Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/qi3rhjz0p_JIDWgNBHnC01nOTzc.roa
File: qi3rhjz0p_JIDWgNBHnC01nOTzc.roa (raw, json)
Hash identifier: sI4mLt9OaWWXoU75bYS+ZomsMcCTUVq/R9FP0uAoyas=
Subject key identifier: AA:2D:EB:86:3C:F4:A7:F2:48:0D:68:0D:04:79:C2:D3:59:CE:4F:37
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 0194258F0871C3D6D1F935DAE50A049F9780
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/qi3rhjz0p_JIDWgNBHnC01nOTzc.roa
Signing time: Thu 02 Jan 2025 05:48:38 +0000
ROA not before: Thu 02 Jan 2025 05:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209072
IP address blocks: 5.183.140.0/22 maxlen: 22
5.183.141.0/24 maxlen: 24
5.183.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:08:71:c3:d6:d1:f9:35:da:e5:0a:04:9f:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa2deb863cf4a7f2480d680d0479c2d359ce4f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:e4:f3:d3:91:d9:0a:cc:6e:d0:40:e3:92:
bb:59:dc:c2:42:f6:aa:38:01:e7:14:4e:f1:38:45:
38:ab:f5:41:14:0e:c8:0f:a7:ce:b0:a5:00:5a:4a:
91:55:d4:d3:a8:f7:4d:63:0e:30:d4:2c:84:ef:1a:
0f:cc:39:f2:a7:23:e2:e2:a4:d1:a5:65:a4:04:d7:
98:ce:4c:e2:c7:8d:b2:87:ec:6f:07:82:06:f0:95:
2d:3b:6c:28:2c:f7:f2:57:9e:f7:84:49:af:a3:26:
f8:e4:69:18:d2:22:b2:70:21:15:3e:3c:64:80:e3:
a7:0a:68:71:18:0a:39:dd:a2:70:a7:ba:82:e8:3c:
9e:af:58:15:83:3d:3f:bd:78:6d:f0:35:34:2f:e7:
a1:f6:2a:ec:f0:9b:56:e3:51:bd:19:6b:6e:fb:10:
26:f6:43:1e:bd:f8:24:ba:54:d4:c0:9a:51:34:bc:
6e:e9:43:88:26:d9:38:4d:f6:9c:80:cd:52:8d:dd:
55:1c:36:5e:36:a7:10:4b:ea:e9:a9:06:29:df:4f:
4c:06:df:40:be:fa:3f:c1:92:37:54:76:35:37:ec:
c3:0d:14:c7:63:40:dc:ad:a6:c8:a6:5b:6c:f2:d0:
b1:34:3a:26:9b:66:6a:ed:f3:1a:75:08:b2:03:30:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2D:EB:86:3C:F4:A7:F2:48:0D:68:0D:04:79:C2:D3:59:CE:4F:37
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/qi3rhjz0p_JIDWgNBHnC01nOTzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.140.0/22
Signature Algorithm: sha256WithRSAEncryption
35:c0:25:18:25:95:06:47:1c:d6:55:4a:0d:2a:81:54:1e:05:
4c:31:11:3a:79:85:22:f0:46:42:bc:f1:58:2a:c7:38:60:bf:
5b:b2:55:76:e3:06:12:47:63:5a:e3:f7:a1:28:12:62:9b:62:
d7:57:70:21:a4:41:62:9b:21:fa:21:53:fc:b2:58:7c:db:e2:
c8:cc:27:6d:54:96:9c:4a:62:45:a0:79:e0:05:2f:32:cf:7b:
6a:42:07:c6:0b:b1:b7:9f:e1:43:21:08:9f:e8:4c:71:7f:67:
38:95:94:1d:d1:c5:ef:cc:f7:58:a9:54:e7:50:31:49:61:f3:
48:d2:0b:da:85:90:e2:b5:11:5a:68:a6:a3:38:41:ca:5f:91:
31:7f:d9:ca:51:4c:73:3a:7e:f3:c6:e3:e0:37:0a:b9:5d:7b:
80:d1:89:81:a6:b1:c9:89:37:a4:21:57:9c:e3:f6:31:fb:66:
de:ee:2d:1f:0a:da:a6:72:7e:fe:88:5e:8f:ae:75:c3:4e:dd:
bd:c1:13:5b:54:d8:b2:32:e1:66:21:97:ff:30:29:0d:d8:99:
f2:c6:b1:48:01:9f:3b:dd:f0:61:94:0a:2a:8e:38:7d:ee:6a:
ba:c8:b6:49:d4:eb:5d:e8:88:24:9e:43:27:03:41:b7:ff:1c:
2f:f3:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:38 2025 by rpki-client