Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/CLnjMLjaN6TgfiTPKuCp1qWork0.roa
File: CLnjMLjaN6TgfiTPKuCp1qWork0.roa (raw, json)
Hash identifier: MihJ/9Q2aOSD5kcM3rgBq2rOZB5XjrnOSNAyQ0gi6BU=
Subject key identifier: 08:B9:E3:30:B8:DA:37:A4:E0:7E:24:CF:2A:E0:A9:D6:A5:A8:AE:4D
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019422FC43AA87DF9986315F81534EB3D4BF
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/CLnjMLjaN6TgfiTPKuCp1qWork0.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 5.252.22.0/24 maxlen: 24
2a0b:ec82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:43:aa:87:df:99:86:31:5f:81:53:4e:b3:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b9e330b8da37a4e07e24cf2ae0a9d6a5a8ae4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:24:f1:3f:5f:77:5b:8a:0e:2d:fb:cc:de:54:
14:32:47:06:01:63:b8:92:f1:31:40:15:64:38:f3:
04:ab:55:7c:72:d2:05:67:64:14:28:2d:6a:0e:15:
62:e5:26:86:e3:5b:98:be:7c:4b:78:aa:2d:8e:21:
19:bc:7e:3c:b4:b9:6c:5d:c9:c3:ac:a4:05:bc:ae:
2b:ef:70:11:ba:24:af:71:33:c9:bf:d7:1e:7b:ad:
3e:59:f2:17:99:ac:a3:ce:4d:1d:c3:1d:05:c7:5e:
9b:90:fb:52:34:b6:41:77:c1:dc:92:ee:e2:73:a1:
91:41:9e:82:32:3d:a2:7c:ab:47:f0:00:3c:20:64:
72:6a:93:33:99:24:fa:71:2b:1a:89:b9:8e:be:65:
5a:40:55:8c:dd:90:26:a4:12:83:b6:8a:3f:9a:7e:
29:6d:df:c2:1b:cf:f2:b6:23:11:db:cf:1a:7e:fe:
bf:8b:57:15:9e:46:4f:40:10:3c:e8:24:53:41:a5:
1c:db:bc:07:0e:79:7e:f1:f7:0c:1d:b6:bf:ec:bf:
99:d5:8d:d0:e7:f2:e2:55:4d:9f:34:df:e8:7b:a0:
39:3f:eb:d7:47:4e:03:f8:80:27:f3:66:57:45:66:
41:41:2b:80:ad:89:1f:46:ff:4a:35:1f:dc:30:42:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B9:E3:30:B8:DA:37:A4:E0:7E:24:CF:2A:E0:A9:D6:A5:A8:AE:4D
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/CLnjMLjaN6TgfiTPKuCp1qWork0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.22.0/24
IPv6:
2a0b:ec82::/32
Signature Algorithm: sha256WithRSAEncryption
56:9d:dc:81:f2:dd:05:01:bb:21:a9:1f:6f:ba:f6:78:b4:0e:
05:43:5a:b7:36:2a:74:a5:06:e9:6b:be:79:21:9a:65:a3:22:
e3:73:84:4b:54:38:02:b6:c3:46:9a:9f:0b:1c:20:0a:e7:61:
09:7a:38:8b:1d:d1:b0:75:94:4f:21:04:f1:5e:7d:76:02:61:
d2:db:55:70:99:d2:de:a2:0f:0d:2f:0f:a2:a0:07:e1:3e:34:
d6:5a:34:e4:42:27:7b:bd:f8:b7:b6:4b:4b:f4:b5:e3:85:0c:
ac:cb:b4:bc:fc:1b:90:0c:73:96:bd:4c:71:37:8b:ff:7f:20:
4e:ad:e8:c3:a1:98:17:80:ce:a1:9f:87:6f:a3:ad:38:ed:0b:
e1:3a:e0:2c:dc:8a:d2:e4:95:1d:96:53:00:d8:0c:45:66:61:
1a:e1:c7:99:98:ed:66:bc:a7:e6:82:46:6d:e2:97:47:c3:ae:
3e:27:e5:8c:a9:db:94:b3:9f:9a:68:eb:f8:2d:2a:19:7f:8b:
f2:a4:89:f0:1e:f7:b1:66:75:fd:5d:e2:bb:d5:4d:3b:ad:38:
df:58:f0:5a:46:75:9a:2a:64:ee:09:c4:63:52:3b:31:f7:c4:
16:78:4f:c5:c0:34:70:4a:5c:bf:15:5d:58:c9:87:a2:b2:a0:
c5:83:ff:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:14:40 2025 by rpki-client