Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa
File: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (raw, json)
Hash identifier: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=
Subject key identifier: D2:E3:9D:EA:99:1B:55:C6:63:3E:4F:8A:6E:BF:B9:B4:50:6A:64:25
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0194266C22B56A78DA1A570B289DCC475725
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205007
IP address blocks: 138.124.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:22:b5:6a:78:da:1a:57:0b:28:9d:cc:47:57:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2e39dea991b55c6633e4f8a6ebfb9b4506a6425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:29:c0:35:82:f1:3d:f8:09:09:c4:67:69:
cc:06:09:4b:b4:bf:25:5d:51:a4:8d:ee:3e:4a:d8:
ca:4a:0d:c7:d2:33:e0:c7:b8:ad:10:20:f0:db:02:
6e:c7:0b:7f:03:bd:dc:0b:33:13:1f:6f:e5:6a:55:
d4:08:48:28:2f:15:ba:b8:8e:62:e3:80:13:d5:44:
eb:80:f9:7a:3a:44:58:f2:8f:a8:7e:45:32:bf:eb:
84:00:24:2a:50:b1:54:ee:90:8c:a9:03:83:42:7c:
39:9f:f6:c1:37:d3:8f:56:85:50:d8:54:ef:32:39:
a8:71:dc:6d:ac:72:23:8c:56:c7:f6:9a:89:06:4d:
9e:aa:c6:83:1b:75:64:df:6f:6d:d2:1b:f8:06:8a:
31:ca:70:e4:3e:94:62:42:ce:56:ea:99:96:6a:da:
2e:44:9d:df:37:37:32:05:d8:de:79:9d:dd:c9:88:
65:ac:00:fd:c5:ff:80:75:8c:83:0d:00:c1:9f:b2:
ed:69:4c:ce:23:63:b7:aa:a7:df:dc:18:db:7f:5a:
52:5f:86:67:7b:b0:67:b9:72:c1:d9:73:c2:16:58:
f2:94:8b:49:4a:f5:ba:37:12:99:84:98:d0:82:b2:
fb:85:e3:0d:58:e6:b7:ed:5f:7e:38:f2:08:d5:56:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:9D:EA:99:1B:55:C6:63:3E:4F:8A:6E:BF:B9:B4:50:6A:64:25
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:75:8c:84:4e:ef:4a:af:3d:83:2c:fd:40:fc:90:86:ea:0f:
ab:29:d2:64:2f:90:a1:ab:ec:fd:a1:60:f2:b0:b3:d4:d3:24:
dc:68:1a:61:11:c0:6b:e1:93:3d:38:0c:93:7e:19:10:2b:f4:
81:e8:ff:1d:22:bc:d2:7e:a4:27:32:36:02:4f:47:2d:d5:7e:
23:aa:25:00:a5:3b:9e:5e:60:97:e1:f2:29:dc:64:a1:03:31:
d4:24:8a:e3:fa:38:fc:1f:4e:6f:97:72:7b:1f:35:a3:50:42:
d6:5a:d8:59:d6:63:8b:f4:2f:a0:8f:80:2a:68:5e:d4:c4:e8:
bb:c3:bf:62:ae:e8:c2:a2:03:a3:99:a1:6a:9e:92:2f:1a:30:
14:18:76:e9:99:e8:dd:8d:8a:15:d2:4d:ef:99:6c:9c:5b:89:
4a:a2:0b:b7:a8:a0:7d:bc:5b:28:04:95:af:9b:4a:aa:72:27:
01:b2:11:2b:bc:4b:19:1b:29:0c:f4:a9:ba:2b:30:ec:ea:30:
78:7e:cd:08:b0:2e:4e:17:a1:ea:f2:ea:37:e2:c1:2a:70:93:
6b:ab:c8:42:0e:87:80:19:3b:22:f2:01:e2:a1:1b:16:1d:d4:
3c:de:ae:22:0d:2e:2b:ac:4e:de:0a:d3:70:b6:49:91:6e:02:
20:aa:5b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:23:59 2025 by rpki-client