Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/9G61nTw40oudLW3JOC_FQ0aHHQs.roa
File: 9G61nTw40oudLW3JOC_FQ0aHHQs.roa (raw, json)
Hash identifier: PZHJFgFZ1M5t+8j0But6rI9U9bsojNq5vU54p68gWrI=
Subject key identifier: F4:6E:B5:9D:3C:38:D2:8B:9D:2D:6D:C9:38:2F:C5:43:46:87:1D:0B
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 019422FB33BAFC1F9F3C2E9D1178A9FA1AAC
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/9G61nTw40oudLW3JOC_FQ0aHHQs.roa
Signing time: Wed 01 Jan 2025 17:47:55 +0000
ROA not before: Wed 01 Jan 2025 17:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198129
IP address blocks: 128.127.72.0/22 maxlen: 22
128.127.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:33:ba:fc:1f:9f:3c:2e:9d:11:78:a9:fa:1a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Jan 1 17:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f46eb59d3c38d28b9d2d6dc9382fc54346871d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:82:62:a8:fe:92:e3:23:05:b6:42:10:a7:
c1:db:4a:2c:97:bd:26:0d:5c:65:61:07:7f:71:a3:
d2:4f:60:a4:d5:65:a6:f4:ad:d6:c5:36:50:3e:cd:
97:ab:a5:0d:fd:45:04:1a:12:18:17:9b:83:27:5a:
10:8f:88:a7:58:d6:f7:c4:0a:73:49:c1:04:0f:87:
52:45:5b:5d:6b:4e:21:f2:88:54:31:39:76:6b:35:
25:e7:8c:73:3a:c5:73:96:d5:bb:e2:6c:5c:c1:dd:
96:79:23:00:ec:73:4f:93:7c:52:0c:83:0d:d7:bc:
12:3e:6e:6c:03:03:33:d1:08:f6:3e:e3:fa:97:3e:
4f:1d:de:42:cc:5d:8c:1b:19:04:47:c5:f4:95:ee:
48:48:81:c6:b6:3d:32:8d:da:0f:9d:41:9f:c9:14:
8d:fd:13:77:27:22:2e:97:db:a6:cc:cc:47:c0:ac:
ad:e4:f2:c1:a2:2e:7b:73:9e:50:6d:b7:45:5c:4b:
af:01:a5:9e:c8:42:76:05:38:52:79:63:68:bf:53:
7d:b7:fd:c2:d1:11:a4:8e:8b:30:d8:66:08:79:38:
e8:5a:9e:d3:67:6a:10:e9:37:fc:81:07:93:2f:8e:
c3:7f:c8:3a:8a:b2:67:25:15:7d:6f:10:dd:66:18:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6E:B5:9D:3C:38:D2:8B:9D:2D:6D:C9:38:2F:C5:43:46:87:1D:0B
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/9G61nTw40oudLW3JOC_FQ0aHHQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:70:86:d7:51:62:c0:49:30:f8:91:9c:75:d2:67:34:8e:57:
52:f9:16:e0:c9:ca:07:6f:c9:af:92:a3:3b:9b:10:80:d7:43:
08:6f:bf:4e:6e:e1:7a:66:8c:f7:0d:ef:72:b1:e3:9f:9a:53:
ed:23:60:6a:09:3b:ac:26:a8:fe:81:2c:43:1f:7d:74:a0:5f:
9a:ff:97:18:2b:b5:c2:1c:cb:4c:49:ea:02:dd:12:fc:7a:18:
36:a4:ad:6d:c9:b4:fc:ff:4d:3d:6f:cc:b3:47:76:8d:6b:7a:
6e:be:20:3d:f8:b1:f6:b0:df:94:cb:92:80:c3:5c:3d:50:a1:
c4:01:00:11:77:52:24:d4:3c:de:72:b7:76:9e:1c:37:03:24:
e2:2b:4b:fb:1d:2d:bf:d6:11:71:91:7f:4c:9c:ab:f4:b5:30:
1d:42:49:80:9b:0b:a8:03:85:cb:16:e8:21:fc:ba:14:e3:c6:
7c:c4:32:c0:4a:c0:cb:91:44:36:b1:30:e1:71:49:93:b6:1a:
1f:ff:06:6f:82:bd:5d:0b:2a:11:17:a3:62:c1:46:da:c7:1b:
fe:c5:58:76:d6:34:9e:cb:57:f5:9a:37:7d:ad:38:d2:64:bf:
77:3e:f5:8b:2f:d8:52:2b:cf:70:bd:42:e4:f1:77:db:27:78:
70:64:1d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:20 2025 by rpki-client