Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/5y0Frjfa3Z_rRGFOnnLvBOKyYzk.roa
File: 5y0Frjfa3Z_rRGFOnnLvBOKyYzk.roa (raw, json)
Hash identifier: v6PBXnJE2TRRXlBzgcDj8bvwXfWwoJ8vg22I64G7k/M=
Subject key identifier: E7:2D:05:AE:37:DA:DD:9F:EB:44:61:4E:9E:72:EF:04:E2:B2:63:39
Certificate issuer: /CN=da0b6d9bed7da6d42207b90064d3e13efd3254ac
Certificate serial: 0194258ED31B67D228A4F7DC75E9226671DB
Authority key identifier: DA:0B:6D:9B:ED:7D:A6:D4:22:07:B9:00:64:D3:E1:3E:FD:32:54:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/5y0Frjfa3Z_rRGFOnnLvBOKyYzk.roa
Signing time: Thu 02 Jan 2025 05:48:24 +0000
ROA not before: Thu 02 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215694
IP address blocks: 2.59.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d3:1b:67:d2:28:a4:f7:dc:75:e9:22:66:71:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b6d9bed7da6d42207b90064d3e13efd3254ac
Validity
Not Before: Jan 2 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e72d05ae37dadd9feb44614e9e72ef04e2b26339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:5a:81:be:6f:d4:f5:13:cb:0e:64:fc:92:
da:ce:4a:2f:dd:50:04:6b:7d:98:7a:98:b6:19:90:
10:75:c0:b8:61:b3:5c:9c:1a:17:14:72:90:d0:ea:
39:e0:6c:fb:40:18:48:0c:96:d8:22:f7:a1:db:c0:
59:13:aa:01:d1:cf:bc:fe:5f:77:11:a9:3c:ad:8c:
d5:17:7f:8d:e1:c5:3a:e4:86:dc:28:b5:bd:88:fa:
60:6a:c7:2f:ce:2e:07:ec:b1:6e:35:dc:1e:8d:0e:
00:dd:46:fb:2f:41:ca:f2:87:57:c2:3e:78:9f:97:
1f:2a:e4:77:88:e2:b4:cd:fc:8e:6f:2d:26:60:0e:
7d:87:1b:a9:5c:40:bc:ad:20:b4:6b:9c:91:e5:50:
d3:89:8d:ff:b0:4a:37:39:b7:59:87:41:17:bf:de:
89:4e:a7:bb:f3:50:88:55:18:5d:1e:23:73:57:94:
74:52:3d:5e:05:55:7e:af:c9:6f:19:af:94:12:be:
32:d2:d0:a1:6d:83:40:5a:4f:ff:91:12:74:3f:fc:
44:91:b5:61:7f:18:6d:d9:2f:fc:71:0a:e4:f3:43:
13:b0:60:86:c0:ca:2b:fb:db:0a:10:af:3c:58:f0:
06:e5:ca:a7:8f:d9:7f:49:a7:60:ba:2a:ce:52:92:
64:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2D:05:AE:37:DA:DD:9F:EB:44:61:4E:9E:72:EF:04:E2:B2:63:39
X509v3 Authority Key Identifier:
keyid:DA:0B:6D:9B:ED:7D:A6:D4:22:07:B9:00:64:D3:E1:3E:FD:32:54:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/5y0Frjfa3Z_rRGFOnnLvBOKyYzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.67.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a1:8e:50:70:3c:21:79:63:9e:f5:6a:27:17:a0:be:9b:ac:
d2:c5:34:0a:21:4b:3c:ba:f6:78:50:a0:0c:25:bb:29:62:e2:
f0:0e:67:af:ac:25:d9:8d:de:be:52:67:d8:6e:a4:2a:43:21:
77:b1:61:e5:d8:c6:d0:1e:c2:bd:e0:02:a4:8b:6b:39:42:e1:
f6:bf:2c:cd:2a:fe:78:85:3e:ae:e8:c9:e7:de:bf:a0:3d:96:
f6:cb:45:7a:c8:1b:c4:47:51:1f:73:87:4f:c3:27:38:dd:79:
e2:39:12:3a:a5:23:69:65:8c:ce:99:d6:0e:8f:ce:1d:70:8f:
d6:a0:12:69:1b:b3:b8:68:5e:54:2e:3c:03:44:f3:c8:56:64:
61:3e:cf:76:8a:40:fe:a3:3a:3d:df:d2:c1:0d:59:28:3a:40:
b3:0a:8d:ec:7b:97:93:99:49:20:29:93:59:de:6d:f0:86:78:
9d:da:43:e8:e3:4f:e2:60:15:78:0a:83:a3:02:70:df:36:31:
74:cd:45:c2:9c:d2:74:ea:54:c3:39:cc:b8:e4:7b:94:f2:6d:
8b:8b:2b:d6:23:cc:31:7b:c4:8c:2a:a7:8b:67:0c:80:7e:22:
cb:f9:68:3d:0b:2b:87:0f:67:27:d4:21:7f:31:34:5c:5f:3a:
ff:f1:03:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:15 2025 by rpki-client