Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/1NP21bBcjBPyQEY2JxKMTy8KWnI.roa
File: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (raw, json)
Hash identifier: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=
Subject key identifier: D4:D3:F6:D5:B0:5C:8C:13:F2:40:46:36:27:12:8C:4F:2F:0A:5A:72
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 019425FD0C3724C01E53F9CBA690E7D4CD4D
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/1NP21bBcjBPyQEY2JxKMTy8KWnI.roa
Signing time: Thu 02 Jan 2025 07:48:48 +0000
ROA not before: Thu 02 Jan 2025 07:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 157.239.128.0/24 maxlen: 24
157.239.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:0c:37:24:c0:1e:53:f9:cb:a6:90:e7:d4:cd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Jan 2 07:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4d3f6d5b05c8c13f240463627128c4f2f0a5a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:67:cc:15:ed:8f:4b:d5:2d:95:1d:6e:3c:2d:
de:9e:62:c2:11:47:48:52:36:7c:8f:43:7f:d7:c0:
bc:b9:65:16:a4:58:54:14:3d:fa:10:f0:82:ab:93:
cf:c5:88:43:e8:7b:db:be:ce:fb:18:48:d6:76:4e:
62:ed:ec:e9:c4:91:f2:cf:44:62:bd:17:38:f7:98:
24:74:d4:85:f4:9f:0f:ae:55:f2:2f:e3:8a:5f:9c:
ee:4e:99:f4:28:b0:19:eb:8a:41:34:c5:72:ef:46:
0c:21:b4:62:2b:6d:39:d4:42:4c:fc:29:f9:da:d1:
55:18:e7:d8:19:da:1b:40:b4:5e:06:49:ac:8b:f7:
5d:a2:97:c0:ca:0b:ff:13:88:06:16:0b:24:21:9a:
0a:15:01:54:3a:25:9a:67:18:6c:18:f0:b9:93:54:
6f:97:6b:14:44:f4:2d:eb:88:68:58:b4:8f:a9:61:
8b:88:1f:26:ac:d8:0f:05:c2:64:e7:71:b6:7d:f7:
12:78:7d:60:4c:8f:24:bc:f4:58:da:6c:e2:5b:27:
0e:09:e8:1b:10:5b:95:c6:8b:75:4f:8c:a5:fa:ba:
03:42:ee:d8:71:35:ce:d2:9a:28:3b:1a:91:79:76:
87:bc:f3:91:2f:4b:3f:4b:67:02:81:e1:15:84:2c:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D3:F6:D5:B0:5C:8C:13:F2:40:46:36:27:12:8C:4F:2F:0A:5A:72
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/1NP21bBcjBPyQEY2JxKMTy8KWnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.239.128.0/23
Signature Algorithm: sha256WithRSAEncryption
88:fb:da:49:4c:49:f4:4f:59:2d:53:93:76:d6:de:d0:22:5b:
58:d7:d8:33:08:95:36:ce:86:5f:b8:38:35:50:c8:7a:32:82:
59:38:1b:60:1d:84:65:1a:26:e3:f8:d6:30:30:89:ab:98:3d:
06:84:fe:b6:a9:c5:ce:38:e3:24:d8:54:a6:69:ac:01:a7:78:
22:58:da:9c:76:92:01:8c:ba:61:c1:73:48:ed:24:53:79:b0:
42:5b:68:66:ac:a0:2b:c6:c8:de:8e:bc:db:e2:e4:39:69:7a:
e8:6b:12:db:9f:d4:d6:70:04:06:c4:ca:57:6b:a1:01:b6:f9:
21:bb:8d:1c:dd:6f:6a:b4:fa:e9:f7:1f:a3:f9:d4:38:ab:c1:
5b:d9:4e:75:c9:8b:b8:40:fd:dc:1c:af:ab:6c:6b:52:0b:fd:
9a:e8:e6:68:a1:39:f8:96:07:25:60:70:a4:ed:14:d6:7e:bc:
d3:17:4b:d6:c0:7f:18:54:10:16:fe:5b:f6:36:ca:7d:b2:81:
5f:5b:9e:2e:69:09:78:fb:da:d7:42:98:81:fd:8d:03:73:41:
5d:8a:43:b9:8c:56:da:0c:a1:62:3c:b0:b3:d0:15:0b:a6:a1:
39:70:ed:8a:01:52:56:95:aa:cd:7d:6b:2e:e0:14:cf:b4:ba:
ef:3c:cc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:44 2025 by rpki-client