Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa
File: CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa (raw, json)
Hash identifier: PZfZ1+zaF0Gne48BiqHvjg73fyl9yH1GS45Ddth2ZI4=
Subject key identifier: 0A:90:06:69:87:76:97:C7:C6:A3:CB:EA:03:DA:C4:CD:29:F6:25:4C
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 0194258F3FB5345291B9C21ED2A074993F87
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa
Signing time: Thu 02 Jan 2025 05:48:52 +0000
ROA not before: Thu 02 Jan 2025 05:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44215
IP address blocks: 79.99.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3f:b5:34:52:91:b9:c2:1e:d2:a0:74:99:3f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Jan 2 05:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a900669877697c7c6a3cbea03dac4cd29f6254c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:db:bf:5a:94:30:d0:43:3a:b2:47:13:1d:
fe:c5:69:90:b8:4f:26:06:31:67:29:99:37:37:c0:
ce:d7:e2:35:fe:5a:d4:10:e2:06:fc:5f:cc:cc:52:
36:a4:cd:2e:23:ff:82:eb:36:64:d1:98:e3:e7:41:
ec:9e:f8:32:2e:b1:a7:47:9e:4d:a7:9f:20:6a:76:
2f:9f:bd:5c:8f:a8:1b:a9:41:88:c0:d7:8c:26:e2:
68:1d:0b:0c:f9:e9:00:5a:4e:a9:ef:2d:89:e6:9c:
a9:09:18:8e:dc:fd:1b:2d:11:a2:b9:dc:85:72:06:
7a:d0:4d:7c:16:bf:c0:38:96:b9:77:79:6d:77:e9:
f7:de:b9:25:06:7f:f7:9d:3f:1b:de:94:ec:ee:34:
0c:bb:bf:76:d1:99:41:69:4e:22:f2:07:a3:a5:cd:
e5:f1:dc:1c:e7:8d:c7:99:b7:a0:06:36:67:85:50:
c7:bf:e7:00:ba:78:11:20:da:18:8a:f2:d0:2a:76:
6b:a5:45:2a:94:6f:96:32:ad:f3:01:8a:83:2d:45:
fc:3e:5b:0c:19:f1:f8:d4:f6:dc:38:75:82:be:8e:
e5:7f:d7:98:cf:23:9f:fc:ed:8a:d9:93:7a:8f:0b:
03:32:43:46:21:3b:4e:c4:84:5a:74:a6:9b:0b:e6:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:90:06:69:87:76:97:C7:C6:A3:CB:EA:03:DA:C4:CD:29:F6:25:4C
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.97.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f7:a8:d5:68:f0:04:4d:00:c9:37:c2:13:33:aa:42:94:3f:
3a:1d:4f:86:0c:c0:07:8e:25:16:b6:fc:74:53:9a:a6:99:ae:
d7:63:51:14:a9:0f:dd:30:34:84:86:1c:6d:8b:bf:06:08:b3:
ee:2a:1c:25:99:a5:29:bb:a4:aa:eb:79:e2:8e:b1:61:8a:ee:
77:af:25:b4:3f:d8:4a:73:69:c6:3b:d7:10:f0:2f:ef:e3:a8:
95:07:7f:0f:e2:36:7f:b0:78:7f:56:06:94:b2:a0:b5:2e:dd:
23:2b:24:8c:a1:da:96:69:be:aa:d8:77:db:ab:b5:e0:19:6b:
96:52:7d:28:26:b2:00:3a:99:f6:f7:fa:34:15:82:8b:60:08:
bc:ab:60:bb:38:d5:5d:99:9d:9f:71:19:0f:e0:be:4a:48:70:
58:a1:1a:7a:38:81:ff:0d:d8:e2:65:d4:0c:7e:cb:21:55:f4:
99:59:1a:05:30:19:f9:78:33:8d:ba:ef:22:7f:04:9b:0d:d6:
50:86:52:c8:c1:9e:94:43:ae:19:f6:30:1e:f1:86:f9:16:89:
d8:99:c7:61:84:90:03:d2:8c:50:b8:9e:1d:41:12:4e:1d:29:
3a:fe:b4:a1:99:d6:1c:d6:16:3e:0f:b3:8d:28:e7:dc:df:96:
f4:24:5c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:44 2025 by rpki-client