Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa
File: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (raw, json)
Hash identifier: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=
Subject key identifier: 31:3C:5C:8A:FE:66:70:2E:A0:E4:C9:0E:58:9F:CF:08:B5:2D:70:6C
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019422FC3535CACAC0C714164DECB07101E0
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60374
IP address blocks: 5.56.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:35:35:ca:ca:c0:c7:14:16:4d:ec:b0:71:01:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=313c5c8afe66702ea0e4c90e589fcf08b52d706c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:b3:7b:64:a7:e3:5b:60:d6:74:95:9c:08:
da:15:a9:3f:4e:ad:ff:68:b0:9e:98:83:82:7e:96:
45:e8:6e:25:e3:67:6b:c3:91:54:1e:50:aa:a3:1f:
68:e6:2e:1a:e2:db:e4:88:46:67:d5:49:c7:50:95:
a2:c8:cf:a8:73:e0:05:73:f2:e8:ad:b2:82:b0:50:
22:94:73:59:3d:a6:76:c2:aa:c1:ac:2f:ff:4d:68:
5a:93:73:e3:95:00:91:82:a2:85:07:c9:a7:d2:ed:
c4:d8:67:0c:08:aa:6d:54:1e:15:0e:8d:ca:f4:2e:
c6:60:5a:aa:4d:b7:c3:1a:66:6e:c1:29:e5:1d:7a:
c1:fc:07:82:d4:de:ae:87:3d:3b:f0:18:0a:5a:a0:
bc:cb:b5:f1:5e:4a:18:2b:16:08:fb:86:f5:a0:eb:
f2:43:2a:44:81:5a:15:bc:33:f4:14:b9:2e:9e:0c:
a9:b8:f7:ca:02:60:fb:75:92:c8:83:91:d3:66:a7:
42:c0:cf:4c:47:ad:88:6d:d5:80:7d:2d:99:4e:ea:
e6:05:0a:9f:4f:39:6e:f7:8f:81:a0:5c:1d:34:d9:
f9:cc:69:28:b8:47:f8:ac:23:1e:02:fc:0b:25:52:
8e:62:dd:f2:1a:ad:ed:21:3d:a0:90:36:d6:0a:21:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:5C:8A:FE:66:70:2E:A0:E4:C9:0E:58:9F:CF:08:B5:2D:70:6C
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.134.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:75:08:a7:a5:44:de:f0:42:40:1c:e0:ad:b2:74:9a:e7:1c:
51:93:62:18:3a:56:df:6d:84:79:cc:61:1e:f5:32:8a:23:9a:
ee:58:c6:1c:d9:87:81:d0:05:ad:ac:8d:af:58:46:aa:7a:9c:
8b:d6:2a:d9:93:df:f8:1e:3d:b5:95:82:a7:32:0a:e4:7a:05:
c4:0a:f7:97:98:17:57:2e:b1:cb:4d:c5:10:ce:6d:9b:ae:8f:
f2:4b:b6:6a:de:7a:0a:63:e9:a8:31:16:bf:b7:d2:81:49:af:
8c:35:6b:45:15:e4:ab:14:58:7c:99:40:9c:76:68:ee:f3:79:
83:1c:e1:32:92:47:6a:2f:0e:6c:42:41:f9:c1:75:26:b6:8f:
0c:be:c7:49:a4:f0:f3:72:d7:79:94:b9:69:a4:1f:bf:a7:36:
d1:19:93:40:8e:e9:33:1c:25:32:7d:53:2d:1f:c9:98:f6:34:
4c:65:04:c7:41:9c:ed:5b:41:70:9b:8f:36:d4:4a:a2:b5:11:
f0:6d:28:59:0d:0d:70:18:e5:85:d2:aa:ab:b0:10:31:9d:39:
0a:de:a1:ad:dd:67:b1:fa:0f:3b:f7:b5:0d:ff:65:6d:bb:69:
8c:02:06:41:06:40:da:ed:95:47:63:2a:1a:c7:b3:93:92:64:
f6:6f:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:19 2025 by rpki-client