Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/cl2Pdi7rrmoBHehcIZLZd-n4CJg.roa
File: cl2Pdi7rrmoBHehcIZLZd-n4CJg.roa (raw, json)
Hash identifier: XnP9looLf0hlXTaanLOMGKZHChdUrcVohFSSHL9Mzn8=
Subject key identifier: 72:5D:8F:76:2E:EB:AE:6A:01:1D:E8:5C:21:92:D9:77:E9:F8:08:98
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369EE35FA5F3D7FC8205CE989F40F87
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/cl2Pdi7rrmoBHehcIZLZd-n4CJg.roa
Signing time: Wed 01 Jan 2025 19:48:52 +0000
ROA not before: Wed 01 Jan 2025 19:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 149.126.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ee:35:fa:5f:3d:7f:c8:20:5c:e9:89:f4:0f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=725d8f762eebae6a011de85c2192d977e9f80898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:b5:74:7f:b1:12:86:7a:a0:92:e0:8a:22:
60:ef:8b:3a:27:26:d1:70:d3:d4:22:0e:ec:e7:79:
9d:00:f6:c2:92:11:46:83:97:da:5c:23:91:8c:17:
e6:e4:1a:4a:e8:58:05:c1:18:df:bd:22:89:6a:5f:
a3:08:e0:64:df:56:af:08:35:a6:6f:a1:3f:a7:fc:
74:a1:b6:c2:75:5b:e5:e3:41:3e:51:d4:95:de:fa:
77:33:88:36:c5:40:a4:a1:fd:98:38:07:18:73:dd:
36:94:55:44:ba:e5:97:b9:be:84:75:5a:62:57:99:
30:44:6c:0c:87:9e:33:b8:93:95:e7:17:02:09:7d:
7c:56:fa:04:a3:79:44:73:c4:9b:5f:69:c4:22:fc:
d0:bf:cf:78:f2:f4:71:4e:c1:ef:ab:9f:d1:75:b7:
01:ec:e8:2e:8e:59:94:55:28:54:de:91:16:20:4a:
59:c4:c2:f3:0d:f3:3b:c9:6f:fc:b8:0e:7c:9a:16:
6b:34:c5:00:61:a1:05:99:99:0b:7f:6f:3c:bf:6d:
ef:6c:2a:3a:da:b6:cb:b7:56:66:30:ca:35:d4:21:
95:9a:74:c1:b7:36:f5:0f:c4:ae:d3:0a:de:26:b0:
b5:61:80:69:37:bb:1e:51:8d:b4:8c:28:12:69:69:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5D:8F:76:2E:EB:AE:6A:01:1D:E8:5C:21:92:D9:77:E9:F8:08:98
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/cl2Pdi7rrmoBHehcIZLZd-n4CJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.207.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a9:6d:2b:7c:89:ee:49:5c:19:ea:ff:21:7f:d0:cb:1f:77:
30:ab:73:8c:ff:76:08:bb:8a:86:5c:25:aa:0b:f8:6b:bd:8e:
96:7f:46:63:f3:fc:07:92:d8:0e:cc:36:d1:c7:28:0e:b8:53:
7d:ea:14:6b:3a:62:72:c5:90:40:bd:21:f0:07:17:a3:ab:a9:
14:de:a5:6d:f5:5b:6b:99:af:ed:86:50:9c:ec:97:96:5c:6c:
71:b0:6f:29:5d:8d:d0:37:dc:ab:3d:5c:e0:c6:01:1d:55:51:
48:ab:68:b5:47:45:c8:88:c6:4d:cf:ff:cb:3e:f1:ad:d1:12:
cf:00:67:2d:38:04:98:5a:4f:1f:e4:e3:5e:34:0e:7d:ba:64:
fb:6e:79:36:88:b9:45:23:6b:9a:f4:fe:65:84:cd:a4:ea:7d:
67:f2:07:d7:a2:19:11:71:27:f2:f9:53:b8:c5:df:1a:13:18:
d1:dc:60:90:12:90:da:2e:43:34:18:ea:d6:1a:4a:d6:ff:85:
2c:28:89:b4:83:33:98:5c:00:78:9a:52:47:7d:d4:46:08:11:
12:62:23:43:95:c2:e1:f6:57:a1:03:d1:e7:bf:35:42:b1:34:
6c:7f:5e:01:45:ca:e9:0d:d8:d1:6e:7e:ed:f8:41:20:2a:5d:
1b:53:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:00 2025 by rpki-client