Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/fQXFxJSN9BagFfjo2DmNPvMm7jA.roa
File: fQXFxJSN9BagFfjo2DmNPvMm7jA.roa (raw, json)
Hash identifier: FdxBv72Vrgl8zommYdes+V1sBKnJIk3smmRhVlaFX0I=
Subject key identifier: 7D:05:C5:C4:94:8D:F4:16:A0:15:F8:E8:D8:39:8D:3E:F3:26:EE:30
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0194CAF032407F01634B38751C265553DB29
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/fQXFxJSN9BagFfjo2DmNPvMm7jA.roa
Signing time: Mon 03 Feb 2025 08:32:06 +0000
ROA not before: Mon 03 Feb 2025 08:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201826
IP address blocks: 5.42.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:f0:32:40:7f:01:63:4b:38:75:1c:26:55:53:db:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Feb 3 08:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d05c5c4948df416a015f8e8d8398d3ef326ee30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:b9:e8:1f:16:44:d0:78:39:88:10:c6:0c:
a9:86:4c:2f:a7:e6:9b:95:51:ee:48:50:37:fa:f9:
aa:e1:ec:3a:1e:55:f2:f8:af:c9:ef:fa:3b:84:42:
5b:63:28:7a:d6:fc:d9:5a:7f:ed:bc:31:15:9e:98:
9d:4a:88:07:a4:c6:e9:d4:30:a5:29:23:4d:97:f9:
bd:90:a3:11:86:84:cc:d1:85:fd:e7:46:02:a5:6a:
51:74:85:bc:1d:8e:cb:78:20:0d:18:40:dc:48:7f:
60:74:fb:ba:9b:58:86:d1:2f:d4:de:9c:45:79:73:
24:0d:66:99:11:3c:de:9d:86:b7:b9:38:d5:58:fb:
05:bd:95:86:7e:ee:0e:7a:a5:02:20:4e:c6:73:c7:
f7:8a:1e:6a:7a:1f:77:43:fa:0b:ad:2f:22:a0:7f:
c9:9f:4d:ed:be:5b:01:d9:84:ae:52:46:a5:70:c2:
0a:80:42:03:58:c7:86:07:8c:cd:72:68:26:77:9c:
14:92:17:e0:ed:e8:b5:02:f0:5e:f9:74:45:82:bc:
7e:93:bb:52:33:a0:df:0b:f2:9a:2d:fa:0b:76:31:
68:04:80:cc:ff:95:24:fa:52:2b:de:e2:3b:63:83:
f5:b4:31:af:f1:bb:3d:ee:24:6e:a6:34:13:db:a5:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:05:C5:C4:94:8D:F4:16:A0:15:F8:E8:D8:39:8D:3E:F3:26:EE:30
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/fQXFxJSN9BagFfjo2DmNPvMm7jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.88.0/24
Signature Algorithm: sha256WithRSAEncryption
24:de:16:06:ad:88:c4:8f:63:b7:98:27:d3:b5:14:aa:74:a2:
9a:ae:04:be:bb:56:3d:c1:9e:97:31:a6:ee:14:2b:e5:5b:15:
df:d8:ec:03:e9:25:69:fd:59:53:8f:7e:c3:b2:c2:a4:9d:62:
73:ab:65:99:18:0c:c7:f1:23:7a:45:01:2a:84:dd:c4:44:ac:
71:ce:14:26:1b:92:9e:0b:e7:3c:3f:11:bd:18:0a:01:d7:f2:
11:bb:05:be:0a:2d:6a:a8:0c:d7:ec:64:b4:ad:de:1c:1d:92:
84:56:12:fa:bb:50:55:0f:6c:ae:7c:ed:b8:63:54:c6:0d:47:
f0:bf:1a:08:d4:c0:e7:c3:fe:b3:5c:e5:7e:2c:c4:42:c8:20:
8f:6a:d0:c2:79:f5:18:ff:82:25:09:cb:22:24:8e:08:b5:13:
70:de:6b:8d:e0:c9:56:d5:fe:d2:ff:3f:53:43:23:91:16:92:
de:fa:91:42:d4:3c:32:25:8d:0d:d2:53:d1:46:f2:37:e1:90:
3a:a8:c5:14:50:ec:8a:29:09:55:6a:95:c7:b2:2c:03:91:00:
c0:2e:2c:20:22:b1:20:df:9d:92:ef:fd:75:2d:0a:12:7f:21:
1b:ec:b0:e3:c7:e3:7b:5b:47:3a:08:16:5c:c9:2e:50:30:4f:
f3:14:c3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:32 2025 by rpki-client