Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/H5d_lPyEsnYz4q2oN5tTl8sTqLM.roa
File: H5d_lPyEsnYz4q2oN5tTl8sTqLM.roa (raw, json)
Hash identifier: 8+DmTjqMgM52jHQcyTbAhuFey3BXjMjWMeaTDEPNYTg=
Subject key identifier: 1F:97:7F:94:FC:84:B2:76:33:E2:AD:A8:37:9B:53:97:CB:13:A8:B3
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0194D5F4F0977F5AD7A8226C5C1617B1A7F9
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/H5d_lPyEsnYz4q2oN5tTl8sTqLM.roa
Signing time: Wed 05 Feb 2025 11:53:06 +0000
ROA not before: Wed 05 Feb 2025 11:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 64.137.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:f4:f0:97:7f:5a:d7:a8:22:6c:5c:16:17:b1:a7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 5 11:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f977f94fc84b27633e2ada8379b5397cb13a8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:03:0e:e9:87:4e:0e:3e:33:5c:75:f2:8f:
aa:19:2b:0d:28:a3:9a:0f:ce:98:05:b3:65:6b:c0:
ac:9f:c1:a9:7f:08:9b:45:34:b3:2c:53:35:f3:1b:
d6:2d:46:f0:1b:9f:e9:ae:6f:1d:13:28:37:92:52:
42:3f:dd:e5:35:53:4d:01:af:43:02:b1:c5:8b:26:
1b:85:28:dc:05:ce:75:ab:b7:ff:7f:9c:1b:e0:e5:
c8:2b:8d:4e:66:1d:31:09:3b:34:60:b7:ee:11:47:
de:89:1f:0a:12:f2:77:e8:10:20:f6:88:fd:c0:86:
2a:82:c1:b5:75:76:e7:03:56:db:98:7b:09:2f:3a:
4a:00:20:6f:09:45:1d:a7:8d:ac:d0:3b:22:74:00:
b0:75:56:6b:fb:c3:e2:a8:76:25:51:53:ec:80:8d:
b1:e3:e6:8a:e4:79:33:50:57:02:2b:6a:e8:bc:8c:
e9:f8:a4:80:86:57:22:88:39:8f:5e:00:1e:98:8e:
92:0a:f9:b3:fe:d2:59:77:15:03:2d:62:4f:8d:25:
4b:30:37:27:db:e6:a7:ff:fa:da:b0:82:03:fa:18:
e6:6b:49:fa:76:de:1e:a9:38:06:f1:a3:aa:a1:38:
a5:b9:a4:8b:40:ca:54:76:67:89:99:59:da:f0:d2:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:7F:94:FC:84:B2:76:33:E2:AD:A8:37:9B:53:97:CB:13:A8:B3
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/H5d_lPyEsnYz4q2oN5tTl8sTqLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.54.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c8:a4:a4:dc:b4:11:16:9e:0a:cc:16:e6:5d:38:c7:9b:62:
e1:6f:0f:e4:92:9c:f5:90:41:be:24:d6:c2:50:e6:62:ca:06:
15:a9:6b:be:9b:6e:52:37:d0:ae:4e:5a:51:a9:20:c9:77:81:
81:ac:fb:a0:66:e3:3b:11:6c:9e:ef:07:10:2e:81:bf:48:e9:
00:3e:ba:b6:c9:cf:ef:5e:b1:3d:54:2a:84:c1:11:9f:a7:6b:
f5:12:1f:d9:eb:bd:13:34:a5:7f:97:4e:6b:ab:8b:8b:2c:23:
1e:83:c6:08:4c:28:50:95:4a:8a:84:07:90:9a:9a:ee:34:2d:
55:77:2f:49:ac:ee:b9:ee:60:f0:6c:e9:b7:42:8e:7a:10:93:
93:57:e4:85:c1:aa:c8:29:56:78:46:eb:5d:d6:91:a1:43:a3:
bf:50:a7:0a:66:79:a0:4b:8c:89:35:16:7f:a5:6e:be:14:51:
3d:2d:f0:7c:55:17:dd:0c:0b:da:c9:1b:ab:6b:9b:05:1b:22:
d6:6d:fb:3f:d8:46:5b:f0:e2:d8:b7:e3:8f:28:24:36:06:ce:
91:96:20:a5:2f:cd:6f:08:4e:51:28:27:f3:62:2d:32:d2:7b:
21:52:25:85:9f:14:0b:4d:fc:69:50:d1:44:68:6f:7a:32:55:
76:11:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:23 2025 by rpki-client