Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/CRBDZSaTks7wtTp9ScNBddrIzqo.roa
File: CRBDZSaTks7wtTp9ScNBddrIzqo.roa (raw, json)
Hash identifier: BTM8I0lGOkr6RTKpsuiZtpe3sV1kyE52Un2pOKiIUmE=
Subject key identifier: 09:10:43:65:26:93:92:CE:F0:B5:3A:7D:49:C3:41:75:DA:C8:CE:AA
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01941F8C93D1178BE1DB1E2BB94EB75DE9AA
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/CRBDZSaTks7wtTp9ScNBddrIzqo.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50083
IP address blocks: 5.59.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:93:d1:17:8b:e1:db:1e:2b:b9:4e:b7:5d:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09104365269392cef0b53a7d49c34175dac8ceaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:bc:64:77:7e:62:0d:40:a5:0f:d9:50:74:
81:93:a5:5c:6e:4b:db:91:ad:a1:77:66:8a:6b:05:
38:f3:35:a7:39:47:b3:24:87:92:2f:20:51:d8:73:
c8:b6:8b:b4:5d:0b:53:d6:68:51:99:10:9d:ae:e3:
3e:92:6e:71:f9:18:4d:18:88:61:16:01:8c:20:c7:
31:3c:d7:f1:1d:86:ee:23:8a:14:c2:92:a5:52:d4:
c6:4a:12:e6:5d:09:a0:62:4f:f2:2a:74:21:8d:35:
ed:4d:02:e9:f0:bf:0b:59:21:76:02:7c:ee:f4:88:
93:04:17:e0:5f:bc:05:f7:8e:66:b7:57:72:43:29:
9f:af:e1:b6:67:59:56:2a:23:41:96:f1:30:e1:7b:
a5:99:84:79:01:0c:de:70:f8:ff:34:a1:81:f6:cb:
2f:4a:24:a3:b6:35:9b:f4:ef:2e:c1:10:ea:18:a6:
d9:46:c1:f3:5b:3d:0b:ee:4c:65:48:b7:0c:d8:1f:
9b:28:97:e8:0b:94:10:24:4b:63:51:99:2a:87:cf:
e3:49:fb:04:ae:96:12:c1:ce:3c:65:0a:3b:e7:57:
e5:63:2e:d2:a4:76:fd:42:17:3e:ee:a6:3f:0f:65:
a6:43:cd:24:a5:fe:2a:76:c4:96:d9:10:83:d8:1a:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:10:43:65:26:93:92:CE:F0:B5:3A:7D:49:C3:41:75:DA:C8:CE:AA
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/CRBDZSaTks7wtTp9ScNBddrIzqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.224.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:30:d5:14:f0:a1:e3:bc:17:a6:a1:75:90:59:d0:e2:24:17:
98:50:a0:4a:0c:80:61:54:35:38:c1:11:2f:80:a7:c0:30:e8:
4d:a6:7d:b4:7f:87:ee:74:c9:a8:a9:25:64:c0:f9:bb:31:fc:
41:ab:e5:50:f9:28:eb:a4:76:73:21:8a:5c:66:a4:ca:30:14:
ce:2e:84:11:09:b9:e9:ad:e7:26:b0:9c:a6:a7:47:0f:a9:47:
53:e1:ca:90:81:cd:78:4b:4c:17:71:5c:3b:8e:0a:b6:f7:72:
b5:5d:87:cd:5c:4e:4a:e9:fb:8f:40:bf:d2:9c:ed:44:59:ca:
05:60:14:05:e5:e6:54:28:15:5d:09:6c:b9:fb:64:0a:51:b7:
08:94:aa:d5:ef:0e:76:99:f7:af:cf:17:2a:88:54:88:82:b9:
43:74:ac:f5:f0:07:66:3d:4c:7c:57:8c:50:5a:a4:da:eb:55:
30:44:4d:1f:bf:c2:e1:89:c4:97:08:8e:0a:1e:b1:a3:f8:05:
89:b7:ee:47:60:12:b5:bc:94:0e:eb:64:79:de:3a:47:df:ab:
e7:29:3a:ad:d1:0a:56:b7:af:4c:63:12:3e:61:46:40:0d:ba:
81:c4:60:24:c0:24:4a:b6:a1:c4:84:e6:05:4b:a1:6a:77:f1:
0b:9b:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:19:51 2025 by rpki-client