Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/1-dpIOgQrHNlMUsxt6C2Ztf5nfuM.roa
File: 1-dpIOgQrHNlMUsxt6C2Ztf5nfuM.roa (raw, json)
Hash identifier: pCUJMhojWf39aVt/QyofbsbuGjc8Gizw3ZJ2MSqOsTA=
Subject key identifier: F9:DA:48:3A:04:2B:1C:D9:4C:52:CC:6D:E8:2D:99:B5:FE:67:7E:E3
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 01942445A81597946F3DBC3CB577A49805D8
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/1-dpIOgQrHNlMUsxt6C2Ztf5nfuM.roa
Signing time: Wed 01 Jan 2025 23:48:52 +0000
ROA not before: Wed 01 Jan 2025 23:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60594
IP address blocks: 155.133.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a8:15:97:94:6f:3d:bc:3c:b5:77:a4:98:05:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Jan 1 23:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9da483a042b1cd94c52cc6de82d99b5fe677ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:1e:01:d2:01:e7:e0:4e:1b:8b:32:42:68:
7e:c0:1a:5a:64:f1:66:13:dc:fa:8b:ce:07:83:51:
f2:61:35:e5:7f:2d:51:41:0d:39:dc:4d:89:65:a4:
90:78:c6:14:97:27:02:71:d4:f3:97:ea:f7:13:e6:
3e:34:d9:9a:34:07:69:03:25:b1:df:7f:9d:bf:a5:
29:df:1f:ae:09:51:21:76:21:0e:8c:6c:d1:32:1d:
da:bc:c3:d3:6b:52:2a:cc:1e:be:a1:e2:ed:6f:fb:
f9:af:21:fa:cc:80:00:07:b6:17:28:c7:e6:ed:fd:
05:5f:05:57:8f:e2:dc:9c:04:de:96:4b:c8:18:26:
c2:3e:f4:7c:66:4b:6b:e9:90:de:43:b6:8a:39:55:
74:58:7c:31:49:57:8a:da:da:cf:18:51:3b:27:43:
1c:53:f5:7d:64:df:3c:71:c1:04:f6:ed:1b:af:6d:
50:82:9b:66:98:f0:31:be:12:a0:1e:88:91:08:76:
9b:3b:ab:34:0b:62:e1:a2:a6:c0:94:d4:17:9c:7e:
fa:96:60:87:cb:86:39:fa:b5:a6:63:64:54:29:09:
7a:a2:b4:a7:e2:26:9b:fc:5d:3b:a3:61:60:e9:6d:
32:a3:63:e1:73:0a:1e:fc:0f:90:9d:73:d5:25:44:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DA:48:3A:04:2B:1C:D9:4C:52:CC:6D:E8:2D:99:B5:FE:67:7E:E3
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/1-dpIOgQrHNlMUsxt6C2Ztf5nfuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.32.0/24
Signature Algorithm: sha256WithRSAEncryption
13:3e:74:85:74:bb:1f:af:25:d4:d2:4c:45:23:70:70:f5:6a:
b4:e0:64:98:f0:7c:e1:88:de:bd:33:6b:b2:a2:c2:cf:45:93:
26:b2:19:f2:fd:75:35:4b:c8:73:24:eb:69:54:12:3e:6f:64:
d2:50:4a:77:7c:16:bd:3f:c3:e8:ff:5f:1b:94:70:2c:dd:25:
9c:0b:47:4e:b2:b1:3d:70:da:25:92:92:7d:be:6a:76:82:91:
92:9f:4b:0d:85:03:cf:32:39:79:71:1e:e5:89:82:05:eb:a5:
71:7f:0a:96:c6:58:45:20:7a:8a:88:68:98:65:62:7d:b6:6f:
6c:d0:0d:9c:52:4e:f8:f1:6a:1a:55:f3:b8:47:81:e4:6c:0f:
e5:2f:1e:5a:d0:bd:60:cd:f5:2d:59:41:3a:45:5d:d0:59:e1:
38:87:84:38:29:78:49:27:c7:45:aa:8a:77:a3:7f:7d:21:23:
84:49:6d:75:2b:d0:3a:7b:d6:11:b8:2d:95:2b:e9:66:07:3a:
3d:14:4e:73:f1:9f:ac:a1:5f:75:d0:bd:25:9c:56:53:6d:3a:
81:8f:5a:87:f8:48:d9:41:c6:7c:65:14:b9:c8:b0:af:51:32:
78:cf:1e:bd:40:0b:85:f3:36:88:77:45:79:f5:ae:2e:d5:3a:
9d:dc:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:50:35 2025 by rpki-client