Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa
File: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (raw, json)
Hash identifier: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=
Subject key identifier: 5B:D6:C8:FC:93:50:1C:30:ED:ED:3C:38:98:DD:0A:F7:F3:80:50:4A
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 019424B2A5F3A29F69D75CAD0A3B9179669F
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa
Signing time: Thu 02 Jan 2025 01:47:55 +0000
ROA not before: Thu 02 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56595
IP address blocks: 192.124.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:a5:f3:a2:9f:69:d7:5c:ad:0a:3b:91:79:66:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Jan 2 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bd6c8fc93501c30eded3c3898dd0af7f380504a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:29:a5:5f:2a:f1:f9:65:23:8b:b8:ec:40:
32:69:f5:7c:54:1d:19:ec:33:8f:54:62:44:ea:df:
2d:8a:bc:7f:9e:cd:7c:e7:1d:b6:88:3c:2b:45:5e:
f9:2f:f7:eb:c6:68:02:d9:8a:08:5b:a3:d7:87:c8:
e9:55:75:f1:9f:22:bf:36:bb:24:45:ff:68:93:71:
43:2e:2c:dd:d3:9f:f1:57:fd:22:81:3d:02:48:f4:
5d:f0:4b:d0:f9:21:c5:61:e3:02:79:99:93:c8:4f:
4d:95:10:c6:c5:ce:bf:6f:81:60:5b:6e:b4:fa:f1:
3e:b1:da:9e:0e:b1:52:83:a8:e6:bc:77:e5:99:d7:
b9:1d:83:d9:f3:8b:2c:d1:d6:98:b0:c5:8c:8f:03:
58:65:8b:0a:8d:f2:b0:58:c5:ad:be:30:a0:a5:91:
24:a1:33:b0:83:67:37:a1:68:21:5f:9a:66:d7:0c:
e1:43:d1:58:47:29:2f:23:0e:a5:45:28:e6:2a:d7:
ef:fa:2d:5a:41:5d:ab:7a:44:07:03:3c:67:0f:ea:
b3:15:99:4a:59:27:d8:f3:78:53:fe:08:34:60:f7:
c8:a8:7b:fb:8a:c0:4c:91:2d:5b:05:eb:46:27:98:
50:7e:ff:3b:7f:20:a7:af:c2:30:2b:28:78:eb:84:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D6:C8:FC:93:50:1C:30:ED:ED:3C:38:98:DD:0A:F7:F3:80:50:4A
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.201.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2b:9a:b1:46:ee:68:69:ef:fd:cf:97:5c:63:7f:7a:1c:91:
23:6c:73:54:f1:f5:1d:88:d1:18:ae:0d:59:b8:78:83:84:2f:
3c:30:90:f7:f3:55:1e:ca:a3:e5:4a:46:b0:fe:aa:95:be:c2:
5f:89:77:75:6a:28:77:2e:d5:f0:fa:2d:01:ee:29:28:3f:6c:
ad:28:bc:2a:9c:91:b1:23:d0:e3:49:e9:ab:b8:68:32:55:a2:
0d:bd:4a:aa:e9:ef:ea:59:be:06:d8:be:65:9d:f2:e9:fd:a0:
60:3f:72:ed:5f:64:59:b7:9a:29:9d:9b:5d:cb:24:c3:af:d2:
cf:68:6e:9e:3d:a2:10:a4:54:ba:dd:19:70:00:0c:43:30:dc:
56:ad:d6:3e:c0:aa:2c:0e:72:23:e6:2b:7d:28:50:58:de:16:
e6:71:1d:ca:39:d4:3c:56:eb:53:73:7f:44:bf:94:c3:1a:9d:
88:5a:d8:87:f3:2b:32:71:e2:e4:05:ac:1e:e0:50:08:10:20:
c5:b2:b3:07:59:8c:3d:a1:5d:66:28:94:77:a9:70:a4:0b:28:
15:e8:2f:ce:87:05:88:39:04:8e:21:7a:1c:34:3c:0a:b7:1b:
e7:b0:ce:98:a9:c6:16:80:b4:d9:e0:51:cb:c0:7a:c4:97:43:
4b:27:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:29:27 2025 by rpki-client