Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/1-gKSfvIN-nj0ZloNW8DzQVcPMUI.roa
File: 1-gKSfvIN-nj0ZloNW8DzQVcPMUI.roa (raw, json)
Hash identifier: jjlcCOoXxhW/QhUDEGdmxYJMbYMGzmfukEFaEb16efs=
Subject key identifier: FA:02:92:7E:F2:0D:FA:78:F4:66:5A:0D:5B:C0:F3:41:57:0F:31:42
Certificate issuer: /CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Certificate serial: 0194258F9CA85CED5502E118A415D56B2461
Authority key identifier: 9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/1-gKSfvIN-nj0ZloNW8DzQVcPMUI.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205908
IP address blocks: 23.252.72.0/24 maxlen: 24
167.160.18.0/24 maxlen: 24
2a10:4cc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9c:a8:5c:ed:55:02:e1:18:a4:15:d5:6b:24:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa02927ef20dfa78f4665a0d5bc0f341570f3142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:12:12:65:ff:4b:d8:d8:d1:09:ce:d2:b9:
75:b7:29:18:26:49:d7:7b:66:b4:dc:94:d3:52:fc:
29:b6:ec:4b:5d:85:19:9c:b8:de:b0:2b:42:38:27:
07:ea:40:fc:83:59:59:e4:c4:7a:fb:94:88:10:90:
ae:eb:17:cd:ba:70:61:db:a9:3d:47:31:f5:ee:5d:
f6:81:8d:d4:da:0e:c4:e5:83:b0:40:bf:40:c0:51:
d8:bb:1e:e6:58:0e:2f:bc:6a:78:4b:f8:e9:0b:f4:
a9:7a:ae:d1:71:ed:d0:1a:68:23:29:70:13:d4:48:
4c:31:e0:8a:70:1f:e6:2f:3f:2a:7e:39:3c:92:0b:
9f:5f:cf:ef:1e:66:49:2d:68:83:49:68:50:71:e7:
e6:8c:c3:cc:b2:4b:ba:5f:cb:f3:56:68:c2:e9:5c:
a1:10:9d:c4:2a:49:79:4b:b3:04:16:9a:ec:9c:46:
7c:0d:15:88:8a:01:ca:06:70:9b:6a:f8:77:52:3f:
45:3f:28:be:7b:59:d8:fa:fb:b0:d8:f1:5b:2b:3c:
5a:08:1c:fd:a8:06:f6:ee:12:fa:b2:89:2f:58:df:
c8:cf:f8:f6:1f:87:27:fd:95:cb:91:75:1a:40:2f:
69:dd:90:6b:ac:b6:c6:60:80:d9:0f:ec:dd:7d:07:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:02:92:7E:F2:0D:FA:78:F4:66:5A:0D:5B:C0:F3:41:57:0F:31:42
X509v3 Authority Key Identifier:
keyid:9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/1-gKSfvIN-nj0ZloNW8DzQVcPMUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.252.72.0/24
167.160.18.0/24
IPv6:
2a10:4cc0::/29
Signature Algorithm: sha256WithRSAEncryption
52:27:a3:4e:c4:9b:b1:9f:61:1c:9e:87:be:e2:2c:7c:80:fc:
be:2f:09:61:30:5a:14:c1:85:9c:b7:d0:b5:c2:1d:e3:a1:07:
49:a0:fa:b0:cc:55:85:0f:99:95:98:1a:70:fb:49:8f:7c:42:
d2:97:00:8f:a3:fd:43:ae:4c:c3:10:0a:a8:ad:f2:05:2c:b3:
98:77:c0:8d:7a:ca:80:c0:15:88:62:69:59:59:82:7e:19:e9:
6d:e2:df:51:40:3d:d5:f1:c8:c6:c8:ef:8e:87:b3:58:5f:fb:
82:23:a5:4f:e7:39:92:f2:db:f5:cb:08:77:45:e4:56:4b:5a:
fd:75:2b:ce:01:27:5c:5e:56:35:a3:2b:f0:54:d8:b6:b6:18:
09:a3:a5:39:49:e8:15:ad:bf:3b:8b:d9:3d:2d:f5:66:50:5f:
11:d3:5b:ba:71:fb:2c:59:2d:4b:e9:d0:10:5d:4f:be:ec:cf:
b7:da:05:ec:5b:14:81:76:49:5e:85:5f:e8:57:60:f0:4e:eb:
3b:7d:c8:83:56:31:b0:58:c6:85:eb:32:65:29:7a:8c:3c:c0:
eb:d0:a6:b6:19:cb:3d:33:04:44:66:ac:5f:12:24:2b:9a:d8:
5d:93:8a:ac:ae:7d:5a:a1:61:61:e7:ff:2b:fc:f9:90:6d:da:
9f:2b:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:32 2025 by rpki-client