Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/S0sWR9PCA1Sm1bR0ahmPvbsxhs8.roa
File: S0sWR9PCA1Sm1bR0ahmPvbsxhs8.roa (raw, json)
Hash identifier: 7pkkGPvCtMw+XrvG8QisT36ngY2QGmdPLyxbNhvNpeU=
Subject key identifier: 4B:4B:16:47:D3:C2:03:54:A6:D5:B4:74:6A:19:8F:BD:BB:31:86:CF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195FEFCBA834510652B350538F57DDF492A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/S0sWR9PCA1Sm1bR0ahmPvbsxhs8.roa
Signing time: Fri 04 Apr 2025 04:08:50 +0000
ROA not before: Fri 04 Apr 2025 04:08:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213641
IP address blocks: 5.231.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fe:fc:ba:83:45:10:65:2b:35:05:38:f5:7d:df:49:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 4 04:08:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b4b1647d3c20354a6d5b4746a198fbdbb3186cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:04:de:4f:64:56:bb:28:22:d3:7e:c1:e6:
0e:f7:0b:82:a2:a6:f8:01:77:74:b1:a3:bd:04:05:
a2:48:d2:da:97:86:3a:d4:80:2f:2f:b9:8f:30:0d:
06:af:a0:03:91:02:1f:69:53:b5:fc:f2:fa:11:37:
bb:cd:2d:cf:df:8a:60:27:e0:a4:7e:ff:cd:5c:19:
9f:d8:c1:5b:d0:80:72:c5:bc:f3:0a:68:a5:b8:96:
17:58:28:32:53:5a:f5:53:b2:0f:7a:52:2c:e4:73:
bc:8e:f4:ed:0e:9f:8b:a7:cf:ee:99:62:86:3a:58:
9e:c8:e4:1f:83:51:bb:50:0e:30:f4:00:59:a9:5f:
d1:96:14:ad:c4:d2:53:ca:b3:b7:5f:18:f8:a5:15:
e1:d8:15:e3:4d:25:b8:7d:9e:c8:02:ac:fa:77:3c:
20:7d:ef:e5:bd:fa:5c:d4:ae:3a:8c:00:c7:ad:67:
52:7a:b4:ca:a4:34:57:64:d7:7a:33:2d:3f:9f:ae:
1d:0f:57:c1:66:6a:b0:6d:b0:09:db:0d:1b:06:7b:
ae:05:9d:2d:18:32:fb:28:4d:68:32:9b:0a:5d:81:
0d:f3:d5:57:55:2c:96:19:62:d3:6a:ef:54:bf:9a:
df:38:3d:8d:6b:c1:13:0d:c2:75:5d:e2:fb:32:56:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4B:16:47:D3:C2:03:54:A6:D5:B4:74:6A:19:8F:BD:BB:31:86:CF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/S0sWR9PCA1Sm1bR0ahmPvbsxhs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.252.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fa:b9:25:8b:49:e8:1c:00:d0:19:d7:a4:dc:f4:77:e5:ee:
59:66:a6:3a:e7:20:d1:17:ce:5a:b6:d6:e9:4a:18:c3:96:de:
ee:5e:d4:4f:0a:1d:31:d6:0c:07:b9:bd:05:a3:80:aa:c8:45:
ca:36:9e:ad:17:01:f1:58:5e:e5:ba:c8:f6:67:47:8d:90:d8:
ff:c2:38:ef:8f:23:b9:f3:15:a4:28:98:ca:54:56:b8:a1:8d:
c1:4d:53:e8:d1:1d:d0:e6:e1:fb:cd:d2:54:27:b4:50:d2:41:
3c:4f:84:06:88:1e:d6:86:24:e2:de:00:68:67:2b:92:b0:3d:
cb:04:ae:69:93:51:ff:ee:55:26:b8:73:96:44:f6:35:b3:35:
7f:4c:6b:02:f0:16:1f:69:65:aa:88:69:9a:c2:1e:6e:7e:42:
84:8d:3d:5a:c2:6e:ef:17:e3:f9:f7:9c:ac:1f:1b:b7:86:94:
8c:96:76:55:cd:c5:fc:31:43:5a:21:dd:5c:29:93:b1:dd:e9:
23:20:0b:ec:7c:b9:af:8a:25:11:c9:17:be:51:3f:7c:d4:75:
b9:d9:e5:b0:32:60:2d:55:42:bd:0c:f2:67:41:8a:92:fb:9c:
54:3c:cd:d8:06:d0:f5:d9:d4:b4:6c:9b:4d:df:49:7d:08:7e:
1f:56:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net