Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/lwSr5uzjpcNzll7kxv78DQgmpLQ.roa
File: lwSr5uzjpcNzll7kxv78DQgmpLQ.roa (raw, json)
Hash identifier: +N2Mv9Vtx1M52yKl9lhZABcTTfTz0G5hzXqojyxLz6g=
Subject key identifier: 97:04:AB:E6:EC:E3:A5:C3:73:96:5E:E4:C6:FE:FC:0D:08:26:A4:B4
Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial: 019427B524C69100A3C68B7CE766A57E1533
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/lwSr5uzjpcNzll7kxv78DQgmpLQ.roa
Signing time: Thu 02 Jan 2025 15:49:30 +0000
ROA not before: Thu 02 Jan 2025 15:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 171.25.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:24:c6:91:00:a3:c6:8b:7c:e7:66:a5:7e:15:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Validity
Not Before: Jan 2 15:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9704abe6ece3a5c373965ee4c6fefc0d0826a4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:01:09:26:cf:a5:06:bc:bd:ba:a7:d3:dc:
e1:af:dc:2d:8d:6a:a5:0e:27:a3:9c:9d:2a:0a:86:
70:21:3c:b5:33:62:62:5b:2e:ef:e5:02:2f:db:49:
de:c7:4f:b6:41:f0:31:3b:29:f1:f1:d2:19:a1:e4:
7c:5c:05:be:a0:dd:90:e7:28:40:f4:63:77:5a:01:
1b:2a:98:30:d5:53:42:01:df:e1:ac:6c:79:00:29:
0a:8e:7e:3f:3c:73:db:36:bf:3a:fc:a9:df:09:82:
c9:33:d7:10:81:d2:75:1e:5c:71:cf:bc:e3:3a:c5:
d5:38:08:8b:7b:49:69:f2:d1:d4:db:cf:3a:0d:ca:
0a:bb:29:d1:ec:ff:04:9c:da:5e:3c:f2:76:4f:53:
58:a7:db:25:50:31:9a:57:20:80:bd:96:fd:e5:d0:
40:61:39:70:a4:9d:e8:40:e2:e3:58:35:98:55:09:
d7:59:45:04:ad:c5:1c:75:8b:3e:fe:83:a4:2f:56:
21:7c:72:ca:b3:07:e7:a2:15:73:07:bb:5c:47:6e:
9a:3c:7c:25:e7:dc:00:a9:fe:c0:11:99:8b:33:61:
ab:fb:93:e7:3e:00:a2:8d:97:29:78:57:ef:d1:ae:
63:2a:cd:ca:a8:b8:a5:f7:f6:f1:f9:0e:86:d0:be:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:04:AB:E6:EC:E3:A5:C3:73:96:5E:E4:C6:FE:FC:0D:08:26:A4:B4
X509v3 Authority Key Identifier:
keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/lwSr5uzjpcNzll7kxv78DQgmpLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.216.0/24
Signature Algorithm: sha256WithRSAEncryption
36:47:7a:27:4f:0e:50:43:9c:12:83:72:dc:f5:a3:f7:a5:7e:
fe:b0:78:df:03:51:90:0f:17:52:50:15:a9:d2:0d:e1:0f:9b:
bf:62:fb:6f:ed:60:00:97:af:cf:1a:7e:7b:18:a4:78:ae:bf:
c8:b3:9d:0e:01:46:4b:51:9e:ed:9d:4d:7a:0b:ce:bf:54:ba:
0e:6e:72:56:95:08:27:1a:40:88:33:d6:66:3f:64:1a:3a:04:
81:c5:9c:86:b0:d5:1f:79:33:93:62:be:d2:7e:c8:7d:b2:b1:
ee:c7:f7:c4:8e:2f:93:38:23:c1:ea:c7:a1:16:ea:b7:ee:a3:
94:a4:22:f4:b6:e0:ec:12:4a:5b:7f:a8:e3:07:57:15:9d:af:
bf:51:66:a3:c6:56:62:07:fe:54:7f:3a:71:66:0f:98:f8:44:
bd:79:4e:12:e9:f5:00:b4:de:8b:3c:df:f5:82:5f:25:22:f4:
53:fe:0d:2b:69:78:94:4e:e4:e2:82:8a:d3:4d:7f:55:2f:86:
58:50:f3:51:84:a4:08:7e:5f:1e:fc:c3:da:59:a6:15:9a:94:
55:90:de:5c:9b:f3:73:da:b3:2f:dd:cd:54:a9:ad:8c:a0:d7:
26:3d:d6:cc:cf:07:b8:8c:3e:b8:7b:4f:15:93:ca:bb:ea:a1:
dd:01:ba:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:53 2025 by rpki-client