Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/96XnvJmmcs-shacN8rKKRU5entA.roa
File: 96XnvJmmcs-shacN8rKKRU5entA.roa (raw, json)
Hash identifier: MkjMzrz/Qh4lGjMRy5w5MZrRkNBOzf1QNON/0q2MXao=
Subject key identifier: F7:A5:E7:BC:99:A6:72:CF:AC:85:A7:0D:F2:B2:8A:45:4E:5E:9E:D0
Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial: 019425FC0EB5AF5CB6E54833E6EDE3A2D222
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/96XnvJmmcs-shacN8rKKRU5entA.roa
Signing time: Thu 02 Jan 2025 07:47:43 +0000
ROA not before: Thu 02 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 116.199.224.0/21 maxlen: 21
116.199.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:0e:b5:af:5c:b6:e5:48:33:e6:ed:e3:a2:d2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Validity
Not Before: Jan 2 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7a5e7bc99a672cfac85a70df2b28a454e5e9ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:ab:84:f5:c3:47:8b:dc:7a:3d:6f:b9:46:
9f:96:33:cc:68:8a:25:73:0d:62:39:58:16:b0:1c:
87:8d:07:37:fe:2b:03:12:69:9d:e7:96:92:1a:bd:
77:8d:c4:8d:98:4c:1c:16:43:e7:34:a2:68:d1:4d:
25:12:38:64:1f:19:25:07:89:73:94:76:40:f3:bf:
cb:5a:3a:f0:28:35:5a:c0:7b:ef:9f:09:67:cd:51:
ed:c5:5d:69:89:17:e4:af:2b:3f:8f:21:cc:f6:f5:
48:0c:5d:d4:75:57:6e:1c:ef:b5:c1:0f:21:a1:a0:
ce:9a:07:5b:88:fa:36:32:c6:d2:31:af:d1:95:74:
84:ba:45:11:4f:d6:83:0b:b1:bd:85:62:ef:eb:03:
2c:42:da:39:98:1a:ca:61:35:de:cc:eb:b7:4d:a2:
32:96:47:d4:25:e6:08:d9:87:ed:91:aa:e7:60:12:
09:d2:ff:0b:26:6e:d6:03:a5:4d:83:dc:6f:88:6d:
4d:21:c1:08:ef:62:60:54:a3:38:82:71:3b:61:3b:
90:e8:8b:6b:f7:f9:52:a5:38:d6:da:8b:fd:94:0f:
3b:00:e3:2b:a4:f6:aa:d3:c8:df:be:b8:ec:9b:c9:
0f:36:4f:69:d2:75:4d:31:cf:74:9a:02:ae:54:d4:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A5:E7:BC:99:A6:72:CF:AC:85:A7:0D:F2:B2:8A:45:4E:5E:9E:D0
X509v3 Authority Key Identifier:
keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/96XnvJmmcs-shacN8rKKRU5entA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.199.224.0-116.199.233.255
Signature Algorithm: sha256WithRSAEncryption
71:be:38:15:dd:34:97:96:a2:9e:b2:11:bc:03:b7:52:4a:59:
1f:52:de:16:01:a2:e2:e5:a0:23:c9:d9:c8:36:be:6c:2a:04:
59:3e:d1:ad:8c:fe:72:5f:9f:82:b9:48:f0:f4:6d:d6:31:05:
d0:8b:16:cf:9a:83:57:6e:83:f8:05:03:02:d6:8a:6d:af:26:
da:04:0e:56:0f:4f:04:d4:fa:e0:39:e5:2f:7e:e2:d5:34:ae:
28:e0:4d:78:ef:15:0c:a7:d8:ca:2f:26:0d:46:a1:fa:a2:85:
d7:43:e7:f6:90:65:b1:3b:04:4a:8e:2c:f8:87:9d:4e:7e:8c:
2b:bb:10:d2:56:dd:e4:02:ce:b9:bc:5d:24:9c:29:dc:d0:11:
64:f8:a7:ce:b0:af:d3:3b:de:74:fb:dc:32:d1:82:37:58:5b:
8b:ff:2a:a1:e8:4b:d8:39:eb:24:18:b3:33:2e:26:84:72:b0:
11:13:b9:24:ba:a7:85:de:75:3c:c5:4e:3e:80:80:d1:10:39:
cb:9c:dd:e8:65:4b:92:0c:a0:c1:b2:81:ea:f1:d8:48:6a:08:
dc:48:87:7f:39:96:70:14:35:de:7e:ff:df:4a:80:ab:0e:5a:
4f:05:0b:c9:9a:15:ea:3f:43:f2:fa:7e:ce:e6:2b:4d:ab:4f:
a5:04:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:16:23 2025 by rpki-client