Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/1Rt_SkpqLsc_vzP4r0z7b2tue7w.roa
File: 1Rt_SkpqLsc_vzP4r0z7b2tue7w.roa (raw, json)
Hash identifier: J15osw7tUcAvmq1t57qmOfD6oLZpY61SCt4LElFdCCA=
Subject key identifier: D5:1B:7F:4A:4A:6A:2E:C7:3F:BF:33:F8:AF:4C:FB:6F:6B:6E:7B:BC
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 0194258F4A40C78BFF4B7AF46FDA0FF66E66
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/1Rt_SkpqLsc_vzP4r0z7b2tue7w.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200315
IP address blocks: 138.128.224.0/22 maxlen: 24
2a13:90c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4a:40:c7:8b:ff:4b:7a:f4:6f:da:0f:f6:6e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d51b7f4a4a6a2ec73fbf33f8af4cfb6f6b6e7bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e0:d6:a9:66:9f:9a:78:4d:d2:6f:ab:75:d1:
7f:18:e4:a2:4e:69:9c:31:87:94:ac:e0:1a:8f:9b:
ad:30:6d:bd:ac:d4:4c:3a:c0:63:a9:b5:30:6d:cb:
94:d7:f4:83:7c:ff:d3:fb:2a:cb:fd:32:ba:24:c0:
16:7a:7f:2b:60:4c:f9:08:24:97:fd:92:f5:33:13:
ce:24:ef:65:6b:2b:f2:8e:25:30:d9:fb:3d:14:b6:
6d:dd:a4:09:65:dd:1a:43:0e:99:fb:cf:be:0d:58:
47:05:ab:8f:c9:b8:03:c3:5a:96:37:61:b4:25:6f:
cc:a0:58:d4:66:58:4b:79:49:ab:1e:03:ec:9d:99:
5c:11:4a:da:4f:6b:dd:4a:25:a8:95:e8:5a:c7:35:
87:55:1e:69:3e:80:a8:72:1a:b2:27:4c:4b:96:01:
3f:f9:75:76:e0:83:19:ad:89:9a:02:ed:5e:de:1f:
f4:ce:99:4a:55:e9:93:7a:c9:76:36:d2:07:9c:79:
e2:e0:48:c9:42:67:ff:e8:fc:5d:36:41:0a:d1:7e:
75:fa:4b:78:63:f6:c0:d6:95:ae:3b:60:30:9a:03:
e3:6e:3e:a2:17:e8:b9:88:6f:96:a8:b0:b2:9c:01:
31:7e:6e:ef:4c:c1:e3:a6:f8:7f:0a:76:08:18:2c:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1B:7F:4A:4A:6A:2E:C7:3F:BF:33:F8:AF:4C:FB:6F:6B:6E:7B:BC
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/1Rt_SkpqLsc_vzP4r0z7b2tue7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.128.224.0/22
IPv6:
2a13:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:15:43:7c:1b:76:7c:7f:1d:7d:1f:d1:8c:2a:10:d5:25:89:
e6:55:9f:94:3b:e3:56:fd:0d:2d:e6:3f:e6:5e:74:56:ef:51:
cd:cf:4e:67:3a:c2:1f:d7:5c:b1:69:4b:7f:6b:93:82:b0:a6:
7c:a2:d7:dc:6f:62:33:4d:28:16:6f:2b:e2:69:83:af:8a:88:
5f:50:ad:f5:8f:66:ad:63:5f:dd:d7:97:48:c1:cd:7f:fe:04:
fc:56:c9:2f:00:1a:42:9d:37:7b:8b:a0:db:c0:65:b4:d1:11:
44:a2:1f:53:ff:60:91:ec:8d:fa:a1:aa:71:41:bd:2e:83:45:
01:6a:68:74:fa:9c:45:52:fc:ab:dd:9d:b7:1e:68:6e:7b:a6:
41:02:58:d9:3c:24:4f:f7:3a:ea:7f:4e:6c:e2:01:a5:2a:f1:
21:e0:4c:fc:2c:3b:59:e7:da:77:b9:6d:9c:45:de:8e:a4:42:
50:51:a0:e8:fc:11:2d:2c:c1:03:16:63:27:45:07:48:9e:47:
54:09:d0:cb:7a:de:cb:3c:40:dd:1e:63:6c:91:22:15:cf:1f:
31:02:de:e8:19:69:d0:0d:0f:fa:89:ad:cd:69:61:02:5d:48:
32:30:39:5d:44:4d:85:b5:93:ae:65:26:77:4e:67:6b:96:5f:
e8:67:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:40:47 2025 by rpki-client