Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa
File: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (raw, json)
Hash identifier: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=
Subject key identifier: 44:8E:FB:64:AD:DA:A9:32:CF:83:65:BE:5C:19:31:47:B4:FB:A7:84
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01942444EEA8BEAEE8956F75B1644FA30DD9
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa
Signing time: Wed 01 Jan 2025 23:48:04 +0000
ROA not before: Wed 01 Jan 2025 23:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 130.255.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ee:a8:be:ae:e8:95:6f:75:b1:64:4f:a3:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=448efb64addaa932cf8365be5c193147b4fba784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:82:a6:37:88:24:9d:d0:b3:91:7f:3f:0b:
57:72:d6:2e:f9:22:bd:f7:43:b6:43:1b:35:ce:82:
32:22:02:d0:d6:f9:63:3f:e4:93:8a:2a:47:6d:8b:
2f:5a:00:e9:32:2f:f6:db:72:88:1f:6f:ac:ad:85:
94:94:7c:9e:f9:8f:21:67:d9:55:48:60:59:60:4a:
fd:4a:9c:13:91:d1:39:e9:11:79:ed:eb:57:5c:ce:
96:b0:08:0a:b5:f1:e1:d0:d4:db:43:55:c0:b1:38:
a6:68:6c:29:48:1b:9b:5d:31:1a:ae:27:e6:1a:ac:
e8:01:d0:ad:69:10:4c:06:64:46:ca:82:a5:cb:72:
6c:25:00:86:78:77:41:17:c6:8f:4e:38:96:8b:7b:
51:44:d8:26:e2:f9:ae:5e:77:4c:00:fd:f1:56:8b:
e0:ee:6f:82:a4:3a:85:3c:ad:b2:74:43:5b:c8:82:
b9:44:be:8d:59:8f:c4:33:7f:55:80:2e:58:3c:55:
0c:38:7a:8c:28:33:63:52:ca:71:81:33:6a:08:5d:
02:a6:4e:fc:54:75:06:1c:77:1c:ca:78:ec:ed:d1:
f1:a8:ea:ce:08:6a:50:fe:ce:27:26:98:7c:7a:92:
cf:ec:61:07:48:3e:50:21:4c:d4:93:fd:6e:0b:5a:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8E:FB:64:AD:DA:A9:32:CF:83:65:BE:5C:19:31:47:B4:FB:A7:84
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:52:c3:e8:af:42:89:7c:df:a4:16:a8:47:37:cf:93:07:49:
70:64:cd:53:2a:e8:0e:ef:e1:55:bd:45:22:c7:f4:3e:dc:70:
5c:2c:b0:26:8d:1d:7c:17:38:71:e4:89:88:57:97:c1:64:cc:
16:b1:d3:49:1e:bd:c0:16:67:50:3e:e4:ec:45:fe:87:2b:ef:
a9:01:f7:cb:29:a0:b1:6c:98:87:d2:61:fb:6a:72:b4:b7:7c:
3b:46:5e:45:d5:a6:cb:ce:bf:a2:5b:ed:cc:70:84:11:92:de:
3c:a9:d3:e7:29:08:e1:7d:ed:d1:be:dd:02:c1:74:93:49:83:
4a:a1:71:64:dc:db:c9:f8:73:9a:e7:8f:77:9b:30:98:d7:80:
5a:19:bc:6e:3c:2e:91:cd:51:b9:e8:59:9b:0d:5d:a0:09:15:
57:cd:51:ee:de:26:8d:c4:3a:d1:89:0a:3c:c3:c1:a4:f4:4a:
00:31:61:0c:5d:aa:79:7c:10:33:d9:e5:72:2d:03:19:8c:df:
32:b5:42:82:2e:ee:79:62:6e:47:b6:7c:ec:b8:07:5c:9f:4a:
af:2b:96:28:da:a1:6f:ea:e4:7b:0b:69:26:b1:cd:df:ee:7f:
c2:50:a2:15:84:96:89:b7:15:20:40:5e:d0:17:09:01:71:70:
9c:d8:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:20 2025 by rpki-client