Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/_JHDbAZ2ATmmU2h8LNTts0pQdRw.roa
File: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (raw, json)
Hash identifier: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=
Subject key identifier: FC:91:C3:6C:06:76:01:39:A6:53:68:7C:2C:D4:ED:B3:4A:50:75:1C
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 0194258FB54FB540AD94FDEF59E99FED5548
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/_JHDbAZ2ATmmU2h8LNTts0pQdRw.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16322
IP address blocks: 5.63.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b5:4f:b5:40:ad:94:fd:ef:59:e9:9f:ed:55:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc91c36c06760139a653687c2cd4edb34a50751c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:2f:12:9f:98:8a:b4:1a:a1:fc:1a:fe:7c:
ee:6d:9c:ad:98:c4:42:d1:08:00:ad:e5:a9:64:07:
ca:57:e3:f5:69:84:f9:3e:8a:f3:d4:a2:c6:97:ee:
e4:05:e7:41:4c:a5:d6:30:a1:53:c2:75:97:83:dc:
d7:de:60:eb:5e:bc:e9:b1:18:d0:78:bc:bc:82:8b:
96:a9:6f:b5:36:6a:73:a9:47:af:a3:ce:41:b2:c8:
3a:7e:e4:0b:18:6e:a3:f5:69:8b:86:47:f4:28:85:
50:c8:27:82:97:a4:9d:3a:56:bc:e3:13:05:a8:a5:
7b:ad:26:27:0c:6b:e6:64:f5:5e:73:f3:10:7d:65:
c7:1a:2f:3a:69:25:4a:d8:68:41:12:19:e2:80:bf:
df:68:09:4a:db:d7:41:01:e1:86:f7:f6:58:66:c9:
8e:42:27:92:2a:99:fe:60:17:2b:e7:7b:bb:8a:35:
98:ad:ab:a6:ba:d0:d4:7a:9b:77:d1:dd:1b:25:d5:
51:3c:4b:72:37:06:e4:46:d4:58:1a:af:cb:47:02:
cf:bc:05:5e:f7:c9:41:75:46:50:dc:66:35:68:27:
d0:a8:1c:17:71:9f:2e:cf:67:7e:e8:31:86:cb:8f:
92:b8:63:fd:cd:3d:cc:e1:eb:32:5a:60:a2:36:6c:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:C3:6C:06:76:01:39:A6:53:68:7C:2C:D4:ED:B3:4A:50:75:1C
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/_JHDbAZ2ATmmU2h8LNTts0pQdRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c7:f4:87:c2:a8:e9:3f:1f:74:66:ad:14:6b:4b:80:0d:f7:
14:41:91:1f:71:74:39:f5:03:90:a3:12:9f:79:2f:71:b1:66:
17:d7:8a:11:39:49:c1:af:f4:31:c8:df:4a:07:9e:70:96:8e:
04:43:e7:f7:a4:1f:e9:75:8f:c7:ff:40:7f:04:99:c4:84:ac:
6e:a0:d6:f2:a9:ed:14:0b:73:d1:18:1d:9a:ea:6b:7a:db:b1:
d6:58:26:30:66:01:71:ed:2f:1d:e3:91:c0:7e:d1:51:11:77:
6c:34:e1:21:dd:d4:b1:48:40:59:e2:31:27:27:71:bb:d0:2e:
bf:b6:9f:17:e0:1d:22:19:c6:ee:e4:ac:eb:95:e6:05:d8:d6:
1f:cf:92:60:ed:35:4b:ac:13:2b:07:87:74:b6:9c:38:ad:68:
63:0e:8b:66:39:e4:95:5e:92:f8:96:d1:cd:c9:9f:11:78:82:
65:ff:55:41:c7:46:bc:14:00:65:a8:f1:45:2f:dc:7b:a5:ac:
99:85:5f:c0:2d:6d:ca:ac:f0:e5:9e:40:9e:34:b4:30:87:ea:
5f:71:b3:f4:f6:94:7c:cb:1f:f0:ef:74:da:cf:07:fa:10:f7:
84:47:30:7d:6b:04:d2:d1:d8:b8:88:73:70:77:bc:a8:eb:96:
a8:b7:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:53:40 2025 by rpki-client