Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5l2pnQue8lzFzA_xYcjHaLaYKD0.roa
File: 5l2pnQue8lzFzA_xYcjHaLaYKD0.roa (raw, json)
Hash identifier: p3bqpbqme1SLyzCF4Xjo/cb/+og2IuFdOB1FPk39PfU=
Subject key identifier: E6:5D:A9:9D:0B:9E:F2:5C:C5:CC:0F:F1:61:C8:C7:68:B6:98:28:3D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746BCDFDE0D358FC599356E7CD56D12
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5l2pnQue8lzFzA_xYcjHaLaYKD0.roa
Signing time: Thu 02 Jan 2025 13:48:54 +0000
ROA not before: Thu 02 Jan 2025 13:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214876
IP address blocks: 31.210.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:bc:df:de:0d:35:8f:c5:99:35:6e:7c:d5:6d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e65da99d0b9ef25cc5cc0ff161c8c768b698283d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:ce:80:b1:39:8a:1e:3f:d5:81:17:9c:eb:
8b:3a:93:95:a7:1f:26:77:89:5e:99:18:1d:ac:1e:
1c:fb:e0:99:3e:e3:a9:de:c6:b6:d1:44:11:aa:0e:
6e:57:ca:21:61:e1:27:09:7f:d8:0e:26:dc:1e:1d:
43:b9:3a:cc:ce:f7:67:f7:d5:43:a4:3d:45:34:1f:
6d:b3:19:df:99:81:29:f8:b8:c1:a4:fc:8b:b6:63:
3d:87:0c:7d:fc:41:24:ef:af:85:37:6b:3b:8b:81:
69:4e:43:42:2c:f9:ad:c2:11:54:5a:6e:70:59:ce:
61:c3:b2:79:df:41:85:1d:74:d7:0d:72:ab:82:24:
7d:d8:ca:fe:87:89:2c:7d:f7:fd:79:f0:c9:7f:5a:
47:cc:e3:5a:df:2a:e1:f1:b2:57:79:24:33:1e:3c:
20:dd:42:84:b9:49:77:7d:46:47:09:62:37:71:e5:
5b:c3:0c:4e:d4:33:a9:75:2b:69:c4:ca:50:85:78:
60:7e:94:1e:73:75:7a:c6:64:14:62:3d:43:0e:ba:
b1:6f:7f:d4:5e:f7:f9:bd:ce:5c:24:02:91:74:ff:
e2:10:ae:c1:4e:33:22:42:90:28:14:81:44:98:22:
67:ec:e1:98:01:f8:e1:4d:95:6f:3c:3c:b4:8e:83:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5D:A9:9D:0B:9E:F2:5C:C5:CC:0F:F1:61:C8:C7:68:B6:98:28:3D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5l2pnQue8lzFzA_xYcjHaLaYKD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ec:67:ee:20:dd:bf:ee:77:66:28:36:38:84:c3:57:61:8e:
76:ac:0e:4c:10:34:6a:57:4a:02:cb:95:41:56:1a:69:2a:cf:
70:2f:b8:6c:60:37:ce:84:0e:fb:0e:b0:f2:92:22:42:9b:6c:
9d:89:70:c6:e5:9d:be:22:f3:2f:2d:c6:f9:ea:c0:3d:ad:47:
03:96:4d:93:0d:ba:3c:42:9d:a9:3b:39:51:ab:98:5f:e5:8c:
86:c7:94:0b:88:1d:a1:77:52:12:3f:97:bf:79:90:e6:f5:a3:
db:e1:86:1e:51:fa:f1:11:9a:b5:4a:c4:77:78:d0:43:f0:c3:
4a:26:ce:2c:7d:b1:d9:b8:5a:10:d0:43:3f:e5:88:15:4c:35:
99:d3:d6:46:44:c8:ce:cf:dc:2b:9a:8c:44:13:0f:42:86:40:
63:82:aa:94:cd:fd:5f:bb:c9:1f:2d:3f:81:60:23:db:53:3a:
f7:d2:c1:0c:b0:41:7d:cb:9f:cd:37:33:ab:11:c7:b0:f0:6a:
ee:21:7d:c8:74:ec:fe:b9:c6:18:4e:64:33:40:db:e4:e5:8c:
25:cc:2e:88:36:25:8f:16:82:79:74:43:25:9d:c2:a9:c1:d5:
c5:8c:b5:88:0e:20:ec:48:20:13:d6:ba:9b:0c:50:9f:c8:a0:
fb:7a:20:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:52 2025 by rpki-client