Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/v4jwL5aOsrT26_p1kgTPrH3mZlo.roa
File: v4jwL5aOsrT26_p1kgTPrH3mZlo.roa (raw, json)
Hash identifier: rOGwOA5pBv3+y17Rws4nAP6xpKvfCcI+X3+rY1qP40Y=
Subject key identifier: BF:88:F0:2F:96:8E:B2:B4:F6:EB:FA:75:92:04:CF:AC:7D:E6:66:5A
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD191C9C526E614B07FA11D67DAEB9
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/v4jwL5aOsrT26_p1kgTPrH3mZlo.roa
Signing time: Thu 02 Jan 2025 07:48:51 +0000
ROA not before: Thu 02 Jan 2025 07:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13768
IP address blocks: 104.249.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:19:1c:9c:52:6e:61:4b:07:fa:11:d6:7d:ae:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf88f02f968eb2b4f6ebfa759204cfac7de6665a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:dc:05:56:ec:c5:3a:dc:e4:a9:af:fc:08:
b9:f7:a4:b2:2c:ea:ed:f3:e9:1c:fc:0c:0d:9a:60:
6d:09:f6:ae:56:fc:a0:e5:cb:e4:55:8d:ee:b1:0a:
6a:73:c7:6f:bf:04:42:ae:7c:14:2c:93:b6:72:3f:
f5:80:57:2e:82:41:34:f2:82:85:88:23:7e:5c:8a:
6e:5c:dc:ab:dc:0a:8e:e5:e8:00:40:6e:28:87:96:
72:85:38:45:46:6b:5b:ff:51:58:0d:ba:c4:80:4c:
28:57:ab:6d:70:86:0d:ea:4f:1b:a1:84:8b:0e:7f:
24:e8:8f:07:6d:85:e3:66:78:44:15:ae:cd:86:7d:
9b:3f:c4:31:9a:85:13:6f:55:48:5b:39:1b:8b:a1:
dc:4d:8d:90:67:db:a0:06:f5:a0:34:7c:69:21:ee:
20:ca:1f:ac:d2:e9:ef:c4:46:52:ac:61:d2:18:3c:
ac:f6:a7:dc:b7:3b:84:3a:c4:bb:a8:a7:bb:6b:ee:
8e:f5:75:c8:ff:e4:29:5e:dd:ba:71:d7:fa:40:70:
e0:fa:2e:1b:29:d6:8d:23:45:90:3c:f5:94:7a:df:
7d:26:1c:b0:ff:02:41:e4:d8:ee:0d:8a:f5:5c:09:
d1:c8:7e:15:21:87:9b:98:e9:e4:3e:04:55:46:fc:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:88:F0:2F:96:8E:B2:B4:F6:EB:FA:75:92:04:CF:AC:7D:E6:66:5A
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/v4jwL5aOsrT26_p1kgTPrH3mZlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.24.0/24
Signature Algorithm: sha256WithRSAEncryption
06:59:af:8e:db:cc:e5:31:95:41:e6:3e:4e:42:3b:14:79:a2:
23:06:e7:6b:98:ad:20:9d:1f:f4:13:b1:14:75:76:52:ea:a8:
b8:12:ce:e6:66:e9:90:b7:bc:bc:97:ab:a6:37:36:a1:9c:86:
74:ac:36:ea:ba:fb:71:f2:e7:de:cc:61:54:06:e8:0d:95:ba:
20:8c:09:8d:be:9e:a8:80:6a:47:bf:b3:98:b1:96:63:77:8c:
bc:f1:80:0e:a0:84:e3:03:00:11:e5:7f:48:e3:86:dc:e1:91:
da:da:07:6e:d6:3b:c9:0b:35:43:fe:2e:b1:c1:19:62:6d:67:
f0:f2:27:b7:a1:92:e3:8a:1e:86:49:57:2b:f2:95:c2:c2:e1:
b9:97:48:82:8a:5a:39:25:ff:cf:6d:9d:9d:7e:0f:4b:49:c2:
5d:ae:35:ed:1b:68:0d:e0:0b:e5:0a:da:6b:bb:17:7e:6d:49:
2d:f7:00:c9:c3:e3:be:d5:54:e6:30:52:15:3e:e8:84:4f:70:
e3:46:9f:72:d7:8b:c3:1d:a7:4a:cd:89:37:fa:34:7f:8e:c5:
54:5a:c1:c9:0a:18:89:35:bb:2f:a9:44:e3:fb:26:11:51:e2:
9d:a7:69:b0:6a:17:5b:d9:de:c4:86:b7:b0:64:8b:99:bf:31:
b7:5e:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:11 2025 by rpki-client