Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa
File: iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa (raw, json)
Hash identifier: 80r40j4f0TX0nXOpgOJuceIx9IUXe6MHRj3CO+H5lVg=
Subject key identifier: 8B:2B:B2:DA:49:96:A9:93:47:5E:E0:1F:72:E8:74:97:07:44:37:95
Certificate issuer: /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial: 01941FFA86E42092D86188E14AB99E316F4E
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64089
IP address blocks: 67.158.62.0/24 maxlen: 24
148.59.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:86:e4:20:92:d8:61:88:e1:4a:b9:9e:31:6f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b2bb2da4996a993475ee01f72e8749707443795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:d7:f9:3a:41:10:bf:97:5b:ac:dc:d0:62:
13:de:5f:70:65:14:c4:d2:6c:24:79:5e:58:ec:6d:
e7:e5:ef:22:92:7a:4d:a4:9c:be:d9:70:ff:35:b6:
92:a4:4b:db:2e:4f:09:48:c9:e7:c1:d2:96:e8:00:
c4:5c:24:13:d9:9a:0a:b2:39:23:fc:f4:db:54:a6:
a1:78:3c:ad:f1:0c:5e:b8:dc:9d:6c:ae:71:c5:77:
9f:e2:fb:0d:3c:86:c1:29:76:58:95:67:7d:0c:ad:
08:ec:de:bb:fc:61:e3:a4:89:3c:86:3a:ef:1a:65:
6b:f9:f6:71:aa:c3:57:ca:0c:bd:14:ed:39:c6:bf:
7a:16:b1:01:98:8f:55:7e:d2:14:99:8a:aa:2d:84:
03:98:06:9c:31:c1:c0:69:78:f9:93:bc:36:4d:93:
14:7f:a0:3a:e5:9b:c4:92:7c:34:6b:37:93:6e:e6:
b4:08:e9:79:94:77:2d:47:44:3d:59:46:5f:b5:bc:
fe:91:68:3d:d8:67:e2:fe:9e:e1:77:ef:2f:ae:91:
b3:b5:1c:a2:50:68:e5:db:b4:ab:4b:6a:0e:85:83:
16:0d:c0:69:72:e5:da:5d:ec:3f:71:7e:ed:b4:4f:
cc:ff:4c:8f:76:32:af:b7:a0:30:26:32:c5:2d:23:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2B:B2:DA:49:96:A9:93:47:5E:E0:1F:72:E8:74:97:07:44:37:95
X509v3 Authority Key Identifier:
keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.158.62.0/24
148.59.115.0/24
Signature Algorithm: sha256WithRSAEncryption
04:eb:46:95:80:bf:29:eb:76:7c:82:17:6f:bc:51:5e:f9:14:
94:3c:16:4c:cf:e8:ae:54:3c:26:b4:f2:30:1d:42:9b:65:0b:
4c:56:d8:d3:ab:6f:1d:da:10:88:d8:3d:22:66:56:4d:20:66:
5d:8e:0b:3e:a5:d8:7a:76:b9:62:7e:ba:90:ed:1b:55:69:c3:
3b:9a:86:de:2f:6d:12:44:55:04:af:00:4f:85:de:c4:91:ce:
c9:d9:cc:86:41:70:7f:de:a2:77:d2:13:8b:fd:a6:3a:08:88:
5c:4b:d3:d6:c0:70:af:7a:c5:86:8f:e3:01:46:71:71:ea:db:
a2:dc:fa:62:b7:06:1c:27:ed:1e:ca:12:18:d1:f8:3c:54:e2:
be:70:6c:81:cc:dc:dc:56:35:e5:8e:18:8f:7e:43:3c:d0:af:
c3:df:9a:f8:c4:1b:dd:84:53:3d:01:a3:e9:1d:3a:fc:8d:92:
70:bf:9d:7b:d7:f3:55:f5:92:04:6e:19:e4:93:cc:69:37:11:
c8:be:da:48:98:d3:5b:bd:02:ae:fb:a2:c4:12:09:8f:d0:9b:
15:5f:86:43:42:33:93:89:cf:f7:b3:8e:48:69:b2:0a:73:24:
9d:5a:da:7f:31:00:32:05:d9:4a:2c:b1:2f:82:b4:96:46:ee:
83:61:62:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:11:47 2025 by rpki-client