Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/syj71zZ8MwWTuavJrSv9ey-GiNY.roa
File: syj71zZ8MwWTuavJrSv9ey-GiNY.roa (raw, json)
Hash identifier: OwP0pURWBASyJxlo+FTFHbY+Smo6gzpAgQ+Dz8xZ608=
Subject key identifier: B3:28:FB:D7:36:7C:33:05:93:B9:AB:C9:AD:2B:FD:7B:2F:86:88:D6
Certificate issuer: /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial: 01941FFA831D6DA42A5317B4184F4FB18727
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/syj71zZ8MwWTuavJrSv9ey-GiNY.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211128
IP address blocks: 5.181.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:83:1d:6d:a4:2a:53:17:b4:18:4f:4f:b1:87:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b328fbd7367c330593b9abc9ad2bfd7b2f8688d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:63:92:da:b4:ab:c0:e0:20:32:d8:dc:c6:
98:4a:6f:e6:21:ae:63:5a:6d:19:5e:f7:5a:20:1a:
06:d9:8a:58:76:65:9b:99:44:6d:83:86:f0:8d:0c:
34:91:50:63:04:e2:5d:06:bc:4b:2b:6f:05:9a:7e:
b4:9d:88:e9:69:ad:55:93:df:4c:31:31:2d:94:43:
15:ce:9c:55:f5:2d:91:bb:43:d2:d7:2a:80:6d:a5:
3f:f1:0b:14:9e:5c:ab:7d:3b:a6:e9:bb:f3:9c:9c:
25:36:97:c4:90:0a:c9:4a:00:27:13:f5:7e:83:a2:
86:3b:2e:9c:27:7b:68:76:74:eb:3a:cd:85:33:c9:
58:5c:3c:c5:bf:39:30:29:cc:f7:a0:12:8e:b3:38:
7b:15:e9:0c:a9:00:76:97:89:32:b3:fa:bc:c0:f4:
2d:ed:66:29:7b:b5:40:17:bd:fc:68:2a:b1:09:f4:
12:a8:6c:d2:66:6a:27:7e:b6:6a:70:2a:ad:23:f4:
16:55:50:30:8a:8e:89:16:66:01:2e:76:02:32:f7:
f4:4d:fa:d1:5c:45:cc:65:67:c8:ff:55:a7:57:d8:
70:b7:03:85:db:91:22:79:85:6e:c6:6e:73:a5:61:
21:a0:a5:03:cb:e5:8e:3f:42:1a:6e:6c:fb:ee:d0:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:28:FB:D7:36:7C:33:05:93:B9:AB:C9:AD:2B:FD:7B:2F:86:88:D6
X509v3 Authority Key Identifier:
keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/syj71zZ8MwWTuavJrSv9ey-GiNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.55.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4b:43:4e:54:c2:74:6f:0b:7b:89:0a:22:2e:78:bc:70:2a:
9f:b1:b5:ee:6f:b4:46:6e:60:37:24:de:9d:2b:55:f0:93:37:
b8:01:54:1c:d2:65:d3:a1:73:ac:c0:0f:81:3f:19:a3:a7:6f:
6b:4e:56:5c:f1:89:a6:a5:e0:fe:56:22:7d:fb:4d:67:b0:ab:
74:ed:c1:3c:8c:64:c5:74:f7:a6:ce:ac:f5:32:f0:84:b5:d9:
c7:f4:ad:91:4e:93:06:75:1f:f7:07:d5:af:0c:6b:45:a4:58:
ec:03:ed:41:4c:1a:89:36:c7:90:91:9d:0c:9d:c8:06:70:a3:
92:3c:6e:7e:01:60:4e:ae:91:28:ad:f9:b6:95:51:7d:e1:94:
1a:45:67:8b:46:52:01:ca:7d:6e:10:08:ae:53:b4:31:57:36:
62:63:be:6b:c4:2e:5c:2b:f2:27:d1:15:bb:e7:10:10:53:ec:
e8:21:1c:2e:a7:4b:ee:38:43:0b:3a:a0:c7:16:b9:3e:0a:56:
83:3c:73:de:75:59:97:d0:56:40:ab:73:b4:07:cb:3e:28:bd:
eb:24:7a:59:0f:a1:d1:c4:55:03:97:d3:60:5a:4c:b6:4a:c8:
3a:52:34:08:bf:67:4b:04:ef:a5:82:83:7b:b7:02:78:fa:66:
07:0a:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:21 2025 by rpki-client