Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/dd2A3LBOrM3aG_NjjoYtak1Ap4w.roa
File: dd2A3LBOrM3aG_NjjoYtak1Ap4w.roa (raw, json)
Hash identifier: +PpOTHEIsXAHYcStx2UjqeFZmvCeBD5+IQX4L0XwXI4=
Subject key identifier: 75:DD:80:DC:B0:4E:AC:CD:DA:1B:F3:63:8E:86:2D:6A:4D:40:A7:8C
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01941F8C96FE848443BF69FD436717C6B233
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/dd2A3LBOrM3aG_NjjoYtak1Ap4w.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202564
IP address blocks: 5.59.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:96:fe:84:84:43:bf:69:fd:43:67:17:c6:b2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75dd80dcb04eaccdda1bf3638e862d6a4d40a78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:7f:7f:1f:3e:10:9c:de:7a:d0:11:e2:2e:
b8:84:5c:83:67:52:6d:59:46:f8:8c:fa:20:a5:d4:
88:f0:ea:31:75:24:35:ce:45:cf:58:62:7e:bf:56:
53:b5:ac:b4:7c:f6:79:bc:36:eb:90:63:e4:9a:a9:
6b:00:c1:e7:8d:d7:9e:bc:18:41:e0:92:19:14:d8:
16:e1:3b:a5:02:6b:4e:5c:b2:69:fe:dd:7c:48:16:
0f:42:a6:43:ab:c7:e8:93:78:08:65:eb:87:0d:0a:
3b:23:f5:65:5a:b2:c6:2a:2d:ed:c0:79:6a:2b:21:
ad:60:f5:2c:8e:ae:4c:e8:bb:78:ef:70:53:16:ae:
a0:cf:2f:8c:a9:74:35:b5:ac:1e:df:bd:7d:9a:37:
71:0f:27:b1:4f:ad:c6:b2:85:50:07:8c:09:ee:d0:
a7:ca:bc:21:98:68:7a:b6:8f:6b:db:9d:ed:b0:aa:
dd:3f:e6:54:7c:dc:38:51:63:6e:33:76:82:2f:04:
a2:50:0e:87:9c:fc:0b:30:70:75:43:97:95:af:7d:
8b:bc:09:de:39:fd:b1:a4:4e:e5:a2:f9:1c:08:b4:
ca:5a:8c:c5:f1:98:98:d8:92:a6:f1:4c:8d:8e:97:
b0:d0:f7:01:a4:f8:f7:5c:85:e9:fd:be:ac:6b:61:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DD:80:DC:B0:4E:AC:CD:DA:1B:F3:63:8E:86:2D:6A:4D:40:A7:8C
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/dd2A3LBOrM3aG_NjjoYtak1Ap4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.10.0/24
Signature Algorithm: sha256WithRSAEncryption
71:53:8b:02:34:7c:4c:04:d7:de:22:eb:86:2e:44:3a:89:7d:
b1:8d:74:ba:77:ab:20:ec:54:5e:74:0d:13:c0:0f:b4:2e:26:
3e:da:48:1d:48:c9:ff:66:52:f8:cd:42:83:21:16:7f:9b:6d:
e4:4e:5d:72:6d:02:f7:6a:8c:b0:e3:08:84:8d:cd:c4:2e:7b:
4f:a3:5e:b2:df:9f:fd:71:ea:1f:32:41:5f:20:79:1b:4b:0e:
24:9f:e6:cf:67:e9:89:b7:06:f8:0c:92:5b:a6:61:c0:99:88:
90:95:ad:d6:68:55:99:bc:b9:97:26:f2:8f:36:52:43:8a:44:
42:f5:88:13:2d:72:ea:d9:d9:0a:c8:54:05:ef:0f:5e:73:84:
a9:58:bd:f2:7b:a1:18:46:39:4e:bc:9b:6a:72:b7:00:df:44:
d1:3f:e6:06:29:52:4b:e3:dc:91:25:62:32:d8:d5:f8:10:bb:
a2:ef:45:c4:21:52:69:6c:b6:41:8f:ab:1f:98:23:30:80:fe:
26:bf:a6:5b:a4:3f:62:6f:7b:de:85:35:82:97:6d:3c:57:b1:
1c:21:b2:28:a6:d7:ff:c2:ea:9b:87:5b:e3:e8:a0:48:05:87:
0a:df:53:b1:6c:1f:7a:86:04:4d:c4:d3:54:5e:9f:09:14:54:
82:5c:d7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:20:08 2025 by rpki-client