Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/79tZ0OFyWcTUZbOszA28f9juVmU.roa
File: 79tZ0OFyWcTUZbOszA28f9juVmU.roa (raw, json)
Hash identifier: wVaWjn0UlTR8sLyHneUQke3I0d6x1JhZ/IJ+GJ///xQ=
Subject key identifier: EF:DB:59:D0:E1:72:59:C4:D4:65:B3:AC:CC:0D:BC:7F:D8:EE:56:65
Certificate issuer: /CN=722325ecf368c9148a7c41281d607fa6d804a0c9
Certificate serial: 019425FD5AA7E3B464B1451946BD48827281
Authority key identifier: 72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/79tZ0OFyWcTUZbOszA28f9juVmU.roa
Signing time: Thu 02 Jan 2025 07:49:08 +0000
ROA not before: Thu 02 Jan 2025 07:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 194.15.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5a:a7:e3:b4:64:b1:45:19:46:bd:48:82:72:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722325ecf368c9148a7c41281d607fa6d804a0c9
Validity
Not Before: Jan 2 07:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efdb59d0e17259c4d465b3accc0dbc7fd8ee5665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:0e:6c:59:10:73:e4:70:ed:07:1c:ee:76:
7e:ea:d8:d3:85:9b:ac:11:3d:8c:19:4e:db:b1:69:
9c:32:7e:17:7b:d4:a8:1f:13:9c:45:43:22:3b:a4:
c4:2a:61:b3:2e:e8:b5:c7:8f:58:a1:62:48:7a:6a:
14:7d:b8:9d:ca:f0:05:be:b9:7f:a7:a6:7b:4f:94:
96:03:be:a3:3a:2a:95:8c:da:04:34:8a:1f:d6:37:
8c:68:d6:9a:a0:47:c3:38:aa:75:07:c7:e5:c8:b3:
5d:14:8f:0d:0b:87:8b:72:58:b8:ca:8a:04:c2:e2:
45:14:5f:e9:5d:78:a9:51:53:b4:99:92:1d:dd:71:
b2:4b:a0:a7:fd:5b:35:b6:6c:82:bb:6e:a8:6e:11:
fd:8e:b9:d7:34:d8:3a:b0:c8:1e:a5:01:69:bc:31:
59:c7:ef:ec:e0:97:55:09:44:b3:69:ce:21:d5:d9:
9d:11:00:32:06:ad:1b:94:89:a4:25:27:49:58:d7:
04:80:20:8d:ea:45:44:53:c3:b6:0e:09:90:91:74:
48:67:7a:af:21:ae:f3:dc:ab:cd:bd:c7:3d:e9:74:
b2:b8:fc:16:d4:cb:b9:db:de:ed:07:26:40:b4:2b:
04:9c:32:1f:d2:32:f8:b0:d6:2a:a9:6e:ce:c7:9a:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DB:59:D0:E1:72:59:C4:D4:65:B3:AC:CC:0D:BC:7F:D8:EE:56:65
X509v3 Authority Key Identifier:
keyid:72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/79tZ0OFyWcTUZbOszA28f9juVmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/ciMl7PNoyRSKfEEoHWB_ptgEoMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.45.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0a:09:9b:97:fd:51:1c:4d:1d:4c:b4:f5:15:27:af:0e:da:
69:a8:be:bf:96:f9:76:f2:ff:07:6c:f6:e1:df:8c:39:a8:f8:
c3:78:6d:c2:5d:d3:e8:21:81:b6:39:b3:44:1d:70:72:1f:51:
ef:68:5d:b5:3a:7f:34:13:25:f9:f9:49:9b:98:3d:71:b5:8b:
37:25:6c:d9:21:3a:c9:a1:11:ee:b1:32:7f:8f:35:79:2a:54:
8c:ac:11:3e:a0:f1:02:db:48:74:3f:dc:18:3f:c9:ec:17:13:
83:37:3b:72:32:52:96:33:42:5c:38:63:7d:6b:3f:95:fe:d7:
45:0b:14:b9:87:0c:bc:3b:83:ce:f4:39:d4:cc:8f:88:87:c2:
1d:d9:86:ba:7d:74:42:fa:4d:1e:1a:0d:09:70:4b:4e:95:99:
62:e2:a3:86:ee:e5:9a:2c:26:a7:38:1b:62:a8:8c:5b:fb:52:
9d:ac:b5:ae:6d:f4:d0:83:d5:e5:e4:ea:2a:49:4a:4f:26:51:
eb:2c:c0:b3:0b:17:bd:3b:94:53:7f:52:d8:1a:47:98:8b:cc:
9c:ae:60:5d:e5:be:7c:95:46:81:1c:77:da:6e:21:2b:f4:5c:
e4:a8:f0:43:13:53:7f:92:c8:95:74:8e:ea:f0:78:b7:86:fe:
42:d9:ab:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:10:01 2025 by rpki-client