Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/D4wCbjO_RP9FBGbgF9yMu8ejHEk.roa
File: D4wCbjO_RP9FBGbgF9yMu8ejHEk.roa (raw, json)
Hash identifier: t1nErlMSEECwXjWvAJkKfIdfWAr8lZ7TpdgAigsb7Ao=
Subject key identifier: 0F:8C:02:6E:33:BF:44:FF:45:04:66:E0:17:DC:8C:BB:C7:A3:1C:49
Certificate issuer: /CN=7e862a8ca5acbd6c5dfc24126c33aa0a94e0e1f2
Certificate serial: 019424448AAF2BA344056321D47B5DBF5399
Authority key identifier: 7E:86:2A:8C:A5:AC:BD:6C:5D:FC:24:12:6C:33:AA:0A:94:E0:E1:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/D4wCbjO_RP9FBGbgF9yMu8ejHEk.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15474
IP address blocks: 160.210.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8a:af:2b:a3:44:05:63:21:d4:7b:5d:bf:53:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e862a8ca5acbd6c5dfc24126c33aa0a94e0e1f2
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f8c026e33bf44ff450466e017dc8cbbc7a31c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:a2:a8:1a:24:ea:f6:9d:e0:7d:cd:18:cc:
dd:e6:30:6c:f8:19:f0:94:c1:10:b4:59:45:8d:96:
6a:13:e5:11:0f:3d:21:69:4c:03:6f:09:17:8d:30:
dd:8c:da:21:bc:9c:50:dd:14:93:f6:20:60:78:80:
02:23:f5:4f:40:af:ed:d0:89:1e:cb:0e:78:ad:7d:
af:17:83:35:bc:a2:f4:c8:be:d3:15:b2:22:9a:13:
32:66:cb:72:db:9b:4f:1e:c2:ee:cf:ad:be:60:7f:
14:8d:01:8e:8a:77:98:c6:55:fc:19:91:81:fc:d6:
4c:98:8c:d6:2b:91:51:16:0b:80:ab:af:3c:29:88:
b0:0f:d6:6f:a4:2b:84:e5:7e:8c:fb:d4:34:fe:20:
f8:26:81:76:f4:a6:5e:f2:fe:2f:f5:e3:a3:90:63:
e9:46:51:ec:5b:3e:a6:71:42:80:c8:c9:46:97:6e:
ba:9c:af:d3:8b:47:1c:6f:09:17:76:92:bd:e0:2f:
32:66:b9:51:62:60:d2:d6:f8:b7:82:6a:85:1a:a2:
b2:28:c6:5d:e0:28:cb:46:26:1f:91:e1:2a:93:c6:
92:0b:78:60:df:46:92:22:a3:f9:70:db:2b:c9:c9:
dc:d6:89:80:2d:d6:6e:0a:ce:78:a3:18:b7:64:15:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8C:02:6E:33:BF:44:FF:45:04:66:E0:17:DC:8C:BB:C7:A3:1C:49
X509v3 Authority Key Identifier:
keyid:7E:86:2A:8C:A5:AC:BD:6C:5D:FC:24:12:6C:33:AA:0A:94:E0:E1:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/D4wCbjO_RP9FBGbgF9yMu8ejHEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:25:bd:58:94:6a:21:6b:97:3c:47:c0:4b:19:3d:7c:72:6d:
28:a7:2c:cb:92:d3:e8:1c:35:92:25:7c:14:2d:b1:74:94:82:
9d:00:3f:4f:3c:99:5e:26:b4:fa:ec:3b:61:18:d7:17:eb:a9:
0d:df:a5:08:ea:8a:9b:3a:e8:c8:2d:73:e1:bc:9f:c5:e8:9f:
2b:9d:d7:cd:ad:9f:97:26:a0:9e:9d:17:4e:55:72:73:65:94:
85:a6:84:51:46:09:05:7b:49:6d:6f:82:c5:68:f2:62:12:11:
ec:65:35:70:44:bf:73:15:0f:a3:8c:a1:6f:f2:67:f3:32:dd:
70:9f:95:19:2b:3c:69:bb:9e:c2:50:df:d7:b8:01:05:a7:d4:
d5:3a:ad:55:58:96:2a:a3:58:ef:a2:14:a9:7e:50:a1:cc:f3:
98:89:89:d7:db:fc:d2:d4:0e:a7:ce:8c:ff:17:17:6f:33:81:
04:cb:53:e0:cb:a9:d2:03:3c:a1:13:28:67:7e:c4:a5:39:9b:
e7:5b:86:4b:b7:20:25:d9:5d:44:56:7b:19:0d:eb:fe:61:95:
cf:0f:36:5c:9a:86:50:eb:29:ca:0d:2f:bd:4b:ea:9e:a1:84:
ad:46:31:39:d8:98:b6:6b:7c:2b:27:04:ff:ad:1a:f6:77:1f:
37:d0:8b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:15 2025 by rpki-client