Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/rgTCmGX8tJ6KptLHkwYPRrgcbFA.roa
File: rgTCmGX8tJ6KptLHkwYPRrgcbFA.roa (raw, json)
Hash identifier: Im6zDXzG8mKg77Q8HvwTzryfAlv2Th0IrcnwXyEVIC8=
Subject key identifier: AE:04:C2:98:65:FC:B4:9E:8A:A6:D2:C7:93:06:0F:46:B8:1C:6C:50
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01941F8C930F5F24C7860364B6C25ABB566D
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/rgTCmGX8tJ6KptLHkwYPRrgcbFA.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49985
IP address blocks: 5.59.194.0/24 maxlen: 24
5.59.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:93:0f:5f:24:c7:86:03:64:b6:c2:5a:bb:56:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae04c29865fcb49e8aa6d2c793060f46b81c6c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:2c:26:72:c8:8e:d9:f0:03:0b:13:3e:7e:
ee:5b:c3:05:30:c5:47:42:47:d6:65:3a:9a:51:4f:
03:59:25:97:cb:b3:6d:bf:32:09:60:f2:c0:f2:22:
b0:94:36:cd:c7:62:c0:69:06:cb:ef:29:1c:f9:8c:
64:e4:1e:49:f4:fe:55:00:e2:3a:bd:9d:ce:8d:f6:
77:18:7c:30:a2:78:e6:63:06:b1:6d:02:c1:09:c3:
d8:35:24:9a:2c:a3:b9:4b:ce:10:45:b4:9b:ed:c7:
ec:f7:42:21:20:cf:c2:4f:5b:3d:be:cf:8d:c8:bb:
a8:c8:17:89:4d:f5:ee:b2:63:4a:c3:52:93:27:ab:
72:b4:c9:2b:e3:f2:40:ef:cc:03:70:b4:17:0d:7a:
94:14:b7:c8:dd:4e:91:ed:11:34:27:58:32:32:40:
7b:b2:55:fa:7f:50:13:35:e8:a4:3e:5a:8d:c5:ff:
17:a3:f2:00:59:d8:8f:e8:c1:23:54:90:31:bb:53:
f4:06:96:dc:7a:4c:8b:c0:0d:fb:c7:3d:d7:02:96:
0f:b2:26:30:52:54:a4:57:8c:c0:97:1c:b4:5f:bb:
da:49:18:df:ef:51:24:64:5f:37:f9:d9:cc:68:57:
80:51:88:0a:00:cc:d0:da:7c:e7:01:5d:14:1d:78:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:04:C2:98:65:FC:B4:9E:8A:A6:D2:C7:93:06:0F:46:B8:1C:6C:50
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/rgTCmGX8tJ6KptLHkwYPRrgcbFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.194.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:7b:67:a9:52:53:d3:86:a1:ef:b7:28:3c:e0:8f:51:f6:d5:
99:46:6c:be:30:04:4c:88:d5:ab:90:a5:cd:5b:d0:f6:fc:30:
46:8c:9d:3a:2e:04:6b:d8:8c:04:0e:7a:77:10:55:8e:38:ff:
4a:02:6d:e5:66:f5:20:f3:ce:ef:04:2c:e9:25:6b:15:a6:7d:
f9:84:71:0a:b3:d1:c8:f4:d3:2b:cc:ce:97:9b:01:8d:14:21:
54:fc:97:aa:fc:b6:75:38:84:64:05:78:fc:9e:07:65:63:c6:
fc:03:75:05:4d:3d:f4:31:37:1d:56:2c:76:f2:a5:ee:fb:f0:
25:28:cb:e3:08:4e:a4:b2:c6:91:ca:55:dd:22:bd:ff:89:78:
ca:c2:1d:17:80:a3:70:d4:fa:dc:46:19:41:28:69:a8:db:ec:
37:26:12:22:4b:43:3f:e2:0c:40:65:23:2e:92:5a:7d:16:dd:
40:05:3f:d2:a1:5c:38:00:68:e8:61:90:d1:ff:f9:8a:7e:fe:
22:44:92:95:c0:5a:5f:7c:43:a9:d3:2d:50:b0:83:93:1d:a8:
7d:98:90:6f:fe:fa:d0:b1:00:20:a8:37:73:bf:e1:37:2d:25:
49:7e:6c:9e:fa:d9:a3:8f:19:23:e4:0b:21:87:ea:99:78:b1:
bd:61:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:50:59 2025 by rpki-client