Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa
File: L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa (raw, json)
Hash identifier: zQv0Jn9i8JzxV9AzBkluRvg9IIcuWJrvzIFoMGo/YiA=
Subject key identifier: 2F:A5:19:79:48:D5:2B:93:99:EF:E9:99:19:28:ED:24:65:17:91:EA
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 019421B205F7A828B4E0619652FBC5655E7F
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa
Signing time: Wed 01 Jan 2025 11:48:21 +0000
ROA not before: Wed 01 Jan 2025 11:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8605
IP address blocks: 5.179.0.0/20 maxlen: 20
5.179.16.0/21 maxlen: 21
5.179.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:05:f7:a8:28:b4:e0:61:96:52:fb:c5:65:5e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Jan 1 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fa5197948d52b9399efe9991928ed24651791ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:75:80:8f:ff:b7:a5:ee:db:03:ea:74:38:
d8:16:4f:3a:8d:43:af:ea:74:a3:af:19:80:fd:5a:
48:31:8d:a3:69:b0:a6:72:2a:47:31:18:9c:c1:e1:
4c:ea:a2:38:51:41:00:51:13:a2:c6:09:49:c0:3b:
4a:da:43:f6:3c:ad:67:43:09:85:92:f4:49:3e:10:
27:e8:bf:98:5f:ab:0a:78:13:5a:f8:72:54:f6:12:
96:9e:e6:73:2d:ea:c6:93:a0:9f:4d:69:56:11:a6:
1e:e1:2d:db:26:fb:d9:96:31:22:06:44:55:8b:aa:
f0:a1:8a:df:c5:36:26:34:21:2f:9f:03:cd:b6:e4:
20:2c:47:e5:ba:bb:84:92:48:46:19:9d:25:43:0e:
39:d3:6f:3c:9e:96:76:d5:97:ca:83:f8:94:64:c0:
d1:14:53:5e:75:e2:55:07:90:10:08:fa:d5:d4:61:
95:0d:6b:bd:28:91:23:13:e8:78:c9:42:30:52:4c:
91:fd:4d:0d:9c:63:dd:56:db:76:1d:24:85:e1:84:
1e:ec:ce:85:9d:97:53:40:63:0e:48:80:2b:a4:ca:
34:a4:40:24:a7:70:1d:a0:89:ce:de:cc:36:a2:bf:
e2:a6:b7:8f:f8:15:f5:41:50:53:01:2a:99:dd:7a:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A5:19:79:48:D5:2B:93:99:EF:E9:99:19:28:ED:24:65:17:91:EA
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.0.0-5.179.27.255
Signature Algorithm: sha256WithRSAEncryption
97:e4:3c:78:4e:f8:ad:d3:30:57:a6:45:87:40:3c:a3:8c:e1:
5f:84:af:14:f6:be:fb:3b:e3:73:d2:00:ab:93:3f:72:55:ba:
64:74:d0:5e:53:84:45:7c:3f:0a:0a:50:a5:34:cc:11:0c:03:
bb:01:50:e2:97:d1:20:89:ec:7e:5c:3e:1a:0d:1c:51:b0:ed:
aa:a9:cf:de:de:27:42:d3:6a:58:00:3f:0d:3a:63:13:11:f7:
ef:fc:05:a6:4a:b0:6e:b9:b9:ea:3c:57:7c:ae:db:c4:3d:87:
83:69:6d:f3:8e:61:e3:0c:19:ee:6a:ef:57:64:7a:12:db:a3:
a0:3b:ea:5a:5f:ee:41:bd:02:9e:df:80:34:51:19:fa:e8:9a:
b9:f3:14:c5:7a:e7:37:43:6e:32:e3:3a:a2:b8:a6:f2:72:97:
fd:8d:89:46:40:82:0f:0c:5e:1b:cd:a2:6e:c2:77:00:dc:38:
25:d8:9b:9c:75:f8:e2:99:e5:15:45:aa:b3:10:d5:5b:2e:e1:
49:49:0f:59:42:73:bd:fd:08:3e:bc:e9:50:14:42:6c:67:5b:
84:97:8f:6e:f8:67:9c:6f:74:ff:b1:6d:39:5a:13:75:44:a9:
01:75:a2:12:b1:36:ba:72:e2:ca:4a:dd:94:71:48:b8:bb:41:
91:76:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:10 2025 by rpki-client