Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/IKiqkrmFyojfs3_xOt7fZHFSlPM.roa
File: IKiqkrmFyojfs3_xOt7fZHFSlPM.roa (raw, json)
Hash identifier: A7gXKJoNQ0QRvI+SScjx1MnLDAh3sHJvpIH2WHgULw8=
Subject key identifier: 20:A8:AA:92:B9:85:CA:88:DF:B3:7F:F1:3A:DE:DF:64:71:52:94:F3
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 01942521D8AE80C4D84F6781D6C591CC2723
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/IKiqkrmFyojfs3_xOt7fZHFSlPM.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207191
IP address blocks: 5.102.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d8:ae:80:c4:d8:4f:67:81:d6:c5:91:cc:27:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20a8aa92b985ca88dfb37ff13adedf64715294f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:02:33:42:41:9c:84:6d:9b:e4:a3:b8:81:
d9:ad:bc:7e:59:0a:6a:9e:d0:30:c3:05:76:d9:95:
1d:1a:a7:63:29:ea:37:06:96:03:9e:79:ef:7b:ea:
e2:f9:f8:c5:f0:93:81:98:f4:4a:51:3e:20:9e:70:
a8:5b:a3:51:90:04:e4:0e:b6:a9:bc:9c:bf:df:d7:
88:71:25:6b:d2:67:82:8b:a5:34:9a:aa:28:9a:1e:
73:e8:dd:d4:ff:c3:80:96:8a:ab:f1:32:a7:d2:0d:
0e:14:35:c8:67:5c:b4:28:c6:f3:63:c0:9e:b4:4e:
de:b7:26:0b:09:e4:b7:fd:f9:c1:c8:f5:93:07:68:
c2:14:c9:d6:f6:3f:a5:75:02:9d:da:12:fc:a9:d8:
30:b4:8f:93:64:46:77:c2:59:5f:cf:5b:86:3d:92:
69:6b:a7:d5:a3:d0:bd:b5:ce:20:18:01:21:1e:26:
4f:69:9a:d7:16:d6:23:57:04:3b:40:56:95:93:c2:
ca:27:b0:7c:75:ac:ab:2c:5c:64:72:71:fb:9b:38:
dc:b6:ef:8b:16:6f:4a:2e:7b:7c:33:be:15:6d:c9:
73:f4:e4:a1:54:48:08:73:77:dc:c7:ac:09:30:42:
bf:85:a2:1d:f6:0b:98:b1:2f:61:2b:e3:32:48:fc:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A8:AA:92:B9:85:CA:88:DF:B3:7F:F1:3A:DE:DF:64:71:52:94:F3
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/IKiqkrmFyojfs3_xOt7fZHFSlPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f8:f0:93:4a:c6:36:d0:53:06:2b:32:e0:37:df:f6:c5:4a:
ea:c2:de:7a:df:f8:c6:01:44:e6:0b:0a:80:18:00:75:d0:fa:
d7:8e:fa:0d:49:d6:9f:e5:2c:fe:f6:f7:48:91:3c:50:82:79:
ee:59:d7:f7:9c:d0:e1:f3:a1:8b:9b:06:99:c2:9d:d7:ce:d9:
9e:23:ae:5a:44:1d:95:e7:50:c3:0b:42:97:fe:8d:a6:31:47:
b7:4d:af:24:d0:47:84:90:ff:c9:95:78:c8:1c:16:24:ab:9a:
04:6c:21:9e:b0:65:be:a0:d3:4f:83:db:31:61:57:5f:bf:35:
c6:52:74:0b:81:9c:d8:71:cb:8d:71:39:23:96:86:3d:cc:a2:
8e:35:ff:68:4d:9a:96:eb:db:39:aa:18:d4:61:b9:53:0b:fb:
07:ef:41:5a:e8:19:19:be:4d:b2:67:56:34:6d:e5:be:21:67:
5f:f0:c7:05:ee:e7:da:17:2d:cb:25:39:02:25:5c:0c:8f:35:
58:3c:83:9f:77:f2:da:3e:36:7f:94:43:1f:62:fc:03:6e:b4:
ab:f2:ce:7c:03:e6:6d:96:93:3a:8c:0f:b8:bd:21:05:96:4e:
fb:a0:7b:26:03:c2:76:e1:75:8c:5b:f5:f7:6a:c6:2f:4e:63:
ca:7c:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:24 2025 by rpki-client