Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/L1sOGUpC5vf81IjAWo9yjqNWdoc.roa
File: L1sOGUpC5vf81IjAWo9yjqNWdoc.roa (raw, json)
Hash identifier: qAhDSU9NhG7HL0VsMDn5fszVhTOJb2FN5MRmMe3Ne7s=
Subject key identifier: 2F:5B:0E:19:4A:42:E6:F7:FC:D4:88:C0:5A:8F:72:8E:A3:56:76:87
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 01941FFA31DEDD45223A5E420B2E94B07E08
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/L1sOGUpC5vf81IjAWo9yjqNWdoc.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41071
IP address blocks: 5.252.44.0/22 maxlen: 22
91.102.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:31:de:dd:45:22:3a:5e:42:0b:2e:94:b0:7e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f5b0e194a42e6f7fcd488c05a8f728ea3567687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:de:f4:64:fb:71:ba:c1:1d:14:7e:3e:95:
b2:e6:af:51:02:b0:81:8c:11:86:50:14:ff:5c:11:
c7:57:f9:af:56:3b:15:9f:e8:51:cc:79:67:36:b5:
d8:92:45:2c:7f:ea:84:52:8e:b5:81:04:75:a9:f7:
31:ca:47:0d:6a:7a:2d:b8:9b:85:13:39:97:4e:e6:
6c:e2:e3:9c:db:6d:2c:d3:db:57:ac:14:64:80:19:
51:fd:87:dd:7d:f7:5e:c6:2c:6e:02:18:37:27:b8:
9e:ed:fb:b0:6c:34:ad:02:8d:1e:67:e6:d1:42:3f:
9e:e5:df:b8:f0:c0:75:9c:4e:d8:ea:b2:b4:a4:3c:
31:49:38:f5:39:e0:95:fe:dd:1d:28:1a:ec:79:29:
75:fa:e2:13:93:59:a3:dd:c7:b6:b9:93:3c:b3:16:
6f:a2:5d:6c:cd:24:f5:d4:dc:5c:24:d8:eb:3a:1f:
c3:26:57:8d:d3:97:80:f8:d3:e4:a7:ae:68:0d:29:
0c:72:89:0f:15:82:16:b8:1b:e0:73:64:8a:74:7d:
89:f1:e2:64:5e:dd:b6:8c:92:9a:b0:6a:aa:87:32:
ca:9d:00:29:02:f1:7b:b3:dc:9d:ae:a7:77:8e:4f:
3d:a2:07:34:43:9f:38:a5:5c:58:6d:88:fe:75:68:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5B:0E:19:4A:42:E6:F7:FC:D4:88:C0:5A:8F:72:8E:A3:56:76:87
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/L1sOGUpC5vf81IjAWo9yjqNWdoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.44.0/22
91.102.128.0/21
Signature Algorithm: sha256WithRSAEncryption
46:f0:f1:22:b9:0a:33:c3:ee:59:18:0d:eb:f7:c9:0b:cd:11:
30:ea:f1:c5:0c:7c:2e:21:2f:61:42:e3:0f:02:f9:50:be:2e:
65:01:33:ab:98:d3:a2:2e:0b:ba:9d:40:b4:23:30:2c:cf:90:
ca:0f:41:8d:19:c2:63:5e:5d:eb:0a:ef:6a:28:77:b5:19:74:
21:31:a0:17:36:54:59:e9:54:0c:65:43:9e:6b:33:c6:25:31:
55:54:fe:80:57:03:3a:0a:3c:ea:75:68:f0:b4:17:d2:16:95:
26:b7:f1:a9:c9:a1:ac:ad:dd:e9:f2:ee:5b:e7:c2:ea:1e:3e:
eb:39:4a:c7:1b:ec:cc:c0:5d:ec:9d:2d:c0:eb:f9:da:8c:10:
e9:ca:f6:58:e3:c2:25:67:8f:39:75:e3:63:69:31:c2:40:87:
68:30:57:af:52:ea:dc:af:c9:00:ff:25:47:5c:bb:64:85:0e:
42:e7:e5:58:07:db:a8:df:f5:5f:34:ea:d8:17:9d:f9:c0:1b:
39:e4:ec:12:f1:29:4f:93:bb:29:72:5a:e9:f6:4d:29:33:68:
50:08:c2:4a:df:98:c9:48:c5:7e:9a:0a:ca:45:a1:45:36:75:
ee:e0:bd:4d:29:3e:1c:b4:21:1b:a1:56:2c:9d:60:40:ef:65:
ee:70:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:56 2025 by rpki-client