Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/bJOubptyDCUoksZUBTEQqGVmM9c.roa
File: bJOubptyDCUoksZUBTEQqGVmM9c.roa (raw, json)
Hash identifier: 5AtXcXlAprhgr08DWqOvaQo1UWB8kRpiaZt7z80DD44=
Subject key identifier: 6C:93:AE:6E:9B:72:0C:25:28:92:C6:54:05:31:10:A8:65:66:33:D7
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019424458B0BA471F06374D74007E569C3BD
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/bJOubptyDCUoksZUBTEQqGVmM9c.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60993
IP address blocks: 128.0.53.0/24 maxlen: 24
128.0.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8b:0b:a4:71:f0:63:74:d7:40:07:e5:69:c3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c93ae6e9b720c252892c654053110a8656633d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:fd:a8:52:43:8f:47:72:1f:57:57:f5:c1:
a8:3e:da:49:2c:26:9d:9c:81:10:9f:b5:f2:f1:3c:
f3:a6:2d:e5:3a:86:4d:9f:3a:d9:56:cd:4c:98:91:
d3:f0:5a:4d:f9:d9:a6:bd:f7:2c:59:62:bf:ae:0b:
d3:9a:2e:fa:b9:2f:50:51:fd:35:27:c3:0f:35:84:
51:67:8b:9a:8b:95:f7:e2:47:51:f9:1d:f6:68:d7:
65:64:1d:2e:4c:d2:41:5c:46:4d:71:3d:23:3a:e6:
a0:3b:b2:91:8c:a6:97:5a:e4:ed:08:90:c0:c6:88:
00:72:32:02:1b:13:39:c0:b9:0a:8f:2d:0a:0c:f5:
01:3c:7a:d1:18:14:12:88:95:bb:48:0f:ce:59:5e:
b8:45:b4:d2:c8:3d:06:41:4e:fb:c7:b9:d6:1e:be:
14:54:3d:cd:c5:af:58:db:36:0e:83:2a:bc:ac:48:
f2:9c:29:66:99:30:53:59:74:45:a7:7b:0a:cc:46:
73:66:98:90:df:c2:66:29:69:f7:8d:ed:eb:7c:f3:
d2:5e:9a:b6:83:26:d9:7b:ec:4f:78:3a:e1:d1:b4:
dc:b4:4c:7d:cb:c3:bb:dd:11:6a:4b:c0:0a:93:d4:
33:a7:6b:5c:60:5c:2b:8f:e3:e1:d2:0d:b8:74:b4:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:93:AE:6E:9B:72:0C:25:28:92:C6:54:05:31:10:A8:65:66:33:D7
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/bJOubptyDCUoksZUBTEQqGVmM9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.53.0/24
128.0.57.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c1:6d:e0:29:8e:92:de:e1:c2:be:90:65:29:22:9f:13:20:
1a:33:a9:68:ae:ae:7e:5e:c0:af:ca:c4:46:d1:2b:39:39:f7:
67:f5:76:f3:1d:7e:cd:1e:86:80:8c:ca:6e:3c:94:4c:77:9e:
29:d0:48:9a:61:3b:b0:f6:a5:0d:85:21:2c:af:07:d2:f3:de:
ea:9f:80:ed:48:64:1d:06:4b:54:bd:06:d9:bd:dc:d8:63:77:
d6:1a:b4:a4:b4:de:3a:61:73:46:9e:e4:0f:b8:31:7e:14:c8:
d4:2c:89:34:45:d8:5a:29:e8:9c:fe:24:53:d6:a0:90:eb:96:
90:a2:a6:c7:5d:31:bf:c6:66:55:09:85:02:1b:a4:03:36:d6:
e7:3f:60:0e:df:9e:07:5d:42:ee:05:fd:23:21:10:58:90:b4:
39:e0:86:2a:bd:2a:43:0d:de:9d:23:f6:01:e1:2e:59:64:34:
16:39:5f:aa:80:60:35:be:6d:f6:c0:44:d8:26:93:0e:3b:ad:
71:ac:37:59:cf:5d:f8:c8:14:cc:07:b8:e0:88:72:64:06:fd:
13:51:16:96:21:9e:97:af:22:88:03:cc:96:71:55:1e:c9:5a:
56:59:33:aa:e1:e4:a6:83:b3:5e:46:7c:3f:f9:46:85:66:85:
2e:2f:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:53:36 2025 by rpki-client