Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/1eJwg5skWWcGDXFLNTcOwNfaXOs.roa
File: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (raw, json)
Hash identifier: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=
Subject key identifier: D5:E2:70:83:9B:24:59:67:06:0D:71:4B:35:37:0E:C0:D7:DA:5C:EB
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019426D967D3155A284189F5FB69A6A586CD
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/1eJwg5skWWcGDXFLNTcOwNfaXOs.roa
Signing time: Thu 02 Jan 2025 11:49:29 +0000
ROA not before: Thu 02 Jan 2025 11:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206509
IP address blocks: 159.15.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:67:d3:15:5a:28:41:89:f5:fb:69:a6:a5:86:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5e270839b245967060d714b35370ec0d7da5ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:d1:b3:0f:b4:c4:21:25:22:ca:33:32:82:
37:83:72:c0:e0:72:bb:f1:31:7f:8c:26:dd:8c:fd:
4a:11:31:6d:aa:85:eb:c9:da:c2:cf:a1:6f:b8:8d:
c6:6a:cc:09:3b:24:58:19:d1:2e:53:1e:fc:ce:24:
f8:51:33:a0:d4:47:8e:f4:df:51:d7:64:f2:c4:f2:
e8:70:90:79:2c:c6:17:28:b2:84:0a:c4:a2:01:20:
f3:10:aa:02:a8:8b:fe:31:cf:be:55:e1:6c:af:f4:
d9:ef:0c:83:1b:0f:46:8e:2e:09:85:47:f9:a3:d9:
d6:b6:05:7a:19:aa:42:3a:4e:e9:89:c0:b8:8a:19:
a6:96:05:f0:40:ca:d3:42:c8:e2:2c:c4:9a:47:86:
f4:28:67:4c:63:3e:e2:ee:9e:d1:db:57:e2:c8:a5:
ab:ed:cd:7f:cb:74:4b:81:a6:24:fe:8f:97:76:f0:
51:7c:ea:65:46:41:7d:ef:9a:cb:c9:0d:bf:e2:c3:
f5:12:36:0e:b1:0b:d0:6a:4a:54:7d:4b:4e:09:08:
94:33:0e:eb:ac:55:fa:63:43:b9:69:12:ea:ba:d3:
6c:b7:ee:ff:5f:e9:a0:0d:40:e1:0a:3f:3b:b2:91:
62:a6:94:da:ac:6f:b7:2e:05:92:64:d4:a6:31:69:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:70:83:9B:24:59:67:06:0D:71:4B:35:37:0E:C0:D7:DA:5C:EB
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/1eJwg5skWWcGDXFLNTcOwNfaXOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.15.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:e4:7e:28:67:3f:bb:02:32:24:46:f5:72:5c:6c:0e:fe:ac:
b5:22:88:6d:31:ee:6f:f3:8d:46:2f:b4:0c:d0:20:dd:f2:98:
53:8d:be:86:f8:2a:16:1c:bc:26:1e:8c:80:a9:14:bf:72:9c:
e1:37:49:98:b5:4b:6a:04:87:11:b7:aa:ce:28:bb:27:e2:de:
20:d1:34:53:ec:db:93:e7:0c:86:42:94:10:4d:26:e2:75:35:
46:85:2f:4f:74:99:05:7a:71:f1:e9:7b:41:df:16:68:a7:66:
9d:aa:84:43:e9:84:d1:0a:0b:7f:eb:46:76:23:88:23:f1:8d:
19:cd:8c:0f:b4:61:46:e7:31:0a:90:3c:27:e1:05:3a:d4:3a:
86:87:5e:a1:96:44:0e:f6:16:cd:d5:53:95:f8:3b:07:d5:06:
e3:2e:67:52:db:73:78:b3:77:6d:7f:1e:6e:db:e6:2d:4e:f6:
09:39:6a:1b:d5:ac:3c:23:37:00:7e:14:41:ee:c7:09:99:f3:
1a:cb:f5:90:ff:d1:a6:cd:ad:ef:4c:af:68:28:96:27:5d:59:
8c:f4:cc:01:00:ee:e6:1d:65:d3:81:f1:a5:09:2a:a7:d4:1c:
7b:b7:9d:26:a0:e5:3d:ca:cf:7c:75:1c:8f:88:b2:9e:ea:c4:
fb:2f:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:35 2025 by rpki-client