Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/X3Xfi2J-kVZANL6hYOfGKHsTXz0.roa
File: X3Xfi2J-kVZANL6hYOfGKHsTXz0.roa (raw, json)
Hash identifier: I6HoTfl6GNQQqkXZn/T89sRl04MZcoN1b181n8idbSk=
Subject key identifier: 5F:75:DF:8B:62:7E:91:56:40:34:BE:A1:60:E7:C6:28:7B:13:5F:3D
Certificate issuer: /CN=9e5d4ebaf0d3d1ef6c07c75dca33d5b5113a42f6
Certificate serial: 01942520A837975D4E1EAABAE802755B7845
Authority key identifier: 9E:5D:4E:BA:F0:D3:D1:EF:6C:07:C7:5D:CA:33:D5:B5:11:3A:42:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1OuvDT0e9sB8ddyjPVtRE6QvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/X3Xfi2J-kVZANL6hYOfGKHsTXz0.roa
Signing time: Thu 02 Jan 2025 03:48:04 +0000
ROA not before: Thu 02 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20668
IP address blocks: 185.5.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:a8:37:97:5d:4e:1e:aa:ba:e8:02:75:5b:78:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d4ebaf0d3d1ef6c07c75dca33d5b5113a42f6
Validity
Not Before: Jan 2 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f75df8b627e91564034bea160e7c6287b135f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:33:dd:da:d5:4f:38:14:d1:65:c1:85:5d:
bd:be:fb:fd:d4:c7:b4:1a:3e:ba:a5:b2:9b:cf:9f:
b3:0a:49:47:c5:cb:37:b2:ad:9a:22:2d:0d:61:b0:
51:b0:b0:d6:0e:68:84:54:2e:f6:2c:53:73:79:85:
98:01:de:8c:68:dd:46:fa:6c:98:98:14:23:8c:21:
38:a3:d3:58:41:e0:76:9a:53:c6:d8:56:2a:9e:10:
84:a7:93:25:d6:01:c6:aa:6b:fb:c5:7e:df:1e:e2:
80:51:f3:ef:82:50:25:bb:a5:19:16:32:00:57:c6:
96:de:40:53:45:d3:84:a3:0c:ed:84:0f:3e:12:9c:
a6:f7:9f:cd:d9:24:5e:f3:27:a5:87:e5:2a:c3:40:
61:ae:2e:bb:bf:01:09:65:80:d7:b7:f0:30:0c:b8:
2f:fe:5b:9e:fb:cd:d9:f1:2c:22:83:dd:2f:18:d0:
18:d7:26:f1:65:f9:10:68:75:7b:a3:91:51:d9:09:
a2:07:36:e0:fb:94:bb:83:f5:fc:7a:8a:79:d1:e2:
e7:09:d3:b3:75:96:03:3b:40:02:d5:6c:0c:09:fb:
7c:5d:8b:73:ed:32:7c:1f:8d:e5:c1:9b:fc:84:fa:
3c:34:c5:aa:24:6c:ae:8c:6e:59:ed:22:d1:a8:52:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:75:DF:8B:62:7E:91:56:40:34:BE:A1:60:E7:C6:28:7B:13:5F:3D
X509v3 Authority Key Identifier:
keyid:9E:5D:4E:BA:F0:D3:D1:EF:6C:07:C7:5D:CA:33:D5:B5:11:3A:42:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1OuvDT0e9sB8ddyjPVtRE6QvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/X3Xfi2J-kVZANL6hYOfGKHsTXz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a15fb0-0aa9-4f4c-91a5-b316d01ddd82/1/nl1OuvDT0e9sB8ddyjPVtRE6QvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a7:59:ba:2c:66:6d:7f:d8:85:ff:5c:c5:46:f6:9c:ff:ba:
8a:d7:f0:2f:b1:e4:31:23:5f:f3:a2:07:a3:ab:3b:49:6d:42:
1d:c2:10:ae:b0:24:b2:28:84:30:37:2c:14:4a:d7:75:1f:00:
d7:36:8d:82:e2:43:1f:73:55:0b:fe:97:51:5c:49:bf:b6:1b:
df:b6:56:d3:35:76:8b:0a:53:51:31:16:46:f5:33:ea:51:6c:
a9:40:a5:95:93:fb:ea:a6:dc:52:70:4b:f4:4f:cd:6f:a2:d1:
56:d9:ca:3d:67:5e:bd:6b:4b:85:e2:d6:74:6d:ac:2f:6c:27:
1f:4a:93:e5:3f:68:21:e4:cc:d8:f2:b0:4a:75:fe:4a:20:11:
f5:9a:d9:92:3e:ea:a2:68:d9:3e:57:68:c8:8d:6f:09:ed:1b:
10:45:f1:f7:3e:be:ab:47:b5:a7:46:68:f3:16:40:8e:f6:1e:
ee:4f:41:1e:49:b2:b3:c3:1b:ae:6c:2f:a1:9e:3a:79:15:64:
40:9b:5a:f2:94:31:88:3b:1c:5e:a9:b7:b1:48:2b:bb:fe:89:
97:09:ab:00:21:7a:0f:a6:e5:a4:59:ce:83:e3:91:86:41:20:
6a:d4:be:10:57:ef:7d:40:50:dd:78:fb:e1:e9:cd:96:58:99:
07:3e:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:18 2025 by rpki-client