Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/CYChCUuuTLXoGwleeybv9CkhW-E.roa
File: CYChCUuuTLXoGwleeybv9CkhW-E.roa (raw, json)
Hash identifier: 7GzS/ZFBd1eJvJV1A/A9RMJ1Wx5zUc1qu4Jv7DUyWos=
Subject key identifier: 09:80:A1:09:4B:AE:4C:B5:E8:1B:09:5E:7B:26:EF:F4:29:21:5B:E1
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0194B0E9E79710D678281DB71E3197311D32
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/CYChCUuuTLXoGwleeybv9CkhW-E.roa
Signing time: Wed 29 Jan 2025 07:15:06 +0000
ROA not before: Wed 29 Jan 2025 07:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.102.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:e9:e7:97:10:d6:78:28:1d:b7:1e:31:97:31:1d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 29 07:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0980a1094bae4cb5e81b095e7b26eff429215be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:77:46:d8:75:fd:92:34:ce:66:24:f1:e4:
fd:48:4f:01:c0:ff:11:37:fb:f2:e9:29:1f:82:79:
46:c3:84:ea:1c:4f:55:3c:d7:34:b3:35:73:32:a0:
19:3a:da:eb:e3:0c:02:9c:1e:82:32:89:b4:25:5d:
28:2b:ce:67:fe:70:f3:7b:38:31:32:22:b4:9c:8a:
95:75:26:4a:31:83:86:88:42:74:68:ab:03:44:49:
79:0b:a6:0b:47:a7:8e:6c:90:b9:70:82:05:f4:8e:
44:12:14:e5:06:9e:a8:af:89:e9:5a:5d:ce:e4:06:
44:5b:fd:df:e8:b2:0c:7d:a9:3e:ff:26:85:1a:c4:
f4:1c:9f:07:13:f4:35:c8:e5:50:c1:b8:6e:6f:75:
95:4a:8a:9c:77:49:6f:3d:08:9d:78:57:93:7b:0b:
14:6f:71:cf:a4:c9:31:97:fd:73:08:52:75:29:cb:
e6:0d:0a:c2:3b:60:f3:5f:ab:bd:c7:18:bb:b6:99:
16:5f:ca:16:7e:77:a2:8d:8b:57:16:37:aa:54:32:
3d:97:d4:93:d4:81:af:5a:97:8f:67:18:29:0e:a8:
de:da:7b:7b:ed:e4:74:27:1a:69:13:37:23:ce:7c:
13:b1:f8:ab:64:53:49:36:cf:e8:66:83:44:79:a7:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:A1:09:4B:AE:4C:B5:E8:1B:09:5E:7B:26:EF:F4:29:21:5B:E1
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/CYChCUuuTLXoGwleeybv9CkhW-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.124.0/22
Signature Algorithm: sha256WithRSAEncryption
17:c0:8b:63:f8:7e:c1:a5:80:f1:0e:e3:3e:e5:21:c7:43:cc:
b9:1d:28:57:a8:e3:21:fa:1b:2d:da:26:1b:39:1c:d6:15:af:
ca:47:03:d5:2a:f6:ec:39:cd:51:9e:7f:ab:0a:d5:8c:2f:b0:
47:c6:c5:67:ca:70:0a:57:9b:b7:61:8c:6d:b6:10:f9:27:2a:
43:ed:a7:e3:82:61:b2:bc:b3:60:b3:8d:ab:19:c7:74:b9:42:
b7:2d:6a:94:05:71:f2:a5:d8:c4:35:11:aa:28:67:22:93:c1:
0b:b5:67:44:4c:f5:03:43:49:c7:c1:3e:23:85:cd:90:ab:86:
12:c4:dc:68:d0:5b:89:91:7e:b5:90:4d:17:6c:3a:3b:46:54:
1d:96:a9:21:bc:86:44:55:d3:6f:c0:ce:73:84:23:4f:8f:72:
3e:6b:c3:83:87:8a:54:8c:d1:c6:72:5a:fa:ef:19:7f:65:7b:
38:94:09:88:76:df:0e:ab:b0:28:e1:05:0a:66:a7:4c:d6:0e:
c7:ba:27:11:e5:df:77:17:ba:5c:e8:99:38:9a:ee:25:3b:e3:
1c:12:f3:5b:58:a4:67:86:b3:95:b9:b5:7a:8f:c9:8f:01:5b:
26:9a:ca:08:4a:6c:cb:4f:1b:36:7a:c4:13:68:2d:25:98:d6:
25:08:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:33 2025 by rpki-client