Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/_Tilc45lu3zD-rQJj8DLihgwa3Q.roa
File: _Tilc45lu3zD-rQJj8DLihgwa3Q.roa (raw, json)
Hash identifier: CAoA2l/Nm2XDKrDsOUVoJWyQmSKlCfSkvZXHtag0Nvo=
Subject key identifier: FD:38:A5:73:8E:65:BB:7C:C3:FA:B4:09:8F:C0:CB:8A:18:30:6B:74
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 01942444C3CE8502093824C152E65E8396F4
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/_Tilc45lu3zD-rQJj8DLihgwa3Q.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 130.115.0.0/16 maxlen: 16
145.5.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c3:ce:85:02:09:38:24:c1:52:e6:5e:83:96:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd38a5738e65bb7cc3fab4098fc0cb8a18306b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:3a:e9:ea:43:93:73:81:ca:4d:72:8d:5d:
56:b3:fa:5e:bf:f8:c1:e6:01:53:d4:2a:27:ee:e5:
01:b4:8b:0a:04:ac:e6:5d:d2:a9:41:3d:e3:43:3a:
91:f9:0f:a2:c9:a8:05:44:73:ab:c9:a5:5c:f3:af:
2c:b3:e3:a4:63:5b:52:17:a9:9c:a5:c7:64:48:77:
7f:a2:2e:df:61:c6:5c:fd:09:0c:c5:a8:bb:d9:04:
d0:49:7b:01:73:5c:18:b7:eb:46:e8:87:66:35:91:
ca:9b:b5:23:91:b2:fe:36:d6:eb:0b:36:62:bd:6d:
99:f1:7d:d5:c6:b4:95:d8:61:5d:6a:65:85:41:92:
a7:dd:f2:6c:4d:06:5f:9a:6f:13:58:e9:81:18:6a:
c6:56:1a:1d:85:7d:64:a4:c0:1e:25:dc:f8:d4:d9:
ec:15:a8:a3:44:ed:b1:26:c3:8e:da:f9:2e:9d:1b:
0f:14:be:48:1d:75:3a:e5:20:0b:f1:1d:67:09:b9:
f3:5d:1e:27:ef:c8:e7:a6:e4:c8:64:e6:0b:31:fa:
9f:5f:c1:dc:f4:22:31:0a:a7:ac:d7:06:06:60:5f:
f8:a5:42:43:95:90:88:0e:c7:02:f1:48:78:f9:2d:
09:9b:f0:8d:28:04:7a:87:0e:77:e9:4f:b8:68:cf:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:38:A5:73:8E:65:BB:7C:C3:FA:B4:09:8F:C0:CB:8A:18:30:6B:74
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/_Tilc45lu3zD-rQJj8DLihgwa3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.115.0.0/16
145.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:76:4b:ec:88:a4:5f:cb:e6:2c:64:eb:e9:66:c3:7d:f3:b7:
49:3f:00:e7:72:57:08:92:59:84:10:0c:46:4b:89:4c:d4:1c:
63:cc:c6:25:23:f2:ce:68:4b:80:b4:0a:f3:b3:44:4b:cb:18:
61:8a:cf:fb:b8:f5:95:b4:19:b6:4e:8f:3e:fc:e5:9c:c7:ae:
e7:79:f6:ea:66:70:a8:d5:ba:de:3c:44:7f:65:e2:93:26:d7:
66:75:16:96:a5:f7:a0:b3:27:a7:71:67:62:49:ff:75:f5:ef:
dc:43:cb:ab:1e:f1:9f:fe:86:3c:ba:c4:a2:cb:ff:b0:c3:66:
73:26:c0:11:ac:61:80:42:ac:d4:15:66:09:5a:94:07:c9:e9:
61:35:90:8a:9b:8e:be:c4:72:16:6f:fc:81:db:24:04:f5:be:
c6:c1:c1:95:0f:1f:0b:6b:dc:40:29:5a:63:7d:73:f7:a8:1a:
ac:78:b8:42:db:58:31:97:8b:00:0a:56:d1:52:fc:83:53:c2:
37:e7:d7:a3:f3:10:38:7c:c8:83:85:ad:85:32:66:74:15:d0:
54:2f:30:d3:d2:fa:22:73:f9:1f:1c:fa:50:d7:02:81:c4:0e:
cb:f2:06:0c:eb:23:42:f4:d7:e1:bf:67:a3:a6:73:af:86:45:
10:40:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:08 2025 by rpki-client