Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/IxqqTicMk9q6G8gR9tJlENOjFRc.roa
File: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (raw, json)
Hash identifier: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=
Subject key identifier: 23:1A:AA:4E:27:0C:93:DA:BA:1B:C8:11:F6:D2:65:10:D3:A3:15:17
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 0194252233AB35DD83327FABA971241B0258
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/IxqqTicMk9q6G8gR9tJlENOjFRc.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208424
IP address blocks: 5.102.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:33:ab:35:dd:83:32:7f:ab:a9:71:24:1b:02:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=231aaa4e270c93daba1bc811f6d26510d3a31517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:f9:33:94:08:ac:d9:d5:9b:42:8e:69:59:
4e:15:92:e3:98:8a:5d:b3:3c:33:96:9d:e5:63:32:
f8:c6:e0:26:ed:0f:9e:6f:9f:14:b4:ef:05:d8:29:
a5:b0:21:a5:49:10:ce:cc:be:10:e5:92:e9:0d:e2:
73:09:1c:07:f9:8c:80:df:62:4d:f5:0e:ab:d8:d9:
87:e0:b4:e0:eb:09:c9:8e:c9:31:d6:47:81:62:71:
ca:04:e5:c3:bb:c9:9d:cf:81:ed:e3:91:d9:71:a3:
14:2e:4d:cb:c5:0a:ae:17:0e:ee:ef:c6:73:00:55:
38:9e:a0:e2:25:99:1f:09:78:e4:71:09:e6:8f:56:
bf:13:7d:e6:b8:a3:13:0c:5f:6e:fc:1a:b0:f1:ff:
2f:a9:9a:52:a5:50:42:ad:e6:fd:48:86:47:79:6a:
cb:1b:1b:a1:75:7f:de:9f:64:8a:9c:b7:3e:42:dc:
82:1d:04:b8:e4:84:41:88:c7:02:36:60:e4:18:df:
e8:fd:05:90:1c:c8:63:f0:bc:dc:f2:e1:17:25:1b:
4a:0a:de:ac:fc:ef:24:7f:51:8e:1c:da:49:54:5d:
3e:0b:7c:b1:7c:dd:2a:55:e9:16:9f:f1:15:e2:d1:
3e:ae:a6:6c:59:6f:2c:9e:69:bd:fa:f5:30:8f:7c:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1A:AA:4E:27:0C:93:DA:BA:1B:C8:11:F6:D2:65:10:D3:A3:15:17
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/IxqqTicMk9q6G8gR9tJlENOjFRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.47.0/24
Signature Algorithm: sha256WithRSAEncryption
82:db:6f:cd:0a:38:00:44:ad:44:88:d8:0f:62:83:2d:5e:68:
55:91:b9:26:bc:04:91:42:32:75:46:db:5a:ac:46:39:40:55:
34:41:00:62:a0:22:c6:7f:a5:09:f5:74:16:7f:01:ba:03:d1:
32:c9:a8:dd:0f:03:bc:d0:13:af:86:c6:d1:22:bf:ff:5c:0c:
01:ad:fd:1d:74:18:85:eb:a8:38:4f:32:fc:d2:3b:b5:24:b3:
04:78:18:63:7f:49:9c:44:06:89:df:f9:b1:18:c3:f5:af:eb:
83:e8:01:11:f5:17:84:72:01:43:8c:ff:0e:17:06:68:5d:43:
80:9d:43:8b:81:08:50:0e:20:1c:fe:9f:a4:b7:5b:9d:b3:58:
82:28:b2:07:4f:a3:28:f5:72:66:bb:7a:4a:e9:2d:83:30:e1:
88:af:8f:b9:25:1c:eb:c4:03:e6:2f:72:2b:95:f3:8c:c0:b8:
76:49:fd:ed:b6:54:c7:3e:7d:2b:62:30:14:e5:fd:49:91:c7:
ed:df:98:38:0c:ec:99:0a:bd:32:fe:b0:71:5a:24:aa:3d:7e:
aa:51:59:0a:e3:eb:f1:24:17:bf:76:e2:cf:71:70:21:e9:59:
08:4e:82:af:f4:0b:e8:83:aa:28:72:13:91:e1:34:8d:6b:02:
d6:86:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:37:30 2025 by rpki-client