c1400c3ff409a883fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:f9:f7:51:3e:2c:ac:b7:a5:28:11:c4:40:
62:4e:94:97:eb:05:c8:d7:f9:2e:ca:35:4f:3b:08:
81:01:54:5d:74:d0:b0:91:2a:0b:6c:5c:cd:ce:06:
36:39:15:69:fa:42:9b:5d:4b:b4:6f:51:44:b2:5b:
07:67:4b:d5:66:6b:fe:81:3d:bf:06:b6:56:e6:77:
5e:2d:a6:31:1c:e0:1d:02:aa:7f:56:7c:e2:cd:f4:
48:41:23:18:29:12:90:7d:09:56:f1:d1:61:59:61:
30:a5:ca:fd:6e:df:6a:f8:64:78:ff:b1:6e:19:31:
c9:c8:8c:67:dc:fc:b0:5e:4a:86:55:37:d7:01:5f:
18:0d:39:68:08:b8:7a:99:de:47:8a:0f:24:62:85:
db:70:3e:35:f2:2a:aa:b0:12:c1:6b:34:2d:ae:8c:
48:88:df:35:9d:27:10:28:13:99:b5:7d:b5:2d:c2:
4e:65:ed:01:28:08:f6:cf:cb:ff:2c:07:07:39:48:
f6:60:87:f7:69:ae:9b:f6:89:21:12:d0:c2:f2:50:
d0:a1:ca:3e:fe:66:21:4c:70:3b:9c:ab:0b:70:92:
29:b6:49:22:6a:4a:dd:58:a6:73:b7:c4:1e:8e:5d:
a1:e4:dc:d9:6e:14:bb:b6:0c:ee:0e:eb:11:11:83:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:38:FB:62:53:02:30:4D:1E:64:0C:14:00:C3:FF:40:9A:88:3F:D1
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hTj7YlMCME0eZAwUAMP_QJqIP9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:60:06:52:20:f6:3f:50:a4:46:d6:68:f5:d2:a9:ee:46:26:
64:dc:ae:0a:97:be:67:82:ad:41:6d:3e:2c:a1:e6:fe:b1:d0:
e2:3b:d4:1d:f0:14:e7:e1:b0:4e:78:7f:c4:35:67:fe:d2:a2:
4c:ab:16:1d:df:8a:af:05:02:1b:e8:a6:48:50:1d:e1:66:2f:
5c:ed:7b:36:cf:3f:c1:4c:88:69:4a:66:a9:60:c2:1e:94:05:
0b:97:7e:d3:8f:68:c7:2a:a2:10:1f:86:73:dc:22:d3:62:84:
c0:d3:25:5d:f2:20:58:f8:85:92:1b:cf:6c:83:33:b7:09:2a:
d2:cd:90:4e:1a:e8:2e:8e:92:b6:67:d5:29:a1:8c:14:93:17:
95:a5:05:68:45:a9:4c:f8:fa:56:96:3a:47:9d:37:1b:0a:6d:
2c:f1:8d:54:0b:1a:85:e9:d2:fd:cb:d1:03:b1:4f:f0:bf:27:
f7:67:05:6f:8f:09:55:40:1a:6e:43:65:f5:96:81:ba:20:01:
21:66:68:60:16:0e:7c:54:86:5f:96:db:4a:b0:25:fb:c0:99:
8a:d1:cf:a3:a5:37:c0:6f:06:8b:b3:ac:e9:6e:14:00:07:0f:
fe:8f:22:3a:7e:92:1e:5e:07:38:ad:e7:9f:14:47:f5:90:75:
4f:f0:f7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:52 2025 by rpki-client