Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/zn9KEkRPEXMzrQfaPPeIb-wvSac.roa
File: zn9KEkRPEXMzrQfaPPeIb-wvSac.roa (raw, json)
Hash identifier: rtaP7tTmgodgChjfMwf3eyEwf3MnbyF40v94VTxqVS0=
Subject key identifier: CE:7F:4A:12:44:4F:11:73:33:AD:07:DA:3C:F7:88:6F:EC:2F:49:A7
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01941F8C94D1E28AB02DFE0B7991DC4253A7
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/zn9KEkRPEXMzrQfaPPeIb-wvSac.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57971
IP address blocks: 5.59.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:94:d1:e2:8a:b0:2d:fe:0b:79:91:dc:42:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce7f4a12444f117333ad07da3cf7886fec2f49a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:ed:07:b1:e7:2b:0e:db:a2:32:9d:93:fc:
fe:3c:f4:88:7e:7b:29:ed:13:6d:f0:eb:ea:ce:01:
91:7c:53:8f:f7:0f:1c:e1:f1:ab:f8:8c:e6:46:a9:
0b:40:32:d7:60:fb:28:da:1c:8e:7a:69:7c:8c:cb:
48:de:91:24:84:7f:90:e1:b0:3f:76:86:9e:24:ec:
e4:42:91:42:42:51:64:40:e5:85:ec:2f:4e:4d:bf:
68:1a:09:c2:59:d5:0f:e0:28:4f:cc:f2:3f:ab:3d:
a8:26:16:51:8c:06:ae:22:2f:6b:91:6f:f0:fa:c7:
86:11:18:f4:d9:f0:eb:5b:ab:23:7d:1f:74:bb:f6:
62:8e:b7:1e:af:9b:61:fb:3a:80:79:e3:3d:6e:93:
b5:0e:a6:7a:a6:4f:39:cf:a7:fe:97:02:4b:7d:9b:
61:72:34:3c:d2:3f:91:e6:a7:b7:80:61:d8:7f:34:
8c:0e:13:6b:ef:14:96:a3:8d:fb:43:a0:10:e8:d3:
01:02:33:5b:d9:27:b5:8d:b8:17:48:23:6b:55:b1:
5a:0d:33:49:ad:1a:5b:1c:07:39:d2:e6:8d:ad:fa:
e7:91:3c:70:df:45:10:59:c4:4b:e7:e1:fd:16:85:
cc:f0:73:1c:ab:ec:40:d2:45:21:be:1d:8c:ea:27:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:4A:12:44:4F:11:73:33:AD:07:DA:3C:F7:88:6F:EC:2F:49:A7
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/zn9KEkRPEXMzrQfaPPeIb-wvSac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.176.0/22
Signature Algorithm: sha256WithRSAEncryption
12:13:a7:b4:ce:d1:f5:47:35:5c:8b:c6:4a:df:91:31:dd:16:
b6:11:6b:7f:2c:f2:24:69:5a:37:27:ac:a5:d3:ee:32:66:d1:
3d:85:bc:9e:b3:0a:93:6a:a5:0e:cc:07:91:28:50:a0:3f:7e:
ee:d2:98:ca:78:26:bf:0a:89:2b:3b:71:64:49:bc:ab:b2:f0:
9d:23:e5:7d:67:0f:40:d3:ca:c2:c1:d6:f4:b2:83:9c:ea:1c:
48:80:b6:ee:50:f6:98:d3:73:43:16:94:51:2e:9d:fd:d3:8f:
d5:72:65:67:d2:82:c5:3f:f0:e4:fb:18:2f:d6:1c:65:45:b4:
ba:be:b9:b0:c2:57:50:73:56:15:b1:31:2e:3b:f9:de:06:60:
86:86:1c:d7:f2:e4:98:b5:46:99:04:e7:59:d2:29:2d:b4:5c:
0a:9e:db:58:0b:2d:4b:94:91:3a:68:d8:a3:64:30:38:5b:16:
ec:50:aa:56:41:b4:aa:0d:d8:0a:c1:85:75:67:2e:47:53:26:
4c:76:e9:83:13:ca:bc:ff:f4:0a:b2:45:04:24:01:3a:c5:61:
71:b1:af:5f:a5:f4:24:16:37:16:05:89:08:06:4d:e8:91:54:
9e:93:81:61:b7:2f:77:d1:14:49:bd:57:f6:c0:7f:3b:3d:be:
3c:4f:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:28:01 2025 by rpki-client