Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/r1n9f-iDIhQ7maoaPg9-rpamzQU.roa
File: r1n9f-iDIhQ7maoaPg9-rpamzQU.roa (raw, json)
Hash identifier: +iPFSsqnOZoONR9in6jVcNosyQNi5j72bWoI7Qa410g=
Subject key identifier: AF:59:FD:7F:E8:83:22:14:3B:99:AA:1A:3E:0F:7E:AE:96:A6:CD:05
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01941F8C95CC345B8AA4C3651582996A58BF
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/r1n9f-iDIhQ7maoaPg9-rpamzQU.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59494
IP address blocks: 5.59.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:95:cc:34:5b:8a:a4:c3:65:15:82:99:6a:58:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af59fd7fe88322143b99aa1a3e0f7eae96a6cd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:4e:c4:43:b9:ef:b8:8d:c9:6a:c3:7e:e4:
ca:30:1b:40:5e:a1:b4:d7:3b:de:a6:ce:c8:5e:f6:
c4:a2:35:85:4c:1d:96:f0:a5:18:6a:f1:5e:d1:a3:
c0:31:94:b5:c3:39:ee:ea:d8:12:96:92:22:f6:e0:
49:ed:36:7f:81:15:8d:5b:32:6e:45:71:d5:b1:e1:
ad:8e:09:be:b5:19:4f:a6:a8:52:b2:87:b4:e3:af:
ee:38:9d:97:c4:3e:31:25:d5:63:19:40:9b:c4:6a:
df:0d:ba:d9:16:79:df:bb:1f:6f:02:f6:74:6f:58:
cf:7e:1e:07:7d:1f:48:38:ff:6e:12:30:61:6f:c1:
fd:4d:a6:22:3a:82:fe:5f:51:ed:a3:a6:ec:2c:ae:
80:cc:28:cc:41:59:49:f9:93:4b:ca:32:69:2a:b1:
9c:b3:94:e6:4a:f5:38:18:21:0f:b0:b5:32:cb:1f:
ee:25:e7:a0:7a:82:21:ea:7d:d8:39:8b:3c:dd:91:
c3:72:75:68:22:6f:0e:fa:ab:c6:00:6e:d9:a9:76:
12:7f:7a:52:53:c3:38:32:62:9f:a4:fb:a1:73:49:
80:a7:96:d0:b4:c0:7e:3f:b1:38:f8:07:e9:de:00:
fa:d5:ba:d8:a9:79:dc:1a:a8:b0:0c:be:89:14:f5:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:59:FD:7F:E8:83:22:14:3B:99:AA:1A:3E:0F:7E:AE:96:A6:CD:05
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/r1n9f-iDIhQ7maoaPg9-rpamzQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.44.0/22
Signature Algorithm: sha256WithRSAEncryption
69:eb:e4:a4:15:c5:80:45:8b:5b:1f:28:b1:be:b4:ea:74:82:
21:f7:a8:4b:16:b2:35:87:b7:c6:43:bf:c9:39:66:24:88:4b:
77:c2:e9:68:8b:01:b5:a1:05:1d:fd:43:23:87:d2:28:68:a6:
6a:bd:b8:45:47:b4:50:7c:3a:e0:78:6f:c6:76:33:13:d2:fc:
c4:8f:d1:49:37:2e:59:1d:f3:45:fc:95:ce:4a:a5:26:09:c7:
e6:27:b2:f0:94:f1:73:60:7d:59:f9:39:ce:78:09:c0:ba:e2:
8c:80:c1:6c:14:db:59:c6:7d:7d:9e:82:b6:69:28:f2:44:1e:
8f:03:13:3b:97:25:ed:7d:95:c0:f4:d5:0f:55:2d:e0:7d:5f:
65:f0:c8:15:19:db:0c:60:e2:26:1d:ec:74:e0:40:39:a6:b7:
55:ea:24:6c:32:f6:88:e2:22:8a:07:13:fa:b6:28:42:a9:66:
60:dc:2a:81:e9:9b:a2:a6:65:ca:89:6f:08:95:ca:1f:8d:d5:
82:1e:1e:29:48:44:6e:89:1b:93:7d:f0:56:c1:d4:0c:d8:a8:
22:7a:9d:5a:1e:1f:8e:00:47:c0:d7:e4:a0:80:9e:a0:e3:8e:
aa:62:91:5c:9e:c0:3a:15:dc:77:1f:9b:95:e1:42:fe:20:7c:
c6:d3:27:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:32:46 2025 by rpki-client