Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/IoQpRFacFQZ9HszRYXAifj0QYlo.roa
File: IoQpRFacFQZ9HszRYXAifj0QYlo.roa (raw, json)
Hash identifier: znH4whLDnueXgOA1JHvpV7iCtsRDpxJ5aLqB4eYvdQ4=
Subject key identifier: 22:84:29:44:56:9C:15:06:7D:1E:CC:D1:61:70:22:7E:3D:10:62:5A
Certificate issuer: /CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Certificate serial: 019424B3796DB26948CA21C8125516749F79
Authority key identifier: EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/IoQpRFacFQZ9HszRYXAifj0QYlo.roa
Signing time: Thu 02 Jan 2025 01:48:49 +0000
ROA not before: Thu 02 Jan 2025 01:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35280
IP address blocks: 132.72.0.0/16 maxlen: 16
132.73.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:79:6d:b2:69:48:ca:21:c8:12:55:16:74:9f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Validity
Not Before: Jan 2 01:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22842944569c15067d1eccd16170227e3d10625a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:55:f2:8e:8d:88:9a:8c:2b:67:4c:17:e0:
91:68:cb:7f:a9:ef:88:fe:a0:42:76:6d:a8:94:e9:
1c:74:9e:f6:37:e8:af:08:75:54:bf:0e:e8:92:e9:
25:3d:7d:7e:20:45:36:aa:f7:c5:5b:08:ba:03:19:
0b:e8:8a:a1:86:89:a5:fc:ad:65:20:ec:38:77:12:
7d:f1:eb:fa:ca:37:b6:30:fe:52:f5:f3:cb:5f:fd:
f0:ca:87:87:02:3e:e2:38:ac:b5:04:9d:6e:0e:ce:
5f:26:0b:26:7e:82:dc:fd:73:5f:9e:1e:34:d8:bd:
51:95:fb:87:58:1b:28:47:be:6c:a6:c1:6d:55:3e:
51:23:e4:1e:5b:21:b3:e0:f0:5a:76:49:60:c5:52:
1b:8d:56:81:e7:9d:dc:5d:c9:46:68:40:a6:f3:1d:
1e:5e:36:e5:bf:ad:40:37:2b:36:d8:2d:de:03:06:
cb:5c:c4:89:78:cd:05:be:36:10:25:89:73:95:a9:
65:c4:71:c0:76:19:72:b4:a7:87:1e:0b:d8:84:03:
81:25:b6:29:ea:86:09:f9:11:49:da:2a:8f:74:d3:
50:19:ae:a2:66:3a:a3:41:73:3d:83:ac:0b:e4:49:
1d:b0:be:99:07:2c:1c:67:58:9c:f9:0b:5f:fe:f9:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:84:29:44:56:9C:15:06:7D:1E:CC:D1:61:70:22:7E:3D:10:62:5A
X509v3 Authority Key Identifier:
keyid:EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/IoQpRFacFQZ9HszRYXAifj0QYlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.72.0.0/15
Signature Algorithm: sha256WithRSAEncryption
bc:0e:f5:bb:a2:32:14:ae:1d:f0:54:eb:b8:e7:c6:54:b8:a7:
2d:68:a5:8e:22:06:ee:82:a7:54:17:f8:87:e9:59:e7:0d:df:
ca:d5:6e:55:02:8d:fa:1b:d3:90:ba:c7:2c:d1:91:31:cd:51:
ef:2f:62:d8:a2:5c:72:1d:77:09:fb:78:6c:ed:b0:35:f1:48:
40:f5:ff:c5:97:b3:91:a3:fd:fd:0e:ae:dc:00:2f:32:44:ea:
8f:75:63:41:ce:ad:3e:8e:ae:fa:02:02:12:14:5f:a6:0d:ee:
29:f3:80:b7:7f:6a:29:2e:9d:4f:7e:ae:3a:74:06:ec:72:c4:
6f:fd:88:13:cb:b5:3a:3e:46:63:24:32:d4:f0:ad:06:af:e3:
5b:bd:c2:1d:3e:40:a0:8c:f6:8e:d6:0b:8f:4d:19:a8:70:a9:
7a:ad:87:0d:df:bd:00:83:cb:93:f0:31:3e:80:b2:57:84:d2:
d4:37:b8:6a:28:bc:78:67:0b:c2:35:30:b1:99:78:ee:e2:39:
7a:dc:dc:65:70:f6:2e:88:d2:8f:9c:3c:39:78:27:4d:f5:53:
8d:63:0f:89:b4:a9:8b:ed:c4:47:32:83:7f:9e:51:c2:da:a0:
9a:8c:cc:79:31:00:a4:22:0c:7a:0c:3f:a2:e9:57:1d:9b:c3:
95:9b:42:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:53:03 2025 by rpki-client