Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RpnylAtfM5kJdQR0x_ojPKuiRQM.roa
File: RpnylAtfM5kJdQR0x_ojPKuiRQM.roa (raw, json)
Hash identifier: jz0KZTbT2/G6EggsKgsCNUBPYT3R2Ic4lryGHlahV+4=
Subject key identifier: 46:99:F2:94:0B:5F:33:99:09:75:04:74:C7:FA:23:3C:AB:A2:45:03
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427483D29CFCBE65060158A48B4D15D06
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RpnylAtfM5kJdQR0x_ojPKuiRQM.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52286
IP address blocks: 141.136.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3d:29:cf:cb:e6:50:60:15:8a:48:b4:d1:5d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4699f2940b5f339909750474c7fa233caba24503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:6f:27:77:68:05:c1:23:bf:8f:48:ee:c8:
7b:d2:5d:df:f3:02:6a:15:b1:ef:e2:61:94:99:28:
09:f8:52:07:5c:3d:76:37:8f:42:41:5f:03:f3:b5:
95:54:38:a6:0d:ea:f2:b4:33:47:3a:37:2d:c4:b2:
47:62:59:90:54:7a:7a:3b:1f:7d:24:1b:77:43:0f:
42:4f:2e:3c:22:75:41:9b:85:ac:20:6d:bd:cb:12:
d3:70:33:87:f6:a9:a1:48:fd:91:d7:f3:8d:d1:02:
ba:04:91:77:63:a1:d7:e6:15:92:0c:41:d5:3b:86:
66:f1:41:18:84:9e:4e:da:b9:9f:e0:41:c0:1c:da:
38:24:4b:02:42:a8:7f:d9:88:66:9b:1f:53:3d:af:
e9:13:ca:2a:1d:67:d9:e5:54:de:ad:86:34:5b:b1:
a3:cc:b9:eb:ac:c3:d2:87:5b:cc:96:2c:14:38:88:
94:05:42:07:21:e0:b9:10:c5:79:dc:ae:5a:22:06:
da:a8:eb:8e:3d:c2:a1:c5:df:3c:c0:31:b9:43:ae:
3d:d7:8f:e3:10:2e:07:74:7f:9b:85:dc:f1:0c:59:
41:af:ee:fc:7e:0c:99:2c:1b:f6:43:96:11:e8:c9:
59:13:05:da:db:b5:0c:d1:f7:ac:07:b1:c5:5c:2e:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:99:F2:94:0B:5F:33:99:09:75:04:74:C7:FA:23:3C:AB:A2:45:03
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RpnylAtfM5kJdQR0x_ojPKuiRQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3f:0c:59:20:28:28:fc:14:20:9b:9b:08:50:30:8d:c2:d3:
cf:f2:c1:75:cb:ee:67:74:20:ad:c6:4e:7b:ed:ab:67:1b:56:
47:4c:ac:a2:94:55:57:17:5f:8e:d8:db:b2:7d:a8:16:80:e7:
fb:50:72:98:70:9a:87:f3:eb:f0:38:7e:2b:fe:30:38:be:f2:
9c:bb:20:7b:b8:64:5d:f3:6d:5b:6a:d4:b3:f8:36:95:bf:9c:
8a:38:bc:6c:a4:db:8c:f6:a0:6a:f8:a9:47:3c:06:fa:2b:16:
95:08:97:4d:03:ff:62:ef:a8:ab:8a:e3:71:99:45:f0:75:61:
29:4c:48:9a:a9:2f:b7:d4:21:eb:ec:00:81:40:08:3a:3d:66:
83:2e:11:56:69:8a:de:fa:e9:b4:c8:af:98:49:c4:41:bb:1f:
f7:b5:ce:2a:7f:19:42:2c:f2:17:9c:66:d3:2d:f4:1e:98:48:
35:04:41:29:a7:53:c6:59:e0:81:dc:c8:74:c9:ef:8e:52:bc:
30:26:5e:4d:41:44:d5:3b:75:2c:24:89:12:29:b3:79:09:bb:
47:d5:1f:3f:47:f7:df:26:26:0e:db:a0:b3:82:4c:0f:d7:b2:
12:74:a3:b5:f2:fe:d9:b6:b8:b7:f8:5f:65:a3:40:c7:ab:fc:
9a:b7:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:15 2025 by rpki-client