Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/uu0B_lRFC2FFj-k7cmY35eNucIA.roa
File: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (raw, json)
Hash identifier: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=
Subject key identifier: BA:ED:01:FE:54:45:0B:61:45:8F:E9:3B:72:66:37:E5:E3:6E:70:80
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 019427B6435D9D38EE2703D4B2D21E6A47C4
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/uu0B_lRFC2FFj-k7cmY35eNucIA.roa
Signing time: Thu 02 Jan 2025 15:50:43 +0000
ROA not before: Thu 02 Jan 2025 15:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 153.98.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:43:5d:9d:38:ee:27:03:d4:b2:d2:1e:6a:47:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Jan 2 15:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baed01fe54450b61458fe93b726637e5e36e7080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:8a:c2:9e:21:a0:fb:38:2a:9b:0a:b2:b1:
fa:8f:37:49:f7:99:2f:35:63:e8:c7:05:ff:a5:23:
3c:f5:fd:0b:2a:73:cb:4c:a8:4f:b0:be:fe:94:08:
91:77:10:1c:d3:d7:87:d9:bf:bf:cb:82:36:5e:f7:
18:df:23:6a:a0:cc:ee:94:d7:c7:93:8c:6e:f1:c5:
97:09:9a:c3:87:74:44:bd:13:44:e9:53:6e:5f:3a:
1d:29:67:c0:48:bc:a9:1b:38:b0:64:16:32:de:aa:
fa:d0:2b:14:18:9c:4f:41:37:c9:02:f6:16:ed:a6:
33:ef:07:dc:cd:81:3b:6c:23:eb:9d:ea:4a:d5:5f:
d5:bc:49:5f:18:b2:9b:55:6e:49:2c:69:0a:6e:d6:
9f:60:66:38:6b:04:5f:2d:b4:f2:59:2a:53:dc:c1:
6d:cd:54:c2:14:a9:82:5a:21:5b:e2:70:c7:a2:86:
15:7d:8f:88:ad:f2:a9:10:2a:ae:ee:c9:39:ee:c8:
30:d1:42:d9:fc:ad:6f:59:91:92:48:82:a6:70:80:
de:f4:e4:96:b2:6e:5b:dd:2e:db:39:36:a4:b1:3f:
a8:da:ec:5d:b4:8c:66:67:2a:29:cd:87:10:2a:9c:
e0:e5:bf:7f:bb:12:86:cc:e9:2c:37:34:78:08:39:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:ED:01:FE:54:45:0B:61:45:8F:E9:3B:72:66:37:E5:E3:6E:70:80
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/uu0B_lRFC2FFj-k7cmY35eNucIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.98.24.0/24
Signature Algorithm: sha256WithRSAEncryption
90:1d:20:29:d0:12:b9:07:1b:b3:6a:21:af:17:0c:89:41:4f:
6c:e5:7a:aa:b8:19:b2:26:e5:59:70:8c:7f:94:25:46:60:c9:
c6:99:bf:ca:f3:49:2c:04:92:2e:ee:40:af:b3:e6:30:f7:2f:
1f:63:18:89:2c:dc:77:9e:87:ef:ca:96:59:2d:39:aa:7a:34:
75:07:2c:4c:1a:25:c7:a4:e6:fc:e4:8b:44:81:ba:e2:24:cf:
3f:c7:0a:b5:fa:1f:25:49:c2:02:14:34:ed:75:d8:79:66:55:
b0:33:ba:c2:79:e9:5b:cb:85:99:3e:21:ba:36:9f:fb:ba:87:
5b:92:ea:63:12:14:89:51:05:42:6d:12:82:40:ce:fb:f7:7b:
34:cc:70:b2:44:a5:0e:0a:10:dd:7b:e5:11:3c:d7:0e:2b:e7:
7f:c1:f2:83:24:74:02:82:f0:a1:94:80:ea:67:c1:db:94:f2:
05:bf:2d:96:92:dd:0e:11:33:b7:58:4c:78:c6:e2:de:7e:55:
b7:d6:89:b4:af:ac:59:ce:d1:10:2a:44:83:f7:ee:f2:b1:2e:
1c:3a:10:28:a6:eb:d7:a2:d2:03:f8:33:61:28:ce:d3:c9:d5:
f1:81:7e:0d:39:81:63:6a:47:49:eb:35:d4:68:57:e2:52:0e:
a4:cb:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:56 2025 by rpki-client