Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/PvZTY_rwD5Zhmxm2YzlAFxw679Y.roa
File: PvZTY_rwD5Zhmxm2YzlAFxw679Y.roa (raw, json)
Hash identifier: Ra7d0yBMX5puoZ0IAWFt7XFG2OZcIYfvYpNmX1ADV7Y=
Subject key identifier: 3E:F6:53:63:FA:F0:0F:96:61:9B:19:B6:63:39:40:17:1C:3A:EF:D6
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 018CC9BB92D475B6D90254EED5B33BEE8FA3
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/PvZTY_rwD5Zhmxm2YzlAFxw679Y.roa
Signing time: Tue 02 Jan 2024 10:32:42 +0000
ROA not before: Tue 02 Jan 2024 10:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34643
IP address blocks: 5.253.183.0/24 maxlen: 24
5.253.181.0/24 maxlen: 24
5.253.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:92:d4:75:b6:d9:02:54:ee:d5:b3:3b:ee:8f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jan 2 10:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ef65363faf00f96619b19b6633940171c3aefd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:69:2a:3c:cb:21:04:db:17:af:44:95:5b:c2:
ae:20:db:43:01:0c:d3:5e:82:b5:d4:58:06:4b:99:
5d:23:7a:3c:0c:f2:0d:5f:21:09:c7:92:f8:c8:df:
68:06:8e:50:da:07:4f:a2:30:8c:06:1e:f6:5b:9f:
20:76:a3:ca:28:10:a5:3b:6c:df:7a:58:72:b7:c2:
c1:c8:ea:5f:3e:a0:4b:58:89:6f:05:06:a4:5b:1f:
30:ec:99:5e:2f:3b:2a:fb:d3:1b:84:13:9f:5c:04:
14:5e:62:5e:27:b0:bd:ad:2b:64:db:75:75:b4:90:
cb:55:ca:5d:c9:54:02:50:cd:55:db:1d:06:63:f0:
63:73:26:37:a2:68:a9:12:fa:a0:91:2b:fe:bf:4a:
ef:3b:01:46:f9:f4:df:58:1c:ef:17:76:e8:20:f8:
89:f2:23:0a:96:2a:4f:e3:9c:82:81:58:e6:dd:b8:
57:6c:22:fe:b1:1d:f2:4e:98:4b:d2:91:d3:53:e8:
fe:06:7c:0c:96:80:8d:b1:c1:40:7f:3e:28:f0:df:
67:83:52:0f:fd:74:ad:ce:57:58:45:79:a8:42:74:
42:e4:97:82:e1:ee:2c:49:fb:4a:f9:60:10:2c:06:
ec:65:67:20:df:5a:ee:f9:f0:34:b5:1d:6e:9f:ae:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F6:53:63:FA:F0:0F:96:61:9B:19:B6:63:39:40:17:1C:3A:EF:D6
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/PvZTY_rwD5Zhmxm2YzlAFxw679Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.181.0-5.253.183.255
Signature Algorithm: sha256WithRSAEncryption
0f:bf:ea:17:ff:66:9c:6d:bc:db:33:f2:c4:60:87:b9:00:84:
fc:02:0d:6a:88:0b:40:f8:0d:d6:59:34:ef:84:9a:6b:3c:0e:
fc:ab:e0:7d:1d:f3:fe:da:14:15:47:f9:f4:47:d8:c0:8f:53:
3b:42:4b:05:e0:44:ba:f3:bd:d9:01:9c:d3:0f:25:da:19:de:
1a:ca:1d:21:20:84:74:71:25:e9:95:4b:92:69:de:aa:c5:56:
aa:a0:1b:6c:88:d5:75:e0:0c:60:ae:52:f9:83:ff:d5:1d:e3:
51:8b:6c:7d:b3:97:df:2d:e9:5b:71:78:a5:e5:79:46:53:20:
ce:55:e8:f9:8a:27:b3:fa:9c:0e:74:30:0f:41:b8:1a:8c:34:
97:53:c2:12:1b:93:a0:6d:a1:6a:f0:41:ce:5e:d4:29:3c:0a:
32:fb:f9:3d:15:cc:18:e9:06:68:22:1b:dc:4c:33:c3:12:0c:
0d:4a:56:55:c4:64:7f:51:05:4c:4a:99:ab:74:83:20:b9:40:
51:c5:be:ad:30:8b:4e:3e:b1:f8:92:f3:b0:07:41:9d:73:2b:
f1:82:f8:33:82:4c:ec:2a:8c:e0:b6:da:d7:01:cb:38:62:16:
a7:00:fd:b2:b3:c4:63:31:11:71:bc:4c:4f:69:aa:77:39:d7:
dd:40:07:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:08:55 2025 by rpki-client