Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa
File: JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa (raw, json)
Hash identifier: PGrtrfZNHqKpdplaHtlzlb/8zTI8cEQQrTdbVPKqLz0=
Subject key identifier: 27:03:A5:5F:31:EC:D6:B7:46:55:79:64:54:EA:99:5A:EC:73:FB:22
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 019421442D1829957DE0FEE8900F2EEA8521
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49065
IP address blocks: 5.252.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2d:18:29:95:7d:e0:fe:e8:90:0f:2e:ea:85:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2703a55f31ecd6b74655796454ea995aec73fb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:dd:dd:d5:48:3b:2d:55:b0:4e:f8:4d:77:
1d:d4:4e:15:99:76:41:10:c1:53:61:ae:7c:fa:c6:
fc:16:4d:a2:51:57:2e:e3:ec:a2:66:04:9b:5b:6e:
e4:21:78:40:b9:10:37:7d:2f:d5:15:19:ef:ef:9c:
7f:61:f8:6e:bb:ba:0d:69:1b:9d:bb:78:79:10:ac:
65:0a:f4:f2:1f:cc:94:91:f4:cd:7e:0e:f9:7e:d8:
a7:4d:36:95:60:44:aa:5a:39:fe:8a:5a:23:f8:b6:
0f:54:e9:51:d4:08:af:2f:a6:1f:44:35:08:2e:f4:
96:13:ed:ae:4c:1a:af:be:70:8e:be:85:83:d4:03:
82:40:6b:f9:81:c8:8e:36:a9:37:32:fc:ac:9f:cf:
16:da:53:09:5d:8b:26:c7:e6:d7:0c:97:c2:2b:cd:
01:d2:ac:53:c9:25:d6:41:21:be:86:1c:6a:ee:b1:
a8:22:52:6c:1f:02:66:03:67:5d:e1:d9:5f:32:6c:
84:3f:9a:b4:16:1a:c7:a1:67:2d:dc:97:08:72:1a:
8d:ba:b8:cf:4e:7d:47:d4:e0:04:d9:83:71:14:59:
bd:75:8c:42:c0:eb:ce:03:6e:40:49:51:e2:9a:92:
4e:c0:cc:06:89:cc:2a:b4:d8:f8:4b:5b:54:d6:ff:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:A5:5F:31:EC:D6:B7:46:55:79:64:54:EA:99:5A:EC:73:FB:22
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.129.0/24
Signature Algorithm: sha256WithRSAEncryption
21:da:be:c1:ca:b4:f1:f5:95:9d:39:ea:81:6a:41:34:1a:f3:
24:a7:03:73:65:88:75:6d:cc:61:95:ba:57:50:5c:99:f4:57:
d6:55:e3:7b:7b:8e:c5:09:74:89:83:ff:70:21:5a:72:d7:f7:
da:69:61:73:e5:43:60:30:a7:71:c9:32:d2:1f:55:92:15:f7:
98:5c:14:23:27:d1:33:6d:cf:43:81:e1:03:c8:4a:84:46:7f:
9d:c1:90:4f:84:a3:ed:e2:b9:eb:92:d6:33:72:66:17:26:de:
50:b2:24:e5:f9:a6:ea:bd:4a:f1:90:f6:98:71:48:ee:dd:f3:
56:60:37:7c:d0:0a:3e:5d:81:80:a3:80:c0:96:d4:05:e9:93:
8b:27:45:4d:5f:74:9e:73:ec:d0:d9:07:2c:92:07:66:07:5a:
05:5a:16:72:2f:bd:54:c2:cc:08:27:95:5b:7a:db:f4:70:84:
73:71:4a:82:23:f0:84:d5:18:c3:5b:80:4f:9f:e2:57:a2:40:
16:68:d8:2b:39:b4:6f:4a:33:ef:d6:8b:97:0c:63:6e:d9:b9:
ff:c5:07:2a:42:11:d9:79:b9:8a:17:33:f5:78:7b:9a:4f:d5:
47:2e:13:3e:aa:ca:f5:57:bc:a3:19:95:ac:f5:c0:03:3c:fc:
27:cf:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:04 2025 by rpki-client