Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa
File: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (raw, json)
Hash identifier: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=
Subject key identifier: E1:1B:3A:54:E5:1B:EC:9C:F5:58:46:D4:23:89:B1:E1:EB:9F:FA:3A
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 0194206833DFB7EA03767A205F1DD48F8636
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42833
IP address blocks: 5.104.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:33:df:b7:ea:03:76:7a:20:5f:1d:d4:8f:86:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e11b3a54e51bec9cf55846d42389b1e1eb9ffa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:80:4e:10:30:d0:2c:6c:6f:7f:4d:a2:74:
53:49:4e:48:19:23:21:44:52:75:6b:24:db:27:ec:
dc:f1:20:c1:ba:c0:fa:82:bd:36:e1:17:dc:ff:09:
fc:50:cd:0c:5f:81:64:f1:c7:c7:b2:3f:5d:50:46:
39:c5:7b:e8:50:e3:08:9c:8e:d6:c5:de:01:31:fd:
c0:f2:99:b2:fe:9c:e8:f9:2f:77:db:5b:31:fc:3f:
b2:4f:ff:8c:36:86:7b:89:1a:4f:d4:c9:d7:e6:ff:
64:0b:d9:ca:0c:79:5f:67:76:fa:1f:32:76:a7:80:
a6:d6:da:43:4d:a2:ad:13:ba:56:78:3a:2b:4b:db:
31:c6:0e:d3:48:26:ff:bf:74:f8:5c:94:bb:f5:34:
6a:63:be:a0:12:fb:7f:f4:dc:21:78:1d:b1:94:48:
8d:65:99:d2:ad:7a:73:c5:5c:74:8a:ad:c1:db:9c:
31:7a:a0:c1:55:be:8f:72:0f:ef:0d:1b:40:0f:6c:
b3:64:1f:cf:5e:7b:0d:a1:85:a7:8c:12:57:3e:c8:
5d:26:59:95:57:76:07:85:bc:87:96:b8:8c:7c:10:
3b:c2:3d:6b:10:bb:9e:1e:5d:0f:ef:28:94:ac:e3:
2e:ac:f3:50:1e:2c:89:4a:47:01:8a:d6:12:32:93:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1B:3A:54:E5:1B:EC:9C:F5:58:46:D4:23:89:B1:E1:EB:9F:FA:3A
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.31.0/24
Signature Algorithm: sha256WithRSAEncryption
20:65:a3:9b:8e:4b:df:8e:b5:ea:2a:d8:04:5b:e6:dc:ea:89:
b4:60:c5:1f:32:bb:50:ee:d3:f1:a4:fd:46:d9:6d:51:f6:b6:
1c:db:c7:af:8b:8b:04:ee:d6:1a:cd:94:66:91:fe:73:57:8f:
12:19:56:1d:7d:60:bd:ce:b7:8d:35:70:80:c1:6f:2e:c2:a3:
3b:ed:f0:8c:74:75:8b:ed:8e:bd:e4:2c:85:3d:1b:9e:65:fc:
a4:34:16:ef:d8:1a:0f:7f:39:62:07:c6:10:53:b9:08:34:68:
12:26:f8:ca:19:90:cf:11:75:88:6a:76:b1:29:c4:48:64:bb:
2b:5c:7c:52:20:07:94:bd:02:0c:dc:bf:05:0b:b8:0e:2a:f9:
af:40:9c:4b:9f:9e:e0:4d:81:50:9a:01:f7:06:56:35:69:98:
91:cf:cc:cd:86:e4:53:36:6a:fc:33:70:3f:bc:bb:8a:8a:7c:
a2:27:c4:51:02:6a:23:07:2d:8e:3e:b9:5d:48:47:80:76:5d:
6b:ff:58:87:85:ab:95:29:49:70:16:0c:fc:4d:ef:13:45:1b:
ce:83:3f:b4:ef:28:10:6d:df:c9:d8:a0:44:2b:b5:e4:2d:5d:
be:f1:6c:39:b9:6c:27:8e:b6:88:26:d7:c4:8f:18:33:9d:3e:
5e:32:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:15:45 2025 by rpki-client