Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/N5yHtSmIzjdux70VxbibkigJnPs.roa
File: N5yHtSmIzjdux70VxbibkigJnPs.roa (raw, json)
Hash identifier: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=
Subject key identifier: 37:9C:87:B5:29:88:CE:37:6E:C7:BD:15:C5:B8:9B:92:28:09:9C:FB
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 019423D7F46AF57C57A31E47FA80DCDA55B1
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/N5yHtSmIzjdux70VxbibkigJnPs.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209199
IP address blocks: 185.124.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f4:6a:f5:7c:57:a3:1e:47:fa:80:dc:da:55:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=379c87b52988ce376ec7bd15c5b89b9228099cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:de:15:3a:40:29:76:6c:1f:17:12:ee:e8:
b7:b8:d2:9c:23:88:25:ea:1d:c0:5b:69:4b:18:0b:
43:e4:cc:3d:47:38:39:eb:44:ff:06:0b:22:36:ee:
ef:7c:68:d5:3e:41:04:40:30:22:0b:d7:c7:b5:89:
c4:93:5e:07:ff:64:b2:94:0e:28:b2:f8:2a:82:31:
dc:06:69:01:58:64:3c:1f:bf:d6:d1:19:b1:4f:59:
8c:73:1f:79:16:2e:31:6e:04:64:c9:86:bc:2b:f2:
a4:73:8d:d2:15:bf:1a:ff:22:20:dc:e6:38:15:e8:
2e:0b:97:e1:c9:6d:7e:21:c1:51:c1:61:3b:e8:63:
ff:fa:56:79:9e:c9:8a:af:d1:1f:c4:d6:3e:34:02:
af:b4:c7:ba:9e:60:c8:1e:20:2d:33:a3:e6:91:da:
46:82:e1:ef:a6:a2:d7:5a:36:6f:70:1f:50:ca:a9:
ee:34:2f:b4:39:aa:07:be:4b:6c:bc:42:3d:6b:04:
b2:63:83:26:53:0d:74:3b:ff:56:0e:78:da:2c:b5:
9f:65:1a:96:6b:df:aa:df:80:36:47:43:b0:84:04:
dd:ad:2d:a1:6f:4e:08:44:ce:0d:c2:fa:7f:0c:a4:
bf:9e:26:4e:3a:71:be:96:0d:34:54:0d:52:3d:57:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9C:87:B5:29:88:CE:37:6E:C7:BD:15:C5:B8:9B:92:28:09:9C:FB
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/N5yHtSmIzjdux70VxbibkigJnPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:15:81:d1:95:da:47:de:40:59:4a:2d:c5:13:3e:0b:ee:36:
d3:ec:28:ec:08:31:09:f2:aa:8c:b9:33:e3:73:66:b6:c4:23:
f8:1e:b7:91:42:3a:e1:68:e8:2b:a8:ba:d7:4b:f8:36:8c:0a:
f7:03:55:5d:1f:1c:e6:c3:9b:d6:13:9f:04:8d:c1:c0:f9:0a:
b5:46:31:e3:ae:e6:f9:cf:db:8c:28:b0:7f:be:9f:46:ce:cc:
34:37:67:8d:3e:1d:e7:f3:c4:78:7f:3a:0e:15:de:6a:ce:b8:
a4:c4:cc:1a:37:de:6a:35:e8:61:df:39:07:6e:af:ea:02:05:
13:59:d3:96:ba:e9:11:2d:5e:25:85:95:52:aa:c7:3c:b4:b0:
d0:57:2d:8d:72:be:07:5e:6e:bc:64:ab:28:93:b1:4b:d2:1e:
0e:1e:b8:28:25:9e:cd:2c:8b:a9:34:37:56:c8:4e:b8:1d:d9:
c4:11:b9:a5:be:1d:55:d3:ce:0d:79:5f:33:68:27:8f:97:85:
fc:0e:62:3d:88:4b:7e:60:0b:f4:e3:7b:d7:41:c4:87:8b:52:
35:05:01:93:4c:1c:be:34:37:8c:d4:c3:ba:be:3c:42:0b:4a:
f1:cf:f5:ec:5b:0e:2c:12:f7:a1:f4:7b:3f:fc:b7:1e:62:35:
33:37:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:02 2025 by rpki-client