Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/XxsOij4ct5ECm3mSLCa70nZJ8bc.roa
File: XxsOij4ct5ECm3mSLCa70nZJ8bc.roa (raw, json)
Hash identifier: lkdsnYwMJuFiwNV18PfTupGbGmwlOcngfYFUXfEjtM0=
Subject key identifier: 5F:1B:0E:8A:3E:1C:B7:91:02:9B:79:92:2C:26:BB:D2:76:49:F1:B7
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0187ED4AF7A660BE494CFB588B59D33E48CE
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/XxsOij4ct5ECm3mSLCa70nZJ8bc.roa
Signing time: Fri 05 May 2023 19:02:05 +0000
ROA not before: Fri 05 May 2023 19:02:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200598
IP address blocks: 121.127.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ed:4a:f7:a6:60:be:49:4c:fb:58:8b:59:d3:3e:48:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: May 5 19:02:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f1b0e8a3e1cb791029b79922c26bbd27649f1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:d0:a0:78:67:ea:c2:ba:18:70:59:83:a0:
98:16:a0:55:48:1b:ef:f0:bb:3f:48:67:e8:36:5a:
e9:99:32:a7:4d:76:f0:3c:a8:fd:c4:27:f3:82:4f:
6a:b3:67:c3:fe:9a:3e:a2:76:9f:8a:8b:3d:2d:c8:
15:7d:7a:61:74:75:77:f3:f7:46:ed:e9:30:81:b8:
da:15:6a:10:03:cf:3d:0d:a5:9c:eb:cc:be:fe:28:
c4:76:af:6d:1a:75:f1:47:7e:42:71:49:ae:21:f0:
99:d3:1b:f7:63:5a:c1:6d:56:70:df:07:43:e8:70:
41:82:bf:6b:4f:55:27:a6:1b:47:da:92:f1:58:f5:
9c:2f:bf:45:69:03:3b:5b:40:dc:4c:fd:e5:63:28:
d2:55:b4:7b:81:d4:05:05:30:ed:d6:49:1f:1b:9d:
1e:78:74:8e:13:22:cd:a6:59:07:62:68:29:8c:f0:
76:9b:27:9f:f0:2a:13:fc:49:e3:f2:a0:54:fd:b0:
5b:a8:29:28:ec:43:ef:c0:af:d5:fe:7f:e9:16:c2:
43:a5:fc:c0:68:c0:a9:11:2f:01:cd:e3:a9:fc:3d:
06:78:40:d5:cd:57:e7:7e:2e:ee:dd:74:b8:3f:c1:
7e:25:ca:7e:67:6a:78:3b:ff:6f:5a:6a:a4:a6:1e:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1B:0E:8A:3E:1C:B7:91:02:9B:79:92:2C:26:BB:D2:76:49:F1:B7
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/XxsOij4ct5ECm3mSLCa70nZJ8bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.127.48.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:46:2b:fb:ae:13:a8:3b:cf:71:a1:74:a0:a9:07:24:d9:c3:
07:11:0e:2c:c4:14:d5:1b:01:f9:de:93:a6:c7:81:e0:28:03:
4f:0f:28:4f:bf:16:70:73:b0:66:f3:c2:18:96:d0:8f:f2:5f:
30:16:91:9c:6d:41:15:57:b2:e3:12:41:d7:d2:64:45:3b:48:
95:7b:a7:f1:b2:7f:a5:e9:34:38:9c:b7:e7:18:e9:d6:cc:90:
00:39:ef:37:ad:47:75:7f:cb:35:c6:f2:d5:37:b1:a6:2f:8c:
0c:49:01:64:34:56:9a:6f:e8:78:2a:31:13:ba:4d:5e:23:15:
d2:25:38:1e:b8:94:ce:66:49:6a:41:af:d9:42:06:c9:ff:f7:
70:f6:b0:2c:ba:26:7d:e7:5c:c3:50:51:de:b6:4a:2a:49:5d:
d0:72:41:d0:16:43:41:a1:8b:43:9a:d2:0b:2c:b3:c8:59:3e:
d0:a9:d3:66:4e:e4:6a:38:54:17:2a:a8:04:9f:56:63:23:6f:
3e:0c:e6:34:05:ea:03:a7:19:4c:7e:2c:f7:c7:63:14:63:84:
f6:d1:bc:4d:fb:01:88:8f:68:e0:0d:8c:1e:29:93:7b:7e:b4:
7e:96:63:57:0b:2d:2f:cd:4e:03:10:45:6d:74:c3:f6:72:d0:
5e:a7:e0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:53 2025 by rpki-client