Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/T_9WpBkHAHTCm2DhJxpnJct13AU.roa
File: T_9WpBkHAHTCm2DhJxpnJct13AU.roa (raw, json)
Hash identifier: A7+idMA8AFyEFyFHRn3pgVSpJdABBz9NCqjgr/lK9WM=
Subject key identifier: 4F:FF:56:A4:19:07:00:74:C2:9B:60:E1:27:1A:67:25:CB:75:DC:05
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 01942444C71F1D9B7242A2C43657E636385D
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/T_9WpBkHAHTCm2DhJxpnJct13AU.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 132.64.1.0/24 maxlen: 24
132.64.2.0/24 maxlen: 24
132.64.3.0/24 maxlen: 24
132.64.5.0/24 maxlen: 24
132.64.6.0/24 maxlen: 24
132.64.7.0/24 maxlen: 24
132.64.16.0/24 maxlen: 24
132.64.17.0/24 maxlen: 24
132.64.40.0/24 maxlen: 24
132.64.43.0/24 maxlen: 24
132.64.44.0/24 maxlen: 24
132.64.45.0/24 maxlen: 24
132.64.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c7:1f:1d:9b:72:42:a2:c4:36:57:e6:36:38:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fff56a419070074c29b60e1271a6725cb75dc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:9c:65:e7:62:0e:71:58:8a:a1:92:37:5f:
d5:70:2b:a1:f0:2b:16:ca:d1:1e:2b:41:d9:5e:44:
2e:50:fa:0b:75:7d:12:4f:0e:7d:e3:7e:72:fe:bf:
b4:3e:b1:3d:80:b8:fd:22:ff:38:6a:23:75:d9:f5:
e0:06:cb:03:78:c1:de:c0:4e:43:5e:23:64:90:12:
e9:a3:ee:6b:d5:db:1c:d0:30:c1:f2:d7:0a:3f:54:
41:c1:f3:a5:21:c3:14:53:5b:c6:ff:9c:dc:20:0b:
d5:38:52:17:cf:3e:c4:71:b5:32:ac:aa:c6:b2:f0:
73:b6:70:a1:61:36:0e:cb:63:d3:27:74:61:59:d9:
b3:49:81:23:63:25:0a:68:6b:9f:9f:ce:a1:c9:b1:
28:ee:f2:e6:d4:b5:d9:83:5e:c5:35:07:32:d9:08:
f7:29:fb:cc:72:6b:ad:98:b6:29:e6:c1:8e:34:67:
a5:22:a8:6d:76:17:f5:99:73:76:7e:06:7b:7a:47:
8f:b9:7f:b4:5d:c0:2a:f2:81:2a:1d:39:34:21:7e:
36:1a:82:d2:53:04:02:c5:94:3e:08:b6:09:98:73:
bf:72:02:da:bb:23:0b:1f:a6:7c:29:e8:37:e6:f6:
9a:cd:5c:d8:89:7d:ae:36:1b:ed:50:bd:27:bb:6f:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FF:56:A4:19:07:00:74:C2:9B:60:E1:27:1A:67:25:CB:75:DC:05
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/T_9WpBkHAHTCm2DhJxpnJct13AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.1.0-132.64.3.255
132.64.5.0-132.64.7.255
132.64.16.0/23
132.64.40.0/24
132.64.43.0-132.64.45.255
132.64.254.0/24
Signature Algorithm: sha256WithRSAEncryption
97:dc:b1:4f:51:54:ce:47:03:d2:4c:0e:93:b1:1a:c6:0d:7a:
b4:6d:cf:f8:5b:f7:f6:0d:f9:2a:3b:cc:ec:c1:5b:bb:8d:ba:
bb:07:19:91:38:6f:e6:22:57:e0:20:46:d2:e8:0c:67:c1:51:
24:b9:17:f9:d3:50:66:25:2f:31:4d:13:fb:dc:c0:a4:3a:ce:
dd:4f:e5:ed:35:72:5f:ee:e2:91:3f:b4:5f:d3:95:c1:1a:7e:
6a:43:0c:42:d5:e5:04:95:c6:2d:39:9c:19:e8:1f:f3:49:af:
ce:54:98:9d:e6:17:4f:80:05:30:cd:ed:63:dc:d2:50:28:11:
c6:5b:ef:f5:c9:c2:aa:a0:5d:42:52:4e:0d:09:91:b1:7f:a6:
28:c2:b3:b5:78:6c:06:8e:d7:4f:08:99:7e:39:d0:31:93:bf:
9a:64:c5:99:c6:11:d5:c5:9f:bd:d5:06:f8:c7:97:13:62:b7:
2f:d3:07:08:94:28:c3:31:5e:57:d4:08:c1:ec:8d:9d:7c:f1:
88:8a:e8:0e:d9:0a:fe:90:34:a2:1f:0b:d7:74:fa:a1:fb:47:
e3:c1:c5:fc:7c:bb:91:00:6b:fd:97:d9:71:f2:d2:68:ed:49:
e5:21:e4:e2:86:6e:08:09:ec:96:46:c3:1f:47:2a:f2:69:af:
f8:86:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:06 2025 by rpki-client