Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/rWkQj7TgOLZZA8E4J5xTwZUZtCA.roa
File: rWkQj7TgOLZZA8E4J5xTwZUZtCA.roa (raw, json)
Hash identifier: iVc6rEsxLhBO15L95WXzTOEAvF+Pam9QPl5V09KJqGI=
Subject key identifier: AD:69:10:8F:B4:E0:38:B6:59:03:C1:38:27:9C:53:C1:95:19:B4:20
Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial: 0194228D89C5FFA34A9A04B4040257C6ADE4
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/rWkQj7TgOLZZA8E4J5xTwZUZtCA.roa
Signing time: Wed 01 Jan 2025 15:48:08 +0000
ROA not before: Wed 01 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 216.25.124.0/24 maxlen: 24
216.25.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:89:c5:ff:a3:4a:9a:04:b4:04:02:57:c6:ad:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Validity
Not Before: Jan 1 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad69108fb4e038b65903c138279c53c19519b420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:b6:14:26:37:86:3e:b3:23:bc:86:b3:0f:
5e:1c:78:c0:b7:95:92:84:4e:21:06:d5:e5:f5:03:
16:a7:df:af:0c:d4:80:d4:0b:cd:72:08:d2:4e:91:
12:d8:0e:85:fd:26:98:83:91:e7:f0:8f:c9:82:c5:
d8:5d:bc:fb:42:ab:de:7d:a0:f3:48:49:82:f0:0d:
5b:7d:db:70:5d:de:8d:b7:3e:17:12:5a:51:7a:50:
f1:f3:63:e6:2c:66:e3:c6:98:89:76:fd:7c:5c:ba:
cc:39:ec:25:09:fd:7c:2c:d1:08:1d:04:07:05:c6:
4d:50:bd:71:48:3f:89:2d:09:e9:82:2f:4e:77:2f:
bc:20:1b:34:8b:9d:01:13:b1:62:fd:f3:5b:cc:9a:
fd:53:ee:d0:33:0c:7c:13:7d:4d:0c:fd:78:65:e2:
90:30:25:0f:89:73:72:97:35:b1:60:94:a4:d1:0c:
0e:a8:92:1b:99:78:0e:05:0e:49:ac:83:c7:92:09:
27:c2:96:ec:f3:54:19:97:38:77:64:92:7b:dc:bf:
0a:3d:74:24:1d:b5:9f:7c:1e:80:5b:60:84:0b:a0:
8e:9d:ef:04:68:8d:d3:86:7f:8d:84:32:19:44:c0:
5b:1b:51:4a:00:d6:3d:c5:93:4a:eb:ab:39:bc:85:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:69:10:8F:B4:E0:38:B6:59:03:C1:38:27:9C:53:C1:95:19:B4:20
X509v3 Authority Key Identifier:
keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/rWkQj7TgOLZZA8E4J5xTwZUZtCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.25.124.0/23
Signature Algorithm: sha256WithRSAEncryption
32:a0:52:22:85:cb:76:1d:63:26:27:a7:a1:ec:5d:45:95:9b:
63:2c:04:81:3a:e9:92:00:0c:c4:88:54:25:2f:d3:91:33:e5:
2a:9d:80:b6:27:39:e0:82:09:f5:39:9b:24:43:b0:fa:42:d7:
dc:65:fa:01:51:45:64:a7:f0:67:e3:cd:6f:26:9a:24:c3:68:
e7:1b:9d:de:60:a4:d6:fa:b1:01:79:19:7e:a9:91:ad:9d:d1:
a8:ab:a1:ef:60:34:47:c9:30:1c:21:40:00:9d:68:62:73:39:
24:f0:72:49:fa:8c:2c:fe:e0:ab:ec:ac:62:7d:80:e2:ee:30:
77:54:80:59:50:e8:3e:1b:98:e2:e7:f1:27:66:d8:98:e2:20:
3a:08:79:33:cb:da:7f:a4:3e:1a:58:bc:bd:66:b1:3b:36:93:
4b:38:60:81:f2:22:c9:4b:e6:fe:4c:ed:b4:ef:ad:a3:aa:38:
04:3d:62:07:58:c0:9c:b0:95:0b:c1:77:81:dc:ad:be:4d:3c:
89:53:60:df:f1:a1:3f:45:c9:47:4f:31:53:c9:67:65:83:87:
cf:98:8f:49:90:72:54:de:df:45:d2:6d:56:b2:88:15:33:98:
34:b9:da:56:d0:fc:74:99:7d:ed:99:86:e3:57:1b:bc:00:2a:
19:1d:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:10 2025 by rpki-client