Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/Ep2Tt2fI9ZnXq9dEoGDimlfX8vk.roa
File: Ep2Tt2fI9ZnXq9dEoGDimlfX8vk.roa (raw, json)
Hash identifier: Yxb+HnJ6SVbEvdXrvuy0S0wlJigO7ITirWOkyZwJCfc=
Subject key identifier: 12:9D:93:B7:67:C8:F5:99:D7:AB:D7:44:A0:60:E2:9A:57:D7:F2:F9
Certificate issuer: /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial: 019421B20AEC15BD7F363B20BDD11FC85085
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/Ep2Tt2fI9ZnXq9dEoGDimlfX8vk.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 104.129.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0a:ec:15:bd:7f:36:3b:20:bd:d1:1f:c8:50:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=129d93b767c8f599d7abd744a060e29a57d7f2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:25:75:d1:e2:8d:3e:8f:35:ca:8c:27:c9:
d3:7e:de:e2:d4:7b:6b:ce:b4:64:68:88:84:d9:ec:
b5:a9:88:d2:ea:f3:06:dd:08:6b:fa:96:8a:90:43:
47:d6:59:f8:a4:ac:99:77:d1:ca:60:54:cf:2c:a0:
ca:c3:8b:6f:ba:0e:28:b5:cc:86:44:89:c7:3a:5c:
4c:8c:4f:ac:d5:ae:85:12:08:4a:99:e9:fb:03:f1:
3c:58:e5:6c:30:54:ae:b6:4f:43:f0:2c:28:12:f3:
3a:82:66:b1:b3:54:65:8c:c9:e3:66:d5:92:71:bb:
72:9a:f5:d5:07:ce:97:9e:9c:dc:77:a2:42:48:c1:
23:83:ba:f7:94:6b:b2:a0:29:28:33:1b:3e:70:d9:
48:c7:2e:4c:f2:05:35:7f:9d:2c:b2:96:d3:f1:7c:
24:f7:79:e0:a7:14:fa:a0:9e:dd:eb:63:0c:e7:00:
af:14:48:b8:da:4a:51:a4:11:e2:61:b7:2b:6b:e8:
c8:19:f3:6c:6e:a8:fb:31:5f:b4:f6:a4:9f:16:5c:
66:92:69:89:e2:a2:3e:d5:3d:13:70:95:bd:35:59:
ec:93:9e:87:4d:ab:9f:2e:2a:e9:42:e4:a7:1a:13:
fd:27:f8:0f:da:b5:dd:15:8f:af:85:3b:79:2b:ee:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9D:93:B7:67:C8:F5:99:D7:AB:D7:44:A0:60:E2:9A:57:D7:F2:F9
X509v3 Authority Key Identifier:
keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/Ep2Tt2fI9ZnXq9dEoGDimlfX8vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.129.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:84:b9:7f:7d:8b:6e:ad:22:68:80:9c:8d:16:32:db:09:2c:
26:a1:9a:5e:cb:05:12:7b:8a:8e:83:1f:ff:2a:f1:0f:bf:fc:
2b:4e:cb:e6:29:63:7f:e1:5d:aa:b8:87:81:25:72:61:56:05:
e6:13:39:62:bc:7d:3f:85:5e:51:12:bb:2d:72:a2:1b:a4:01:
47:67:61:eb:8d:86:c0:56:c9:84:70:ba:a6:62:bd:1c:79:91:
14:d3:e0:72:2a:7d:b8:14:ec:82:ff:a3:85:e4:60:7c:c0:77:
54:eb:5f:76:4b:03:50:0b:87:90:d2:15:bb:23:2f:3f:a0:d1:
54:a9:97:2c:28:e7:84:16:86:ef:d5:6f:1c:a8:81:ca:78:ed:
45:6f:82:e4:33:2b:8b:bf:5d:17:db:1c:ad:fd:d6:fe:84:db:
72:8f:42:19:6d:c5:33:42:98:77:a2:55:66:d4:2c:0f:30:9f:
27:a6:a8:ff:f5:ff:c8:ca:3a:1c:90:ca:9d:f4:c0:d0:90:00:
e2:93:89:e3:8a:c2:a8:14:d2:d6:d1:42:05:ef:28:11:0d:8a:
f7:7b:3e:68:a8:6d:76:f7:da:21:ec:11:6a:c7:41:0c:c9:e0:
71:66:e2:af:42:05:3b:44:be:1b:b8:31:d1:25:0c:a8:6a:f4:
90:cd:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:09 2025 by rpki-client