Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/x05F2Z9Ii5NfBHcv5t9U3DVcvc4.roa
File: x05F2Z9Ii5NfBHcv5t9U3DVcvc4.roa (raw, json)
Hash identifier: TCunqfbRifiNySN7ycYsI0OCZSixtWJdHstGs7qYQWo=
Subject key identifier: C7:4E:45:D9:9F:48:8B:93:5F:04:77:2F:E6:DF:54:DC:35:5C:BD:CE
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9BA204F774B332BFC590774D02F69
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/x05F2Z9Ii5NfBHcv5t9U3DVcvc4.roa
Signing time: Thu 02 Jan 2025 11:49:50 +0000
ROA not before: Thu 02 Jan 2025 11:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60891
IP address blocks: 5.144.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ba:20:4f:77:4b:33:2b:fc:59:07:74:d0:2f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c74e45d99f488b935f04772fe6df54dc355cbdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:ff:75:c4:b1:57:c9:c9:17:5c:09:e5:26:
28:9d:0b:e7:c1:5b:06:f3:83:8a:1f:a7:db:de:b6:
79:51:85:37:1a:fd:93:65:fe:bc:73:bf:89:99:08:
1a:f7:63:36:b9:5e:ba:15:ba:ec:0c:f0:d6:5f:80:
20:85:92:c6:9b:01:d7:64:92:a7:c3:ca:4b:76:94:
2b:2b:2f:e3:39:62:7b:a9:f1:67:19:05:7e:c9:fe:
b7:9a:54:0c:35:94:2d:9f:c0:3f:cf:08:fa:b5:61:
bb:34:35:9f:d8:45:5b:77:c9:c0:2d:44:95:7a:1b:
7a:d1:63:2d:7b:5e:95:9d:c2:b0:37:66:f4:d1:52:
d3:7c:55:00:b5:19:d0:a9:80:c7:2b:cc:be:5c:57:
d1:2f:81:35:93:2e:0f:e5:6d:84:89:1a:e1:1e:f4:
4f:d5:56:71:33:c6:32:36:20:e4:7b:ac:4c:0d:9a:
2c:74:69:14:b9:56:a2:bb:c1:e6:70:cb:73:77:4b:
2e:b3:d6:f7:46:79:36:3d:89:6d:cb:99:33:4c:47:
4b:ea:ca:4d:c3:09:22:4b:9b:b9:77:d4:90:21:42:
0d:d1:97:87:c5:71:f2:e7:d5:f7:33:92:79:89:bf:
d5:a2:a3:17:49:e8:ce:93:3a:ca:4b:e6:e8:57:3e:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4E:45:D9:9F:48:8B:93:5F:04:77:2F:E6:DF:54:DC:35:5C:BD:CE
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/x05F2Z9Ii5NfBHcv5t9U3DVcvc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.126.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:ea:1b:d3:d3:33:ea:27:e7:a3:d2:c3:0d:a6:df:eb:c8:b0:
62:c5:ef:c8:17:07:9d:d8:9d:b1:8c:e5:0d:a3:c1:96:79:e0:
84:48:df:a0:b7:b5:7f:67:04:30:de:0e:13:91:4a:c2:ac:a0:
99:f6:bb:47:41:d0:c9:01:e3:89:4d:26:28:70:8c:b1:14:9e:
c2:01:12:ee:3f:50:30:98:0e:63:3f:1b:5b:2c:39:2d:d4:67:
9b:c7:ba:ea:5b:73:f1:dc:07:22:b8:bc:b0:0f:d0:91:bc:9e:
6f:8a:1f:25:67:ce:1e:4d:6f:bc:ac:f5:e4:39:3b:08:cd:d5:
c5:24:1d:89:86:75:cb:31:ed:cd:e6:ae:cf:6d:5e:07:2e:b6:
b5:c6:97:d8:e7:95:15:80:8e:1c:da:f9:2f:e1:e5:df:71:9d:
af:9b:b7:94:60:23:2d:21:f7:bd:65:b0:2b:d3:33:ea:14:61:
56:96:fe:00:70:35:50:6e:b7:78:c7:d0:83:6a:ff:e1:8c:b8:
dc:e4:57:28:ec:b4:9c:86:94:a0:79:32:2c:6d:c2:c4:4e:17:
be:46:95:fd:d2:1f:84:a2:1b:a2:23:26:fd:80:42:1f:29:6e:
08:c9:b7:cc:cc:62:0f:9d:91:2b:c1:81:29:04:05:36:2c:b3:
91:2b:16:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:53 2025 by rpki-client