Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kEbl5o9R9VIghbuFJkZmvJDz4YU.roa
File: kEbl5o9R9VIghbuFJkZmvJDz4YU.roa (raw, json)
Hash identifier: jYztlztH9XuEjEGgL0+vanGwSZibXNxwp5ZTk2Nuj2A=
Subject key identifier: 90:46:E5:E6:8F:51:F5:52:20:85:BB:85:26:46:66:BC:90:F3:E1:85
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD1D0FE0BDD0B0EF5EB691B514F2D6
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kEbl5o9R9VIghbuFJkZmvJDz4YU.roa
Signing time: Thu 02 Jan 2025 07:48:52 +0000
ROA not before: Thu 02 Jan 2025 07:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39521
IP address blocks: 104.238.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:1d:0f:e0:bd:d0:b0:ef:5e:b6:91:b5:14:f2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9046e5e68f51f5522085bb85264666bc90f3e185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:00:a6:c9:3c:1d:fc:cf:a7:e5:2d:96:35:63:
59:6f:36:6a:06:e5:59:43:48:04:37:fe:06:a1:a2:
5e:0c:d7:76:cd:75:b7:5e:36:59:ff:56:04:bd:77:
85:94:17:62:d0:6a:78:14:72:ef:56:c7:27:d7:1f:
09:c3:b1:d6:4c:ba:85:be:3b:4c:50:51:48:dc:fb:
10:49:d3:48:5d:0e:6e:86:cf:4a:75:a8:42:3b:07:
37:69:d5:23:31:07:63:30:02:87:42:4d:87:d4:d9:
61:e3:2b:ce:05:7d:8b:9c:3e:14:e2:f1:b7:d2:a8:
dd:9b:1e:00:d0:0a:6d:b5:32:b6:4a:4a:08:15:de:
97:d3:a0:73:91:19:42:e3:f0:7b:ef:e3:12:68:5e:
1d:20:5e:28:b3:37:32:0a:7b:42:57:dd:07:16:96:
28:59:98:1a:4a:02:d7:90:e8:56:07:12:80:c5:c1:
2e:9a:94:2f:5d:63:62:a7:8d:47:69:fa:45:61:cd:
ef:e2:c1:2c:44:d8:9a:98:a0:05:dd:b4:0e:01:25:
65:b0:91:cd:5c:2d:2a:c5:d5:da:37:8d:f3:6c:89:
ae:50:67:56:88:79:d3:63:6e:39:46:0a:c5:99:a2:
94:6d:e8:64:c3:05:26:a8:6f:bf:41:9b:32:7d:1c:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:46:E5:E6:8F:51:F5:52:20:85:BB:85:26:46:66:BC:90:F3:E1:85
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kEbl5o9R9VIghbuFJkZmvJDz4YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5a:3f:19:d2:34:db:3c:47:b4:12:e2:e5:0f:88:40:c8:1e:
03:c2:8d:e6:8b:e5:4d:7f:69:20:98:3d:40:0e:23:2e:11:fe:
39:21:a0:77:5c:92:66:61:bb:2e:c0:04:60:c4:77:ce:11:34:
79:f5:3c:80:bf:ee:bc:e5:57:63:df:88:28:17:fe:99:ca:22:
10:1d:d3:4c:96:57:6d:e0:fe:60:c0:b7:9f:7b:eb:ee:74:c5:
f3:ce:57:e9:94:f3:66:ff:a3:19:d8:5a:61:50:62:a1:b8:37:
c7:49:ef:77:e8:27:c6:6c:25:cf:cc:cf:bd:96:16:d3:a7:bc:
31:18:83:fe:cd:db:f7:4f:05:6f:bc:1d:95:ec:1d:6e:0d:e9:
7b:86:72:30:ff:74:8f:f6:fb:a5:3c:fa:b7:ed:b0:03:d3:ce:
db:e5:17:ee:a0:ae:42:6d:75:5e:9c:5a:77:50:ac:a0:d0:ea:
48:cc:f7:6e:b8:b6:89:06:67:2e:71:a3:87:a1:b8:c5:42:a4:
40:d7:a7:0c:b0:74:52:dc:e8:71:32:05:62:69:38:69:fa:5f:
5a:51:84:58:79:92:22:2e:ae:3e:d4:86:c6:a3:38:f3:e5:40:
e6:ed:d8:18:8d:b9:c9:04:c6:60:08:e4:09:4e:63:6c:0d:72:
35:69:57:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:36 2025 by rpki-client