Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/B5m6j_K3O894W_R_t6V6YidAg_M.roa
File: B5m6j_K3O894W_R_t6V6YidAg_M.roa (raw, json)
Hash identifier: bXrv4zwrH5nVqybqsixx97jvkGY3LFCIFwVY3pH6Bk8=
Subject key identifier: 07:99:BA:8F:F2:B7:3B:CF:78:5B:F4:7F:B7:A5:7A:62:27:40:83:F3
Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial: 019421B23A9A965474256397763DA63146EE
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/B5m6j_K3O894W_R_t6V6YidAg_M.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9989
IP address blocks: 139.123.232.0/24 maxlen: 24
193.24.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:9a:96:54:74:25:63:97:76:3d:a6:31:46:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0799ba8ff2b73bcf785bf47fb7a57a62274083f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:68:29:b3:0a:87:32:e0:cf:3f:36:ef:66:9b:
00:7e:ac:0b:92:e3:c2:ac:7d:36:ea:f2:59:68:61:
0e:3c:6d:f1:80:30:f0:ec:c5:82:49:ab:9c:0d:05:
40:b9:0d:2a:7d:4c:6b:57:d4:53:1c:86:a2:9e:98:
45:17:b6:81:95:4f:a3:8f:df:6c:a0:ac:5a:82:da:
ce:8e:62:bb:0e:b9:8d:78:86:45:7e:af:94:0a:16:
7c:e2:4b:b2:a1:b2:ca:bb:25:54:73:85:30:d9:66:
c7:49:ba:f4:c1:b6:7c:3e:43:b9:5b:54:40:ec:aa:
18:fd:f0:5b:7a:a7:75:ef:9a:33:7a:89:37:a7:70:
d6:4b:83:d9:b7:44:8b:ee:cd:a2:da:03:73:2d:40:
89:03:b2:f4:3f:91:b1:23:d4:7d:22:28:14:4c:e3:
3e:e2:97:b7:e7:59:e2:09:1f:44:01:66:ac:70:01:
48:82:41:60:90:73:6f:f7:ce:b4:ff:7d:26:54:d8:
58:81:23:fd:94:aa:71:50:5a:b6:1c:d7:ab:22:61:
85:ba:e2:1c:05:2d:1f:94:e3:d3:aa:78:6e:0d:32:
fe:62:56:da:bf:1f:09:93:21:dc:b9:fb:7b:8d:a3:
b1:b4:ae:20:47:3f:d5:81:5d:b8:6b:bd:ff:43:fa:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:99:BA:8F:F2:B7:3B:CF:78:5B:F4:7F:B7:A5:7A:62:27:40:83:F3
X509v3 Authority Key Identifier:
keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/B5m6j_K3O894W_R_t6V6YidAg_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.123.232.0/24
193.24.65.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:4c:1f:84:11:b7:86:1a:54:32:83:6e:a6:e0:ee:89:ae:14:
3e:f5:b4:8c:0b:e5:ff:06:e7:d0:f4:b6:bb:ab:80:72:2a:f4:
6a:5b:b9:90:35:73:51:fd:0d:d2:83:8f:d7:64:28:ed:55:44:
96:6b:72:27:0c:3c:81:37:f1:07:bb:8f:2b:ed:ed:25:e5:c2:
89:04:9d:73:f5:4e:af:9b:89:7f:cd:38:38:56:d3:df:c3:02:
8d:c0:63:a2:9f:c9:49:dc:b4:eb:b3:8c:3c:fb:f2:16:a5:32:
e5:fb:ae:65:5f:9d:f6:f5:a5:07:00:d0:0a:76:97:b5:25:6d:
c0:0a:0d:fa:a4:8e:4f:ed:e2:b4:65:61:ed:93:6b:a5:ef:cd:
f1:2e:e4:01:ba:fb:a5:a1:ed:19:b6:0d:59:50:f3:ec:af:f4:
dd:62:3e:70:f4:8b:81:76:97:ac:df:a5:b2:d3:47:2c:36:26:
f7:8c:92:41:0a:2c:4e:8c:2f:73:ee:29:aa:1c:13:ae:34:36:
36:ea:4d:60:1f:80:8f:c8:fe:c4:9e:c4:41:1a:a7:4a:99:75:
54:5b:fe:91:8d:0d:86:d0:b2:5f:8e:4c:8b:ea:06:4a:79:4b:
38:e3:9b:b6:f7:96:4c:26:12:62:c6:75:7b:bd:99:49:a8:61:
b3:50:58:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:53:21 2025 by rpki-client