Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/PtfamAIKc-wbnus8-5afpUvZHGU.roa
File: PtfamAIKc-wbnus8-5afpUvZHGU.roa (raw, json)
Hash identifier: h8WtMUiUF98qcvLvFpadosq7yztYyhy7KWS+4nBxrlg=
Subject key identifier: 3E:D7:DA:98:02:0A:73:EC:1B:9E:EB:3C:FB:96:9F:A5:4B:D9:1C:65
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 01942521D7F756DCB6268862EEA50F7329CF
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/PtfamAIKc-wbnus8-5afpUvZHGU.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200380
IP address blocks: 5.102.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d7:f7:56:dc:b6:26:88:62:ee:a5:0f:73:29:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ed7da98020a73ec1b9eeb3cfb969fa54bd91c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:bb:2f:20:40:36:ad:87:8b:04:e4:05:d9:
90:0f:e0:09:82:52:0e:65:8f:22:57:c0:bd:2a:2c:
22:3a:79:6a:22:66:ab:ab:d6:a7:91:a7:e1:13:50:
43:8f:b4:97:e6:2d:c4:48:f2:d1:22:3f:e5:97:45:
63:79:58:c3:d4:a7:ef:b7:81:3e:9f:2d:25:f4:bc:
a0:c9:43:27:92:42:c2:45:0b:78:4d:a8:cb:43:e4:
3d:e1:b3:e5:2b:7d:84:37:30:5b:37:4b:d1:74:07:
94:a4:2e:0b:2e:cb:2f:3a:0a:6d:f3:3f:c4:cf:1a:
fd:10:4c:fb:7a:52:d0:65:ad:b6:ea:17:20:18:b3:
da:fb:25:4e:38:8b:c9:95:c2:ac:ff:cb:e2:fc:d0:
36:fa:48:d2:ad:c4:65:50:64:8b:80:80:8b:3f:ef:
41:4f:cd:8a:e9:88:2b:3a:bf:23:68:c3:7a:c7:91:
bb:bd:69:79:34:a8:3b:ef:bb:5f:ec:39:59:4b:6b:
47:12:30:7a:38:72:69:45:dc:ae:44:7c:46:8d:7e:
e7:2e:00:ce:56:15:ca:51:fa:17:e3:c2:9a:42:93:
cb:37:4c:cf:28:5b:cf:9e:0d:21:fb:96:0b:84:55:
67:e5:a6:bc:11:a6:8d:29:3f:83:ff:87:87:c2:de:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:DA:98:02:0A:73:EC:1B:9E:EB:3C:FB:96:9F:A5:4B:D9:1C:65
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/PtfamAIKc-wbnus8-5afpUvZHGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b0:88:b3:8e:70:68:6a:9e:b0:5c:68:f1:b8:37:28:7b:ea:
78:cf:6e:cc:8f:1b:f1:3b:54:10:6e:7c:ab:87:54:76:75:ff:
5c:57:71:47:94:ec:45:36:6a:9a:3d:2e:5c:82:c8:74:66:58:
9d:df:51:b5:e2:1f:43:c6:39:d5:13:3b:07:68:1a:0d:92:ba:
92:3b:ff:a7:5e:c0:39:19:8d:32:67:71:04:6b:97:5c:ca:61:
73:1b:69:88:51:4b:41:83:75:d7:14:1b:77:85:a1:e9:cf:fb:
26:8e:93:b1:3f:31:8e:8c:f8:50:a7:b5:87:be:be:ed:a8:e4:
11:b5:40:7f:d7:b6:5e:54:74:b2:95:fb:b8:49:a7:07:8d:02:
37:e6:48:2c:c6:84:04:42:dc:f9:98:dd:44:08:b5:43:d2:d5:
da:f0:34:18:ec:29:62:16:57:46:44:df:bc:1e:d5:ab:37:8f:
a6:5b:40:5b:90:86:94:e7:6e:57:0c:0b:76:7d:c1:25:6a:81:
c9:32:16:50:49:e5:41:cb:13:51:65:10:42:4e:08:4e:67:c2:
11:83:58:ad:b4:e1:30:11:f7:17:bc:c8:1a:bc:ba:3a:5c:14:
e6:a0:08:99:72:18:01:b7:40:3b:73:12:4b:49:c8:22:a4:d3:
bf:28:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:21:04 2025 by rpki-client