Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b70637-9132-4fa7-b82e-406809e639cc/1/TDQx3etdEdRILcqvGP8-qpHFON4.roa
File: TDQx3etdEdRILcqvGP8-qpHFON4.roa (raw, json)
Hash identifier: Ehg2lGevI/sZJ40i6g6pMuUiQLMNcxgJxOkvLFq2p+s=
Subject key identifier: 4C:34:31:DD:EB:5D:11:D4:48:2D:CA:AF:18:FF:3E:AA:91:C5:38:DE
Certificate issuer: /CN=ec3931ab2712cf8820a58dcce742335d8efa3312
Certificate serial: 01884E8033DA6ECC5351E9C6C901D3FC2AE6
Authority key identifier: EC:39:31:AB:27:12:CF:88:20:A5:8D:CC:E7:42:33:5D:8E:FA:33:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DkxqycSz4ggpY3M50IzXY76MxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b70637-9132-4fa7-b82e-406809e639cc/1/TDQx3etdEdRILcqvGP8-qpHFON4.roa
Signing time: Wed 24 May 2023 16:03:24 +0000
ROA not before: Wed 24 May 2023 16:03:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198193
IP address blocks: 5.181.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:80:33:da:6e:cc:53:51:e9:c6:c9:01:d3:fc:2a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3931ab2712cf8820a58dcce742335d8efa3312
Validity
Not Before: May 24 16:03:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c3431ddeb5d11d4482dcaaf18ff3eaa91c538de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:06:36:e5:47:c8:c8:90:81:d3:e0:e8:d8:
42:d2:15:67:32:ff:a3:ab:0b:93:41:aa:c8:70:c7:
b9:ea:3d:08:ba:50:84:16:ae:01:77:b7:bc:15:ca:
04:2c:0c:ca:1a:73:9d:4d:b9:c9:2d:6c:70:71:80:
6c:c0:67:75:14:92:10:2b:99:13:23:df:6e:9f:d9:
d7:da:42:10:4c:78:9d:7e:d6:f6:e9:73:30:16:74:
5c:4d:8a:6b:7e:7f:b8:d8:a3:08:c3:3b:c7:66:b2:
c6:eb:f8:fa:30:e3:a9:a0:5c:5e:88:70:7d:29:0b:
41:e9:b8:7e:9a:c5:cd:1b:de:31:ad:e5:3b:23:be:
b8:d6:f2:b8:60:ba:d8:22:73:15:e0:b7:94:43:50:
24:b8:58:8e:00:25:ae:83:23:87:06:d9:4f:9b:d2:
2e:c7:ce:f2:ee:3c:fd:41:68:8c:9a:c7:93:4a:66:
83:29:80:de:fc:b7:2d:14:c9:a1:e5:ad:b8:09:9f:
47:29:ef:20:97:d2:51:a5:2a:3b:d4:76:ee:e8:c3:
e8:d5:8f:d1:11:c4:ea:14:d8:4b:98:75:da:2e:89:
c0:ef:09:ed:fc:5a:36:09:40:c6:96:f0:3d:4b:cc:
67:7c:c0:bb:42:d6:42:6f:31:c1:7b:e4:99:de:bf:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:34:31:DD:EB:5D:11:D4:48:2D:CA:AF:18:FF:3E:AA:91:C5:38:DE
X509v3 Authority Key Identifier:
keyid:EC:39:31:AB:27:12:CF:88:20:A5:8D:CC:E7:42:33:5D:8E:FA:33:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DkxqycSz4ggpY3M50IzXY76MxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b70637-9132-4fa7-b82e-406809e639cc/1/TDQx3etdEdRILcqvGP8-qpHFON4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b70637-9132-4fa7-b82e-406809e639cc/1/7DkxqycSz4ggpY3M50IzXY76MxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.96.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:ad:37:af:ad:2f:9a:eb:4d:a3:5c:54:7c:75:55:9b:6e:5e:
8d:6f:3e:4a:ed:b5:e3:72:72:67:59:a7:e0:62:61:cc:93:e9:
81:f6:de:c3:d2:e9:07:48:36:7a:2d:e4:6c:ab:0f:48:4f:d3:
67:65:6f:81:02:88:0a:7b:82:c9:0e:52:47:7e:17:58:94:b9:
a7:73:1e:0d:79:79:40:0e:63:2c:28:53:72:54:c8:f7:a9:3e:
dc:21:6d:10:df:09:29:20:ce:87:39:e7:9a:73:47:c6:4e:f2:
58:40:1a:ba:df:cc:24:27:13:6d:d2:11:8a:7f:2a:94:26:c1:
7b:54:f2:df:e5:04:23:d0:e2:4f:b6:d1:07:af:cf:d9:34:f5:
84:cb:35:43:73:70:5e:de:a9:79:f8:8e:48:ae:a5:b2:52:1f:
0e:44:00:87:4f:72:62:75:2e:c0:ca:2b:f1:7d:8f:ca:07:5c:
e5:62:0c:06:f0:cd:b7:c5:f0:5b:5c:a5:a0:23:88:19:68:5f:
6b:4e:fd:56:e1:42:76:5e:6b:da:e3:22:50:3f:4f:22:08:44:
a9:be:11:96:e7:4c:e3:17:52:73:01:54:60:5a:9f:0c:8a:f9:
4d:57:8e:9d:95:a1:9e:41:67:ea:f3:49:2a:2b:7a:e7:10:20:
98:03:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:39:58 2025 by rpki-client