Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa
File: Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa (raw, json)
Hash identifier: HTtYaWmG4vFsBggg1bZWXxDw9HN8LeHTNamhfWYt0+s=
Subject key identifier: 3E:7F:31:C8:46:B1:F1:D4:DF:D9:7E:E3:26:86:CF:43:18:7E:F4:58
Certificate issuer: /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial: 0194266B2802382BCAF25D853D6868472E4D
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa
Signing time: Thu 02 Jan 2025 09:49:04 +0000
ROA not before: Thu 02 Jan 2025 09:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206757
IP address blocks: 5.252.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:28:02:38:2b:ca:f2:5d:85:3d:68:68:47:2e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Validity
Not Before: Jan 2 09:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e7f31c846b1f1d4dfd97ee32686cf43187ef458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:cd:db:9f:2b:14:19:7f:37:9e:cf:8b:55:
05:bf:75:26:6e:79:98:6c:43:42:08:48:93:ad:c6:
83:02:04:2b:c9:3c:08:7a:9b:1c:c6:5d:3a:52:03:
71:17:3a:4a:0b:22:fb:3f:a2:16:a9:3f:e5:dd:71:
50:e6:ec:f5:78:51:57:af:3f:cf:41:f7:ac:f5:9a:
7e:b4:61:60:b4:6c:c6:2e:5a:22:da:a4:59:0e:59:
5d:09:f6:42:b3:75:ff:d5:42:bd:09:5f:9a:aa:53:
89:69:c5:cb:85:c0:f5:68:93:99:b1:f8:c3:db:e4:
1e:90:ea:87:9b:62:d6:44:cd:0e:e5:4b:f9:10:8f:
4f:af:8f:79:af:bd:11:d8:95:66:cc:4c:d0:75:36:
64:33:34:b9:04:86:22:81:bf:c2:4d:04:7e:ef:da:
59:0e:47:d0:c3:4d:de:c2:f0:9c:af:e5:3b:6f:7e:
5a:c1:3c:e8:bc:be:89:0f:75:c5:7c:df:3f:6c:85:
ce:c5:ad:d2:fb:a6:94:31:d1:c3:60:12:2b:b3:ad:
8e:c6:af:f0:b6:fc:62:89:17:f9:da:e1:8d:30:a6:
c8:b3:b1:25:e0:a2:af:c2:b7:d2:b6:ea:95:dc:5b:
33:98:6f:1b:65:d7:f1:3f:a3:2c:68:f5:97:af:9f:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7F:31:C8:46:B1:F1:D4:DF:D9:7E:E3:26:86:CF:43:18:7E:F4:58
X509v3 Authority Key Identifier:
keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.0.0/22
Signature Algorithm: sha256WithRSAEncryption
59:e9:36:c2:10:b5:22:94:8a:02:3f:55:55:62:f0:09:b7:6e:
34:2a:18:04:63:92:f3:62:95:63:f6:b9:50:53:ab:8c:cc:06:
80:44:c2:82:24:65:e7:ec:ee:1a:e3:10:e6:8e:32:c0:89:a0:
3c:a6:f6:20:cb:f7:be:9b:2e:9f:10:a0:2f:d0:0c:73:d7:33:
08:2d:84:3e:5f:40:ee:33:d3:36:80:3e:77:66:e1:6e:a1:3a:
5a:28:9f:32:87:92:37:e1:57:1a:0a:5f:56:79:fb:68:c5:37:
31:1d:36:c9:c8:3f:a6:ac:33:55:45:36:53:a3:e4:43:6f:19:
71:0e:60:41:b8:25:89:a3:94:37:ae:31:e7:f0:94:01:52:60:
1b:d5:8e:b9:e6:6a:23:e0:67:bd:c4:c8:5a:49:63:d6:d8:53:
8e:80:3e:e6:a3:88:e6:08:e8:28:29:ef:e9:1e:8c:be:af:88:
47:5d:5d:4f:42:07:af:8b:cc:eb:9e:98:6f:9b:bf:5b:82:29:
bd:0c:20:4b:c8:fb:91:4f:13:64:30:21:ae:8f:94:9d:66:33:
43:95:56:0d:ed:46:74:9e:3b:ec:41:ac:38:48:77:b7:e1:cc:
ed:a6:e7:e8:a9:37:94:01:a5:4c:29:bc:ee:6f:13:3a:af:12:
81:15:51:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:34 2025 by rpki-client