Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/_Qyz5XaWXRevLyaT1pL91pFjSrk.roa
File: _Qyz5XaWXRevLyaT1pL91pFjSrk.roa (raw, json)
Hash identifier: IuxLpf6Ppj3nOFTkycNhKt6dOmuPJp6OnLfhsMsV9sI=
Subject key identifier: FD:0C:B3:E5:76:96:5D:17:AF:2F:26:93:D6:92:FD:D6:91:63:4A:B9
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 018E3FAB276DC714984C9AE8AEF28E3235BD
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/_Qyz5XaWXRevLyaT1pL91pFjSrk.roa
Signing time: Fri 15 Mar 2024 01:12:45 +0000
ROA not before: Fri 15 Mar 2024 01:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34643
IP address blocks: 5.253.181.0/24 maxlen: 24
5.253.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3f:ab:27:6d:c7:14:98:4c:9a:e8:ae:f2:8e:32:35:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Mar 15 01:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd0cb3e576965d17af2f2693d692fdd691634ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:08:3c:f1:0a:f8:35:aa:a5:87:8d:19:1e:
09:4b:7e:35:68:bc:f0:d8:ad:65:4b:f8:c9:e7:0b:
c6:a1:42:cb:de:59:ee:f3:85:01:18:a7:3d:ca:28:
fa:76:7e:f5:a8:e1:6d:e2:47:a1:47:9a:8b:f4:fe:
f9:90:46:fa:de:c5:87:31:cc:6e:30:93:1e:4f:1f:
45:53:35:c6:cb:9c:a4:33:c0:7d:cd:f0:30:2b:f3:
77:f9:b6:41:44:92:72:82:13:16:36:82:6a:6e:34:
75:bf:ac:be:76:eb:c5:be:16:b0:5d:59:c2:19:ec:
8c:ad:65:56:ef:f0:95:43:c7:5a:ea:e7:4c:75:dc:
f7:31:cc:95:f6:91:aa:0f:40:74:de:7c:f7:85:fa:
f2:f7:07:3c:c3:e3:3c:60:6a:43:8b:d9:ad:b4:67:
bb:06:8d:9f:eb:c8:c3:b5:14:7f:55:b8:4e:72:52:
33:8e:5d:65:cd:61:61:bc:f7:2c:1b:cc:d3:65:02:
73:d2:96:54:4a:5c:a1:aa:ba:7e:b6:80:97:96:98:
20:0a:28:89:0c:4c:b9:b0:14:b1:67:c0:a1:bd:54:
fb:f7:71:e6:e1:7b:43:68:9a:a9:80:fb:a0:09:35:
e1:71:65:84:3e:92:55:8a:2e:76:3e:8e:77:94:01:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0C:B3:E5:76:96:5D:17:AF:2F:26:93:D6:92:FD:D6:91:63:4A:B9
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/_Qyz5XaWXRevLyaT1pL91pFjSrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.181.0-5.253.182.255
Signature Algorithm: sha256WithRSAEncryption
1b:27:48:3a:b9:da:42:c1:85:0c:1b:2f:50:38:e2:62:e9:8e:
11:c8:16:90:d0:4d:1b:46:58:bd:2a:92:d2:5f:a6:15:c7:c0:
ee:fa:b0:9b:ab:bc:61:ec:ba:d7:08:82:23:8e:74:ba:1f:d7:
ce:66:50:09:60:f7:d6:e1:7e:55:7f:3f:63:72:51:44:43:dc:
00:28:23:cb:a5:48:d6:1d:a0:80:57:e6:39:01:5f:3f:5b:13:
18:2b:39:09:81:40:1d:f4:50:52:58:14:7b:39:ab:1b:97:57:
bf:6f:2b:2c:68:16:42:f6:b8:75:cd:fe:7e:25:6e:ce:10:37:
e7:f4:6c:45:c1:15:70:30:34:d5:dc:67:01:1a:df:af:c6:59:
10:37:62:ca:0d:7b:59:36:2a:4b:2c:d2:40:0c:1a:eb:e7:18:
bd:02:cf:5b:73:99:ed:cf:4b:df:80:6c:c7:d0:db:e6:58:1c:
f1:6f:fe:2a:72:43:b7:99:eb:98:2e:67:7f:d4:a5:70:87:11:
f2:90:60:79:4c:c5:f7:26:ee:53:05:0e:fa:65:3d:ef:48:85:
49:da:9b:ad:97:25:77:68:11:31:33:d6:c9:3a:65:17:4c:eb:
3f:10:c3:b2:18:d3:ed:b7:89:b4:01:d3:e3:98:ec:56:85:25:
3f:f6:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:06:00 2025 by rpki-client