Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa
File: yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa (raw, json)
Hash identifier: +th6rVasBDhTDv9q3+kidlk8IPZxm2tOEsWRAh7P2ug=
Subject key identifier: CA:E0:D8:06:B6:63:85:35:7B:B8:8F:90:4B:93:D3:EA:A1:79:37:BB
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 019425FD055A9DE346B4B9ADE47A90465C65
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa
Signing time: Thu 02 Jan 2025 07:48:46 +0000
ROA not before: Thu 02 Jan 2025 07:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47913
IP address blocks: 5.252.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:05:5a:9d:e3:46:b4:b9:ad:e4:7a:90:46:5c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 2 07:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cae0d806b66385357bb88f904b93d3eaa17937bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:20:f2:49:27:74:a9:c0:f1:ae:f5:2f:8a:
fe:95:af:ee:9f:22:0a:a8:b5:d9:dd:51:c9:c4:a8:
53:0d:e5:4d:86:85:6a:86:f2:20:50:19:ba:dc:18:
4a:91:57:3c:b4:5f:88:1e:85:1f:e7:c5:b5:3d:7b:
4a:92:b8:c7:11:e5:be:e2:a7:24:cd:4c:a3:c2:06:
62:5f:2b:f5:fc:00:de:fa:3b:a7:2a:90:d6:54:cd:
d8:28:c8:6c:61:e8:21:3b:5d:11:85:2c:56:da:06:
18:a6:60:e7:ee:5d:2b:ee:19:30:97:d6:83:42:05:
e3:6e:31:bf:6d:b7:84:ef:61:60:19:df:f7:56:c4:
5d:0f:32:c8:43:b7:4a:3c:4f:f9:b0:6a:97:df:e0:
f5:d0:e1:1e:b1:9e:9f:41:89:ee:b3:38:78:60:34:
6b:9f:2f:39:dc:be:55:b1:f5:b2:dc:5a:6b:22:e1:
67:a6:e6:75:e2:f1:62:6e:b9:8a:4e:bc:65:77:91:
04:16:2e:cc:db:91:67:9e:f9:cd:5e:7b:f2:68:7e:
e1:ab:80:10:49:53:06:65:4e:e0:5e:0e:d0:ea:e2:
8b:d2:1f:91:a2:a8:0c:45:a2:91:15:64:7a:a4:37:
4b:2b:ae:7d:2d:5f:23:eb:f0:e6:c2:8b:a9:57:b3:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:D8:06:B6:63:85:35:7B:B8:8F:90:4B:93:D3:EA:A1:79:37:BB
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.28.0/22
Signature Algorithm: sha256WithRSAEncryption
35:f3:c7:76:d6:90:d6:88:fe:33:27:28:9f:16:f2:4c:db:74:
3c:5d:ce:fa:e0:55:7f:ac:10:fd:94:08:a4:a9:af:57:d6:62:
09:f3:6a:ac:ee:3e:ab:32:36:b7:76:9b:92:b9:26:56:17:36:
86:c0:86:22:46:39:a2:eb:7f:b4:d3:48:09:84:3c:76:4f:42:
40:50:3e:aa:c4:9e:3b:41:71:b2:a7:2c:dc:6c:9c:9f:fb:c2:
fe:3f:8d:96:b2:39:e4:f9:7a:91:04:c8:c5:42:bc:34:b1:df:
0a:4a:9a:14:ad:51:00:83:07:82:b0:d7:22:7b:ab:05:da:9f:
3c:4b:14:60:31:41:4a:97:e3:f4:0e:a6:99:73:d5:52:64:43:
55:72:c9:45:67:ba:c6:dd:f9:6c:ae:5d:2e:b0:d9:66:40:d3:
eb:05:b1:6d:93:43:97:c1:94:d6:a3:32:32:08:e7:1a:eb:aa:
3e:b0:9f:a2:fc:28:93:09:93:70:57:e0:58:8b:b3:c0:95:33:
32:7f:d0:4f:17:c0:e4:cc:ff:84:cd:6f:a9:45:63:80:e5:dc:
8a:9e:85:7e:63:1f:31:4b:30:e9:4b:11:96:76:bc:9d:54:58:
39:e7:5a:5e:4b:74:71:a6:aa:52:c3:56:2a:d4:ff:cb:c4:9a:
2a:e0:d7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:36 2025 by rpki-client