Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/CLLXw20tFXDHP2NnWdXuz6OtVIE.roa
File: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (raw, json)
Hash identifier: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=
Subject key identifier: 08:B2:D7:C3:6D:2D:15:70:C7:3F:63:67:59:D5:EE:CF:A3:AD:54:81
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019427B664AA073F6D7FC7B70F5B0CA5FA38
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/CLLXw20tFXDHP2NnWdXuz6OtVIE.roa
Signing time: Thu 02 Jan 2025 15:50:52 +0000
ROA not before: Thu 02 Jan 2025 15:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197336
IP address blocks: 5.134.64.0/23 maxlen: 23
46.31.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:64:aa:07:3f:6d:7f:c7:b7:0f:5b:0c:a5:fa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jan 2 15:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b2d7c36d2d1570c73f636759d5eecfa3ad5481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:92:d4:9c:da:fd:59:eb:88:a8:05:dd:a2:
63:b4:7d:cb:d3:06:02:ea:8c:b7:e2:9b:86:61:73:
69:c2:a8:48:80:2a:ec:f9:6d:94:ae:5e:66:6b:6d:
a5:0a:b6:f3:09:8f:4f:2e:5e:d0:7e:51:25:5b:c6:
76:00:e5:f5:11:3c:08:b2:b6:e8:20:f8:a6:27:dd:
fb:04:db:97:1f:13:b7:eb:ab:98:12:5c:3c:b4:f0:
ee:06:a8:9c:a3:a4:04:29:da:2a:fe:b6:ba:75:05:
83:7a:1c:9b:d1:fc:f9:e9:3b:88:3e:be:cb:19:af:
63:cb:1b:81:c2:4e:33:64:13:c2:36:c3:ae:b2:ec:
90:aa:b7:43:58:a8:0f:43:d1:66:7b:7b:58:d5:ec:
7d:bf:ad:1a:84:90:f5:ef:65:aa:14:91:f8:f3:0a:
37:42:1e:d1:ba:40:ca:34:6a:96:47:44:ab:95:89:
b0:a4:e8:84:4a:99:0b:06:88:f3:cd:ce:bf:53:4b:
57:47:de:b8:ba:60:3f:08:c5:6d:d1:6e:b8:42:ab:
8e:9b:c4:a7:c0:e5:3b:05:1d:78:75:d8:38:76:52:
7e:33:3a:4e:09:2b:b8:4e:03:20:c2:49:4a:5b:0e:
f0:cf:7c:d9:68:16:d8:13:85:7b:fb:40:46:af:b6:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:D7:C3:6D:2D:15:70:C7:3F:63:67:59:D5:EE:CF:A3:AD:54:81
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/CLLXw20tFXDHP2NnWdXuz6OtVIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.64.0/23
46.31.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:fb:ca:0f:0d:2e:34:3b:fe:21:36:56:3c:ac:64:67:62:a6:
f3:78:73:08:59:7f:80:a6:29:6d:bf:de:77:f7:df:bf:19:0c:
03:e5:de:a3:6d:f6:fe:80:b1:84:0e:1a:89:2c:84:4e:38:51:
a8:42:9f:ca:9a:b1:6a:c6:8d:b0:8c:de:41:04:cf:e2:d7:85:
85:03:d3:8d:b4:0b:42:a3:e3:46:58:ea:f1:ae:01:3d:f3:95:
d1:e3:64:a4:b7:cf:90:54:f6:35:38:6d:83:9e:d8:15:e0:78:
78:5b:e2:7d:55:2c:ef:17:c4:42:0e:39:f6:98:10:40:3c:cb:
8c:41:88:20:f9:84:03:b5:7c:dc:b5:af:0e:a2:50:b9:70:14:
d9:9a:4c:58:96:f1:5d:68:69:8d:d8:cd:1d:75:dc:99:d5:83:
95:17:1b:18:78:24:63:43:df:4c:16:dc:b2:45:ca:5f:96:6a:
e9:4b:64:9d:b5:4c:33:33:51:c9:05:4b:fe:be:70:af:1f:fb:
f9:15:fb:1e:83:90:39:bc:89:f5:49:38:bc:b4:78:be:ae:3c:
68:56:d5:5d:c3:34:8b:1f:00:b4:10:49:c3:80:0a:fe:38:33:
23:d6:9f:0a:28:19:b9:38:83:f3:da:36:7a:50:0d:1e:b2:bd:
c0:c3:2d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:31 2025 by rpki-client