Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/IsbNRUwtF97TzTNIl7-2xG06qDM.roa
File: IsbNRUwtF97TzTNIl7-2xG06qDM.roa (raw, json)
Hash identifier: ZJvUiTXJS17zRJXm+MWYGG6p9Wcs9KOAFeVCvx+kP0Q=
Subject key identifier: 22:C6:CD:45:4C:2D:17:DE:D3:CD:33:48:97:BF:B6:C4:6D:3A:A8:33
Certificate issuer: /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial: 019425FDB4DAB7DC6CB1F96146F9E2B56ED3
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/IsbNRUwtF97TzTNIl7-2xG06qDM.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39743
IP address blocks: 5.254.28.0/24 maxlen: 24
5.254.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b4:da:b7:dc:6c:b1:f9:61:46:f9:e2:b5:6e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22c6cd454c2d17ded3cd334897bfb6c46d3aa833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:26:59:19:5e:3b:1a:db:b7:41:78:d0:0c:
47:75:1e:e8:68:cd:95:22:11:f8:8a:46:9a:19:ce:
a0:a9:60:39:3b:79:a9:36:fc:bf:64:d8:54:84:76:
e4:e1:36:26:63:88:3c:b3:33:ac:fc:40:38:07:be:
a6:3d:ba:db:e8:00:41:e2:0d:bc:4a:73:97:e4:be:
e9:61:75:fc:79:08:0f:67:c6:85:53:9c:68:27:2c:
b1:e6:0c:35:51:32:bb:f4:6a:fb:50:34:69:8d:35:
4d:ef:7e:9d:32:5f:f1:d8:e8:af:e7:c3:13:82:28:
8f:ea:c7:4c:45:78:40:4e:22:be:b4:d2:04:3b:62:
81:36:18:9b:4e:63:ce:59:5c:9a:2f:21:a3:c7:d2:
80:85:ac:54:6a:ca:48:8b:3a:47:d5:4c:40:79:10:
a8:7c:39:47:35:59:26:76:61:99:93:24:25:39:9e:
c5:59:5e:f0:ee:72:78:3e:df:a5:b6:c9:e3:99:51:
45:69:a4:b2:6f:3f:26:24:0c:31:24:4f:a2:71:bb:
b9:5f:cf:09:ea:54:f6:f6:3b:13:76:50:38:de:51:
34:70:de:0e:4d:9c:a0:f0:a4:18:c0:3b:aa:97:57:
05:d9:60:c7:f3:45:0c:79:f9:1b:1f:cc:aa:dc:9c:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C6:CD:45:4C:2D:17:DE:D3:CD:33:48:97:BF:B6:C4:6D:3A:A8:33
X509v3 Authority Key Identifier:
keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/IsbNRUwtF97TzTNIl7-2xG06qDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.28.0/24
5.254.49.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c0:7c:34:18:5f:58:c0:a3:eb:ac:40:a6:e7:6f:9a:c4:46:
c6:8a:45:2a:f1:6d:51:51:e9:a2:cd:47:18:fa:64:4a:cb:d5:
32:b6:c6:1e:85:66:aa:1e:bf:23:38:af:16:61:7f:59:56:19:
6f:33:f1:07:c0:a1:c2:64:b6:e1:9d:36:1e:5d:f6:ab:50:b6:
6b:cd:96:85:7c:e4:cc:66:79:33:5f:fe:3c:4d:f8:3a:3a:3d:
10:77:bb:54:ad:42:6e:63:db:6b:04:31:17:81:b7:78:3d:50:
2f:ae:4e:3c:30:cb:62:f0:c3:a0:d2:6b:fb:e2:1d:9d:47:ab:
52:eb:19:e6:10:63:c7:cd:bc:b4:3b:24:e5:48:82:71:8e:68:
de:5d:91:55:18:9d:c1:1f:15:1c:2a:9c:50:90:81:ec:13:13:
13:bb:0f:30:62:24:6c:06:03:37:b5:af:80:2c:ba:2d:50:d2:
7c:1c:3a:fb:be:5d:3a:71:97:69:87:01:c2:18:20:eb:fd:62:
70:2d:91:d8:31:db:91:c1:45:df:03:25:4c:45:c7:47:c2:5a:
97:cb:7b:a9:f4:68:95:83:d1:80:32:1b:1f:d1:7e:55:e0:c5:
c6:c2:52:f8:72:35:69:e2:d7:90:d2:60:6c:eb:26:5d:c4:31:
5f:37:03:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:21:12 2025 by rpki-client