Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/bgiAJMTNjL1Os5KB9DmGJG5rsA0.roa
File: bgiAJMTNjL1Os5KB9DmGJG5rsA0.roa (raw, json)
Hash identifier: oTygm6OfFB+BkgipM6FcLA5QHYXj3TYcger2CjnsBxA=
Subject key identifier: 6E:08:80:24:C4:CD:8C:BD:4E:B3:92:81:F4:39:86:24:6E:6B:B0:0D
Certificate issuer: /CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Certificate serial: 01856C0A28FBE46164495991660D61332DF4
Authority key identifier: 34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/bgiAJMTNjL1Os5KB9DmGJG5rsA0.roa
Signing time: Sun 01 Jan 2023 06:34:43 +0000
ROA not before: Sun 01 Jan 2023 06:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 931
IP address blocks: 5.252.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:28:fb:e4:61:64:49:59:91:66:0d:61:33:2d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Validity
Not Before: Jan 1 06:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e088024c4cd8cbd4eb39281f43986246e6bb00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ea:f8:31:11:89:a7:f4:a0:2a:a2:03:e7:6f:
6f:10:ca:d0:6d:e2:4a:b8:a7:fa:ed:ea:14:41:30:
b0:49:5d:43:53:04:bd:11:b7:95:7f:57:c0:99:2b:
ce:0c:0f:3d:2c:d1:30:6e:c8:15:bd:c4:6b:35:91:
75:01:0e:81:0e:53:0a:21:28:65:17:09:bf:90:52:
56:8e:9a:0e:a1:ae:87:e1:b1:e7:c7:d5:00:bd:1a:
0b:0e:d6:e8:17:8a:5b:30:a9:10:9d:bd:3d:e4:17:
22:80:e7:83:d8:38:34:2d:5b:31:29:c2:ff:5b:99:
16:39:21:5d:1c:72:cb:04:6f:6e:4d:a5:51:9f:d7:
3e:fc:45:48:76:7d:72:e7:89:7e:af:8a:bb:3d:c9:
03:ee:07:eb:f0:7b:ba:2f:23:92:59:a1:d0:89:57:
37:c9:90:c0:88:14:f4:a5:2c:dd:c0:07:9d:f5:34:
17:01:bb:b5:0a:63:be:05:ea:a5:fd:72:bb:50:9e:
a6:a4:00:3a:d4:6b:19:18:70:04:b0:9f:21:9f:71:
b7:a5:40:8a:44:7e:84:8e:65:e9:67:90:3c:4f:0e:
7a:38:38:63:11:1f:28:2a:b9:95:3f:35:d6:8a:3d:
c5:77:06:8e:f3:c6:3c:6e:0a:88:21:0d:9a:29:3e:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:08:80:24:C4:CD:8C:BD:4E:B3:92:81:F4:39:86:24:6E:6B:B0:0D
X509v3 Authority Key Identifier:
keyid:34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/bgiAJMTNjL1Os5KB9DmGJG5rsA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1e:1f:26:e6:da:20:19:23:d0:9a:00:92:9c:98:53:c0:69:
6b:d9:b7:52:5c:20:ce:02:3c:a8:5a:9a:35:2b:89:6d:1b:da:
83:99:1d:fd:7e:e9:81:71:76:8e:0b:fc:85:89:a4:c8:38:05:
a6:83:24:a8:89:25:7d:06:4a:3f:a6:b1:c4:84:6b:e9:64:c1:
50:9a:d3:f5:4f:42:50:19:51:e3:94:e5:eb:ce:19:b9:69:51:
b7:fe:a1:23:2a:2e:3c:0d:c1:a2:6b:cf:c4:78:bd:f0:43:b7:
fe:78:8f:a0:2e:a7:51:3e:9d:4b:c2:75:47:8a:ad:f5:fe:6f:
d0:24:e5:10:de:ac:b3:32:4f:91:5d:d8:4e:62:e3:d7:f9:0e:
4f:fa:e0:29:95:3a:dc:c7:d8:b8:3d:17:0e:79:08:9c:86:30:
dd:37:62:a4:fb:82:11:72:07:60:24:71:7d:90:08:c5:f7:a1:
d6:f2:69:85:af:c1:07:4a:ac:5b:ab:21:56:22:05:03:74:56:
f7:ae:75:48:ad:29:c6:c1:67:51:6a:2b:ed:6d:21:63:ba:7d:
ad:65:49:a1:12:05:59:60:cf:92:84:9a:f4:a7:74:a7:8e:87:
0d:dd:cf:54:3f:58:6b:ac:01:bc:19:5a:af:1c:2a:03:81:8e:
0c:c0:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:14:52 2025 by rpki-client