Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_dcJgLvUvSMsukmLo-EaOfxcN5U.roa
File: _dcJgLvUvSMsukmLo-EaOfxcN5U.roa (raw, json)
Hash identifier: uI3m28aVm/tyt4XjnhomVIxLqAW8QPK2Lb2lUn22Vp4=
Subject key identifier: FD:D7:09:80:BB:D4:BD:23:2C:BA:49:8B:A3:E1:1A:39:FC:5C:37:95
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB9485CEBAEC52DAE0F262E00A215B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_dcJgLvUvSMsukmLo-EaOfxcN5U.roa
Signing time: Wed 01 Jan 2025 17:48:20 +0000
ROA not before: Wed 01 Jan 2025 17:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9087
IP address blocks: 5.182.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:94:85:ce:ba:ec:52:da:e0:f2:62:e0:0a:21:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdd70980bbd4bd232cba498ba3e11a39fc5c3795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:37:71:27:6e:aa:f0:85:4b:eb:45:cc:aa:
6e:40:95:49:a6:71:91:aa:21:32:e4:38:69:0c:54:
dc:e4:0d:f6:5e:ff:6b:57:bb:01:c4:51:2a:7f:e1:
db:a1:70:ff:ef:e0:83:b0:c6:63:54:0d:05:43:2e:
2e:04:ac:f9:e3:ce:53:cf:6e:49:94:80:97:00:37:
30:ab:41:a1:f9:0e:5a:03:ba:9b:44:b6:f1:99:7e:
f9:69:93:7c:78:cc:6d:7f:eb:f0:0d:e1:50:48:a5:
93:cb:39:d5:94:3c:f1:aa:e2:21:d5:15:68:26:0a:
b0:3d:b7:d2:61:e6:a5:6a:a5:c8:c1:42:a1:ef:c1:
77:67:f3:2f:a9:52:10:12:81:3f:ac:f2:55:7e:13:
c7:71:4c:e5:99:f1:ce:98:00:0f:4c:ef:23:82:b2:
e8:4d:ad:2a:68:fd:4f:02:10:d4:6f:af:a2:7b:db:
97:ce:ca:64:ae:03:75:2c:14:fb:d4:8c:74:80:63:
12:83:78:d6:ad:9e:ac:85:9a:2e:9c:27:92:f4:9c:
6d:16:1a:c4:9d:2c:2f:6e:5e:d3:23:bf:7b:1d:2f:
29:f9:ee:b8:a4:7d:c9:d4:cb:cd:81:22:ea:8c:36:
45:20:8e:3a:5b:19:15:00:ec:a5:f9:b5:a0:d7:d8:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D7:09:80:BB:D4:BD:23:2C:BA:49:8B:A3:E1:1A:39:FC:5C:37:95
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_dcJgLvUvSMsukmLo-EaOfxcN5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:dd:7f:62:b5:da:4f:60:42:44:9d:8d:ee:12:42:64:b6:ba:
1a:dd:23:cb:d1:82:af:bd:8f:1d:5f:8f:83:08:ba:59:6c:fe:
52:64:5e:29:8e:b1:93:57:dd:36:36:09:29:37:7a:c8:41:f5:
da:37:0c:8b:8e:06:fa:b9:b9:19:81:a4:2f:3c:cb:8d:9d:c2:
3b:2c:eb:56:57:45:9c:6a:3b:ab:17:08:3f:15:48:41:b3:c6:
38:3f:0d:e6:57:7b:23:c6:2e:47:e5:46:55:b6:f1:15:c5:a6:
3d:e1:63:4d:55:d5:ea:b7:55:49:0a:bc:29:30:6b:ce:72:6c:
02:fd:6d:fa:c8:5a:69:b9:22:70:b4:d2:46:97:b8:f5:88:98:
ba:cc:dd:3d:3c:35:5b:17:51:a4:12:b7:28:c5:4d:8c:2f:76:
33:b7:e8:ef:8a:50:9c:2e:5b:c5:6c:f5:61:08:ce:67:ed:23:
32:b5:41:d0:ca:8d:01:85:16:c5:72:dc:50:dd:80:c2:84:c3:
f9:ae:10:c8:51:b0:cc:14:d3:1e:0f:4f:fa:f1:58:77:5f:a3:
37:46:a1:4d:ee:46:62:dc:d9:4e:a8:5c:49:8e:29:4a:32:35:
fe:a4:fe:3d:26:40:7d:0a:e3:d3:62:1b:c4:54:2e:ab:f6:96:
de:d0:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:29 2025 by rpki-client