Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/ISsILsUzSYSxrDgFgduJJP3Y_Dw.roa
File: ISsILsUzSYSxrDgFgduJJP3Y_Dw.roa (raw, json)
Hash identifier: /5pemKhgRQJ+4gC5neAVdNQKAlIHD5RW1nmlj/cqStA=
Subject key identifier: 21:2B:08:2E:C5:33:49:84:B1:AC:38:05:81:DB:89:24:FD:D8:FC:3C
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01941F8C9824A51FFD65E63B67DBBB832823
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/ISsILsUzSYSxrDgFgduJJP3Y_Dw.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203324
IP address blocks: 5.59.118.0/23 maxlen: 24
5.59.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:98:24:a5:1f:fd:65:e6:3b:67:db:bb:83:28:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=212b082ec5334984b1ac380581db8924fdd8fc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:88:77:83:af:5d:3e:49:d8:ce:55:d3:b3:
e2:4b:01:12:b4:0a:de:9e:53:47:35:29:05:cd:83:
9a:ed:1b:e4:6c:4e:29:f3:6c:0b:89:de:4c:44:93:
16:8c:50:69:a8:d2:c5:cc:4b:63:bb:3c:16:a4:66:
b5:6f:c2:7a:1b:db:26:70:8f:1b:f5:e9:94:ca:49:
7f:2f:26:8b:36:48:66:84:44:d0:73:9d:1f:d0:0b:
2b:c1:13:bc:2a:d7:b4:c6:22:cf:e2:bd:c0:4d:07:
2b:8c:af:ca:aa:74:07:71:ab:a2:b0:44:12:08:40:
10:37:84:aa:bb:71:8f:32:7f:da:f8:24:1c:c0:50:
a7:f3:40:8b:ae:12:94:e5:32:3c:6f:53:14:6e:45:
ab:58:ad:8a:bc:e1:b9:46:cf:9b:78:57:61:f3:42:
7b:0e:40:a3:5a:0d:7e:e6:51:e0:86:8b:86:73:01:
f5:cf:22:57:44:7a:95:44:9c:5a:9d:f6:4b:c8:d7:
61:1d:8b:86:d8:bf:25:46:d1:8e:b5:c1:ed:82:fc:
9e:1c:0a:7d:26:f1:a4:64:ec:3f:a2:95:ba:01:a4:
30:ef:0e:b4:a7:37:7c:ff:81:c7:84:01:ed:31:c2:
d6:f0:fa:05:7a:ad:11:27:85:30:e0:ff:6d:54:97:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:08:2E:C5:33:49:84:B1:AC:38:05:81:DB:89:24:FD:D8:FC:3C
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/ISsILsUzSYSxrDgFgduJJP3Y_Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.118.0/23
5.59.238.0/23
Signature Algorithm: sha256WithRSAEncryption
28:64:98:c8:a6:fa:e9:87:5b:05:26:0b:5e:81:7d:f1:45:50:
77:8a:a8:45:15:28:2d:0f:44:83:03:e1:b1:7d:c8:50:2c:a8:
0d:66:a4:35:5c:25:19:78:0e:09:17:ad:18:ed:07:c1:df:78:
bb:3e:80:a1:72:96:4d:11:0e:24:87:02:c1:e4:e3:33:df:c3:
bb:01:7f:b0:a3:3a:eb:ce:1c:5d:a5:b9:53:6b:21:f1:74:c3:
7f:97:bd:d7:d1:86:f5:cc:98:29:7c:fc:29:2a:5d:61:12:c4:
91:f9:f6:39:e8:2c:a2:2b:ed:39:31:7b:65:bb:d7:cb:ae:fd:
35:f3:df:82:fc:b6:b3:eb:9d:12:f6:e6:13:a9:59:28:97:21:
4b:34:13:58:ad:2c:80:b4:a7:f0:14:cc:a4:f7:59:05:27:74:
e5:38:e1:8e:ae:a2:c6:45:95:df:69:55:f4:3c:ea:9c:be:7d:
0b:07:07:eb:7b:54:ed:77:3d:71:f0:71:34:ac:80:4a:71:85:
00:fb:3a:ea:dd:81:be:8f:55:54:c3:74:36:2d:51:9b:42:3e:
6d:67:8b:41:01:43:b4:d0:ea:33:e1:87:fc:2c:3a:76:44:3f:
fc:69:29:42:b8:a4:69:40:5a:02:e8:44:e8:f5:43:2b:54:74:
07:e8:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:32:52 2025 by rpki-client