Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/ZDKDg4HFcSNfLpw6YVzqBi5flLk.roa
File: ZDKDg4HFcSNfLpw6YVzqBi5flLk.roa (raw, json)
Hash identifier: jSZeiBuoK8ADYzLZiSxc+qPAfYnt2JDSl0vT1WsgWF0=
Subject key identifier: 64:32:83:83:81:C5:71:23:5F:2E:9C:3A:61:5C:EA:06:2E:5F:94:B9
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 01941FFAB208524DE1619F945EF08CF8767E
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/ZDKDg4HFcSNfLpw6YVzqBi5flLk.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60798
IP address blocks: 5.181.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b2:08:52:4d:e1:61:9f:94:5e:f0:8c:f8:76:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6432838381c571235f2e9c3a615cea062e5f94b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:61:c0:1f:03:4d:1d:4d:e0:18:f3:7e:5d:
e3:3b:b8:91:2d:eb:69:22:df:03:91:d2:0a:e4:f9:
57:19:44:8c:d8:50:f5:4d:43:76:ce:30:66:60:9a:
a2:5d:12:ba:a7:87:9c:cc:8a:50:9b:f5:49:67:eb:
b1:72:77:81:d3:04:43:65:f9:e3:f0:16:2e:00:cb:
8a:cb:74:b6:1a:90:6a:1f:97:d7:8d:14:cf:c4:b1:
c6:82:87:4e:9b:14:3c:2f:ec:fe:38:2b:a5:10:3f:
c6:14:3b:86:85:91:e6:fd:ae:2a:b3:ef:aa:bf:f3:
19:92:2a:3e:07:a7:39:5d:df:0c:8a:d9:11:a3:60:
00:47:73:3e:77:43:72:c9:c2:df:c1:97:8f:2a:3d:
73:c7:34:02:19:67:25:f6:24:73:35:4b:2c:53:c5:
e9:7c:e3:37:2c:23:80:6b:67:03:1c:91:a2:d6:54:
2a:0c:f3:63:8d:ed:75:71:14:b0:d4:14:9e:44:bd:
d0:d5:4d:8d:93:d3:07:e4:a2:d5:12:c4:bb:88:a0:
14:0a:fd:20:e7:b3:e5:e5:9d:b9:c0:4a:ba:1e:70:
bf:cf:a4:4c:c0:8d:9c:78:cc:b3:6d:93:cf:45:10:
fc:39:e7:a9:ad:2c:01:ec:7c:81:8b:d9:3c:a8:9e:
ef:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:32:83:83:81:C5:71:23:5F:2E:9C:3A:61:5C:EA:06:2E:5F:94:B9
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/ZDKDg4HFcSNfLpw6YVzqBi5flLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.31.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:dc:8c:44:c8:46:03:f3:b5:0f:07:82:b6:3a:37:ae:d5:7b:
9c:17:c0:b3:47:c5:59:63:c0:8c:45:6c:57:5a:54:33:76:17:
d1:ac:9d:94:65:c2:bc:ee:01:d7:d4:2c:a9:b2:3a:b9:bb:6f:
7c:2f:18:b6:b7:a9:11:9a:c6:70:b1:8d:70:be:26:06:21:c2:
d8:5f:0c:1f:a8:2c:d8:62:81:2f:67:ad:0d:1a:ac:de:73:07:
42:9b:68:a8:05:66:d0:cc:25:c5:c6:cd:65:ed:2f:13:b5:e7:
9f:8a:54:99:4e:1b:c5:0e:cb:e3:6e:51:19:0d:5b:5e:8a:d8:
49:e9:47:0b:79:b5:25:87:67:0a:3a:55:82:0c:94:fd:8a:42:
a0:b8:f7:3f:53:bc:3d:14:e5:f5:c4:e3:1c:bc:d1:a8:9e:fb:
4d:e3:38:48:6d:ba:cd:c7:08:0c:8b:a6:fa:df:72:f9:e3:23:
47:7e:ca:20:39:64:4d:70:98:d8:e4:12:1c:fa:39:21:e7:ac:
de:39:56:32:c3:5c:b8:33:e4:1e:2d:b6:af:ab:08:70:1d:d5:
aa:aa:e4:a7:c6:46:37:f9:e8:ed:92:7c:55:96:6b:31:a6:7d:
b1:6a:2e:1a:b0:74:34:78:65:57:62:1c:15:bf:51:b2:78:0b:
1b:78:7b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:05 2025 by rpki-client