Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/5RHR4zhI7Lh6UskSoupIdLiT6uY.roa
File: 5RHR4zhI7Lh6UskSoupIdLiT6uY.roa (raw, json)
Hash identifier: LhKGLgI6k0VwRCStke21s331Qq2ZzZxgvJPlT2x0zwQ=
Subject key identifier: E5:11:D1:E3:38:48:EC:B8:7A:52:C9:12:A2:EA:48:74:B8:93:EA:E6
Certificate issuer: /CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Certificate serial: 0185E92991556E9E60DAC81E7714102D339B
Authority key identifier: 83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/5RHR4zhI7Lh6UskSoupIdLiT6uY.roa
Signing time: Wed 25 Jan 2023 13:41:33 +0000
ROA not before: Wed 25 Jan 2023 13:41:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 212.115.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:29:91:55:6e:9e:60:da:c8:1e:77:14:10:2d:33:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Validity
Not Before: Jan 25 13:41:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e511d1e33848ecb87a52c912a2ea4874b893eae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:c5:38:c8:c6:59:c3:91:6d:9b:7d:25:55:
36:8f:57:d2:b2:25:f0:73:89:d2:7c:2d:39:ce:99:
c3:6b:fe:27:0f:fb:f7:ff:c5:84:3a:60:6e:a4:79:
d0:16:c6:54:4d:a0:c1:20:f0:14:30:66:dc:6e:7a:
ae:f5:e9:54:bb:1a:d6:76:80:ed:f0:69:84:55:15:
37:ca:98:0c:ad:3f:2b:a3:16:0b:6f:bd:db:42:a7:
97:e8:c6:f9:da:d3:4b:ef:50:50:ea:0e:7f:25:e2:
0e:e6:1d:7a:c1:2c:0d:fe:d1:dd:a2:9c:f0:2b:5e:
37:08:1d:b4:d4:53:7a:ef:19:5a:7c:62:a3:95:a6:
68:66:14:c8:40:bc:0d:30:bd:52:7c:38:66:db:82:
2a:1a:1c:6d:06:60:57:2a:cc:39:aa:f4:1c:6d:30:
f4:82:77:c5:b0:29:06:a4:33:56:20:2f:0d:14:fc:
a6:0f:1d:87:2c:a7:13:9f:da:78:dd:d9:fa:23:d3:
ea:ab:71:25:d4:fd:04:27:43:ad:a4:f4:20:34:23:
b9:a1:ce:f3:13:0a:93:02:b8:cb:b5:09:bd:f9:12:
b2:46:2f:63:51:5d:b8:98:2f:97:86:3a:7b:36:3a:
e4:a2:75:d7:2e:dc:c3:59:db:66:04:e4:60:b1:c4:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:D1:E3:38:48:EC:B8:7A:52:C9:12:A2:EA:48:74:B8:93:EA:E6
X509v3 Authority Key Identifier:
keyid:83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/5RHR4zhI7Lh6UskSoupIdLiT6uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:80:05:0e:2a:7a:8b:f8:13:0c:9d:c8:94:b3:cf:b3:bd:f8:
d8:f9:63:3c:98:0d:46:9e:0b:79:43:0d:e8:71:df:72:a3:62:
3d:25:89:5c:cc:b9:b7:bd:12:eb:3a:66:e6:62:0e:3e:f3:58:
6b:94:8a:23:b2:4b:8b:f4:41:4a:27:52:f6:d2:fa:5f:13:dc:
74:75:ca:fc:f3:ef:9b:e5:a8:5a:47:b8:c5:af:11:8a:3c:1c:
ce:b4:2c:1f:78:0c:ed:34:3c:2d:0f:28:de:8c:e6:6a:c5:e0:
81:06:c4:9d:fe:4f:07:5c:72:f8:37:17:e3:6e:b3:14:48:b4:
c3:b8:90:b6:a3:57:96:e3:e5:95:74:e7:fb:bd:e1:06:9e:26:
2c:5d:a4:8c:73:a6:c1:73:e8:ce:60:29:76:a1:6d:a1:93:be:
9c:9e:00:a4:55:7e:27:1d:6a:54:2c:66:93:44:10:d3:f6:81:
a8:56:60:96:ee:53:77:15:fc:83:61:c1:d1:ee:a2:55:58:1f:
1c:d5:40:c2:2d:4e:28:21:79:6c:2a:48:bb:88:3c:2a:66:74:
e5:39:7f:8e:9f:c7:c6:24:ae:b8:1b:36:d6:20:55:4a:80:9b:
81:54:4c:41:23:77:58:cf:48:5f:7e:68:8f:de:b0:82:94:43:
90:ab:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:31:55 2025 by rpki-client