Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Asr7ZOWfpkDBSjuEfEx9OsDKyrQ.roa
File: Asr7ZOWfpkDBSjuEfEx9OsDKyrQ.roa (raw, json)
Hash identifier: p+62UDWtfe7dh4HDC1QfZ3od4Dagyf7n7BasHemhJIA=
Subject key identifier: 02:CA:FB:64:E5:9F:A6:40:C1:4A:3B:84:7C:4C:7D:3A:C0:CA:CA:B4
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C23C5E1DEE76FECE51CCD40B714DA
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Asr7ZOWfpkDBSjuEfEx9OsDKyrQ.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 5.144.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:23:c5:e1:de:e7:6f:ec:e5:1c:cd:40:b7:14:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02cafb64e59fa640c14a3b847c4c7d3ac0cacab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:a0:ec:ec:50:79:3b:86:e3:9c:f6:5e:e4:
fc:75:aa:5f:11:b0:fb:84:d8:7a:53:6e:8a:41:f2:
e0:51:54:fc:11:3e:7d:8f:cb:27:fb:92:ed:71:d9:
c6:c8:9a:72:da:93:b1:03:0a:a4:36:e2:a1:c3:72:
e6:67:ac:d4:a5:ea:1f:16:df:47:99:33:03:df:0b:
e8:f6:e9:ed:ca:8a:c3:98:36:91:8e:1e:52:74:0e:
e5:75:c9:e6:7e:7e:4a:97:53:0c:14:93:13:5a:fc:
9d:fe:2e:d2:cf:bb:dc:ca:00:15:a0:dd:08:c4:0f:
8b:5b:a5:b3:31:4c:8e:59:84:c4:fd:f4:21:60:69:
8e:34:68:bd:ca:e1:ce:55:19:d6:59:81:1c:49:2d:
45:2f:47:03:2f:6f:98:ce:1f:fe:af:1c:8c:53:b6:
72:06:dc:ab:fe:e9:a4:d3:8a:63:85:e0:a5:39:87:
14:06:58:ed:b1:40:a2:f7:29:93:51:94:e2:7f:7a:
b6:fa:13:e4:1f:c8:f0:84:45:0c:17:82:34:80:c9:
ab:1d:8f:d6:e1:d2:ea:40:57:ce:df:ed:88:de:d4:
39:99:7c:00:26:66:77:af:c8:b6:4f:76:19:71:6e:
47:d5:fc:26:ae:6b:f7:f0:f9:95:c4:fe:f3:13:c9:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CA:FB:64:E5:9F:A6:40:C1:4A:3B:84:7C:4C:7D:3A:C0:CA:CA:B4
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Asr7ZOWfpkDBSjuEfEx9OsDKyrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:67:c4:7f:b3:ba:bc:4d:c7:2c:c3:eb:d3:63:53:3d:20:61:
64:02:de:0e:3e:6c:bf:5b:8f:f7:7f:42:f7:4c:77:4d:f5:75:
bb:b0:52:ae:53:b6:61:f2:7a:1c:9b:54:b9:68:97:cc:1d:9b:
de:53:3c:3c:5c:51:ae:8e:4a:bd:9a:25:e0:85:30:ad:09:c2:
54:27:12:1b:b5:60:cc:3b:33:02:b2:83:bb:a4:ff:ef:98:12:
2f:b4:03:32:af:40:34:75:e6:e6:36:18:2d:87:a6:fe:5c:f7:
47:80:9b:1f:ef:98:5c:5f:2c:80:7e:59:38:eb:6f:0d:75:57:
17:4d:b0:12:89:c6:07:45:54:ef:18:f4:bd:9d:a2:b6:d6:a8:
53:2f:cd:e9:53:d9:df:1f:07:82:9f:1a:09:99:37:e3:80:73:
70:17:11:12:0c:cb:52:f0:da:10:7b:60:7c:a9:e1:cc:e7:30:
3a:6e:d6:54:1e:09:78:fb:45:e8:7f:57:1a:97:b6:ca:d6:ec:
bd:49:b9:e3:6a:6e:6e:74:10:1b:a9:18:6a:41:31:a4:78:a2:
fe:ff:44:de:e3:9e:41:84:a2:d5:6f:d9:b0:c7:a1:ef:4a:cf:
2b:36:87:70:a2:ce:40:9b:0b:93:7d:41:b1:82:bf:69:9a:dc:
21:30:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:01 2025 by rpki-client