Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/kRQmIjZUZcW_fI2_4gYw0CKPjk8.roa
File: kRQmIjZUZcW_fI2_4gYw0CKPjk8.roa (raw, json)
Hash identifier: GuGEs/myNDqnLNvt1oCueG5pjZk/wU9SkbqBX0DdzIw=
Subject key identifier: 91:14:26:22:36:54:65:C5:BF:7C:8D:BF:E2:06:30:D0:22:8F:8E:4F
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019423698FAE9227F8F71C087C24FA66BE6F
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/kRQmIjZUZcW_fI2_4gYw0CKPjk8.roa
Signing time: Wed 01 Jan 2025 19:48:28 +0000
ROA not before: Wed 01 Jan 2025 19:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43824
IP address blocks: 160.238.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8f:ae:92:27:f8:f7:1c:08:7c:24:fa:66:be:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91142622365465c5bf7c8dbfe20630d0228f8e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:9d:37:15:a9:8c:24:48:2e:66:12:74:18:
ef:56:60:e0:de:53:15:57:2c:f7:b6:7e:9a:9b:97:
e4:10:f5:f9:eb:70:e2:b6:0b:1b:e6:17:f8:89:cf:
57:92:47:b0:f0:19:6c:36:d0:52:43:44:52:31:e1:
11:2d:a9:d8:e6:e8:95:5b:90:4f:6b:99:15:a2:5b:
bf:fa:27:77:1e:5f:a9:46:9b:f2:6f:26:b6:22:2c:
b1:90:ff:e0:16:7c:1d:1f:f2:73:15:ee:18:2a:3b:
a8:36:8a:fc:a8:e5:3d:38:c6:b9:80:93:dd:26:0b:
cf:92:cc:76:82:25:1b:49:15:73:cf:18:df:82:15:
22:0f:94:97:c3:c6:70:55:58:06:40:f9:9b:5c:c9:
a8:8e:80:36:e4:a7:93:eb:1d:fd:dd:5b:8f:09:d1:
d0:b1:8b:24:a4:1d:46:1f:b6:5b:4f:ad:e2:ca:f9:
39:31:15:9e:f2:9b:a1:9a:9c:a9:d2:41:37:a0:30:
49:58:3c:1c:1d:e0:18:1b:d1:a1:0e:bb:99:76:c3:
54:91:6f:5e:ea:2a:86:b3:60:85:19:56:f5:46:e6:
e5:c7:85:ed:31:1b:63:e5:cc:83:e3:2a:25:8c:d0:
b0:eb:ec:6f:38:6a:94:74:73:92:cc:4c:ec:73:e6:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:26:22:36:54:65:C5:BF:7C:8D:BF:E2:06:30:D0:22:8F:8E:4F
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/kRQmIjZUZcW_fI2_4gYw0CKPjk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.121.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:79:cc:2d:a8:aa:76:31:8c:28:c3:c1:bd:87:b8:e0:60:fc:
1b:d7:07:c8:70:05:aa:7c:8e:4a:01:89:ce:f1:65:ef:90:c2:
e9:cc:c6:35:ec:7e:64:33:a3:da:36:ff:a8:25:4f:9d:4e:86:
92:e9:eb:08:ac:28:04:14:3f:47:e3:9d:96:6d:fd:a2:f1:64:
f1:04:80:36:e7:f3:02:76:13:e5:6d:fa:e8:ee:84:ea:48:78:
65:50:35:28:64:b7:77:2a:a9:00:c5:f5:85:3d:54:34:25:30:
3c:77:7e:3c:b0:16:4e:ba:73:4c:08:f0:19:9c:56:43:27:e4:
a8:ed:d8:ba:f5:b6:c4:3d:79:3c:de:e0:78:29:89:c9:ca:ff:
64:a0:a7:96:5c:29:0d:91:aa:7a:f4:36:49:f7:78:88:3b:b5:
45:69:31:6d:60:56:63:0c:e4:55:ac:36:df:60:06:5a:2a:85:
d9:5a:02:64:aa:50:b2:a4:26:c1:c7:54:92:9a:d8:f9:de:42:
bc:33:5a:33:ca:4d:a1:81:70:0a:22:63:4d:df:9c:8d:60:5c:
15:46:c3:66:5f:ff:84:e3:b8:6d:9f:03:f6:6d:d4:e8:db:c2:
35:69:6f:1e:27:21:7e:04:46:22:f6:2b:0d:49:6d:e3:46:81:
07:96:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:29:33 2025 by rpki-client