Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/Di0vSgAmdtxn2ZM7Al8L8Zr3oIU.roa
File: Di0vSgAmdtxn2ZM7Al8L8Zr3oIU.roa (raw, json)
Hash identifier: 0Bf0l0DWLnoKx593QVoGlu2x+BD1lYWYH448tSVbn0U=
Subject key identifier: 0E:2D:2F:4A:00:26:76:DC:67:D9:93:3B:02:5F:0B:F1:9A:F7:A0:85
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 019422202A1E0B2CFFA743BAD727F41262C3
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/Di0vSgAmdtxn2ZM7Al8L8Zr3oIU.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212559
IP address blocks: 5.252.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2a:1e:0b:2c:ff:a7:43:ba:d7:27:f4:12:62:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e2d2f4a002676dc67d9933b025f0bf19af7a085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:fb:a7:cb:95:69:d3:b5:af:59:62:aa:c6:
ab:9f:29:fe:53:9c:ed:d9:60:3c:8c:2b:31:32:f3:
ab:5c:82:44:81:c0:e8:18:fa:f7:99:e4:e1:35:5e:
8d:62:48:eb:3e:78:b8:dd:78:9d:ea:5a:f2:3f:0c:
62:07:2d:92:54:bd:e8:21:e8:5b:3e:76:ce:16:1d:
b7:69:47:bb:d3:fd:92:10:a2:fe:45:78:f2:9e:1a:
d2:b2:09:7c:3d:d3:36:42:43:7b:53:58:c8:c8:f8:
40:90:d7:33:d8:e8:f6:8c:e8:35:ad:11:bc:5d:de:
10:3a:5a:47:ec:26:5a:62:c6:34:a9:cd:cc:06:fe:
e9:5c:c0:e8:f0:da:c8:9e:ab:1b:42:35:73:b5:a1:
70:0a:5d:84:a4:1f:15:51:b3:c9:ef:d7:79:a5:67:
40:ca:56:05:f9:2a:a0:e5:b9:22:ca:eb:b6:54:34:
a8:e5:cc:cc:69:e6:07:c9:ed:1e:49:bc:3d:24:32:
4d:fa:84:e3:67:07:a6:a1:23:be:31:dc:fb:ee:e3:
4e:98:33:e5:d8:8f:a4:35:b0:18:6a:8e:db:f4:38:
55:9b:9d:c2:af:78:5a:b2:59:da:56:a8:db:e3:82:
71:fd:b4:da:f9:d0:31:2a:6f:ef:7c:69:5d:fd:23:
f1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2D:2F:4A:00:26:76:DC:67:D9:93:3B:02:5F:0B:F1:9A:F7:A0:85
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/Di0vSgAmdtxn2ZM7Al8L8Zr3oIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.18.0/24
Signature Algorithm: sha256WithRSAEncryption
30:00:77:fa:c9:7d:8a:55:b7:e8:d2:af:d6:94:6f:62:89:de:
8c:61:f1:e0:75:d1:5d:1b:e9:b7:6c:e7:ef:28:1d:f2:1e:a3:
df:8d:bc:d9:8b:89:ba:e9:96:f7:3f:62:d1:d0:05:84:69:b9:
47:1f:b7:79:00:be:ad:98:e1:51:a0:78:2d:8f:29:b5:5b:ad:
9f:2d:e3:c3:1f:30:4d:f1:30:42:83:ff:92:fd:9f:e8:07:5d:
03:93:f3:db:44:c7:a5:ae:7b:ac:4c:10:11:7d:f1:f5:33:80:
34:69:e9:04:c1:99:73:6d:59:82:98:9d:75:40:d9:e5:05:20:
1d:f8:48:dc:57:ac:1e:10:08:1a:d9:d8:43:9b:b5:11:b5:2b:
ed:9f:6d:4f:32:39:23:c1:5a:a6:ae:6a:cd:6b:44:26:2b:cf:
cb:cf:25:d9:a0:a0:84:a0:0f:87:ac:8e:b9:21:31:7f:82:76:
ee:f0:b7:08:4e:1f:4f:8a:85:db:99:57:53:bf:75:66:35:87:
2e:9e:a2:1b:01:62:9d:b5:ba:d8:1c:8f:77:da:61:cc:26:4b:
d4:da:ee:f1:cb:f5:6b:cb:e6:6d:7c:29:c0:ef:8c:f6:22:61:
cc:9d:05:46:92:f0:36:e9:c4:ee:c6:10:ed:77:d5:1c:36:3f:
42:a4:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:21 2025 by rpki-client