Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/ABA4ShU2lTPmxB6h-7huN3f_0Vs.roa
File: ABA4ShU2lTPmxB6h-7huN3f_0Vs.roa (raw, json)
Hash identifier: FGsDGWYmQbBP6ClFZdCRZzCk1MuM46OnSYaZy56XxAQ=
Subject key identifier: 00:10:38:4A:15:36:95:33:E6:C4:1E:A1:FB:B8:6E:37:77:FF:D1:5B
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 01949AFAFA0831AF3ABD6E409DE8BCF47175
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/ABA4ShU2lTPmxB6h-7huN3f_0Vs.roa
Signing time: Sat 25 Jan 2025 01:02:06 +0000
ROA not before: Sat 25 Jan 2025 01:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 128.65.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9a:fa:fa:08:31:af:3a:bd:6e:40:9d:e8:bc:f4:71:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Jan 25 01:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0010384a15369533e6c41ea1fbb86e3777ffd15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:4b:b5:bf:8d:0e:b1:0a:12:82:d0:5d:8d:
0d:3e:e3:b5:38:d2:1b:30:c6:5e:15:c3:5f:f9:f6:
bd:54:bf:61:33:1e:d3:67:3c:c9:e9:ea:11:36:7b:
28:03:40:5a:c7:ca:29:71:46:16:c0:fb:a5:53:3a:
12:9f:b9:16:7a:2d:e5:30:79:e5:31:70:ac:3f:4c:
40:65:ed:11:00:c9:a6:3a:98:c2:56:ca:6c:e0:90:
77:7f:96:58:59:9a:6b:15:49:9d:13:ab:0f:28:a1:
12:e2:87:ea:63:86:b7:2b:75:73:1f:bf:5e:0c:05:
2a:d0:15:9a:e9:09:cf:64:84:36:0d:a4:e8:75:fd:
b1:5b:2b:b5:40:98:ba:ec:28:f4:53:c4:83:9a:5e:
95:14:00:e9:3b:33:81:71:6c:e3:df:c4:d0:87:a5:
89:d4:27:4e:72:69:65:e2:01:2e:08:39:64:5a:c6:
1b:59:5e:2e:0d:66:ef:de:83:c7:67:3c:31:bc:7f:
02:6b:3a:58:f1:75:32:c3:7b:c1:d3:dc:2b:ba:f9:
07:7d:2b:59:ea:02:cc:c3:fe:d1:fc:ba:6a:d1:99:
9c:71:cc:30:60:32:ee:83:14:2b:c0:4d:00:96:0a:
de:97:45:74:bd:67:ab:ca:27:7e:70:2e:d0:12:a3:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:38:4A:15:36:95:33:E6:C4:1E:A1:FB:B8:6E:37:77:FF:D1:5B
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/ABA4ShU2lTPmxB6h-7huN3f_0Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.172.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:fb:a9:34:fc:23:cd:8a:bb:46:27:a7:aa:c0:f2:38:3f:a6:
50:bc:ba:ff:17:25:b5:ba:77:c0:19:24:84:92:b7:6b:11:35:
18:2a:cf:ed:be:d4:94:78:5b:b6:45:5a:71:e4:b6:9e:38:d9:
19:d0:e2:6b:1c:da:1c:39:cc:1f:f0:ce:f5:92:22:fa:3a:d7:
9c:bf:01:a6:0a:84:41:7d:3a:73:ab:07:21:87:8c:4d:c7:05:
42:e0:17:88:17:6f:35:f1:51:8a:21:2b:a2:97:1e:d6:e6:63:
08:eb:e1:d4:f3:85:b6:45:44:a3:80:5e:7a:21:5a:e6:ee:9b:
82:5c:1f:56:f8:69:ee:a7:84:34:81:d0:42:79:31:e6:a3:c8:
b4:38:a5:75:ef:2e:8c:55:53:86:02:39:f3:2a:24:85:88:13:
03:28:32:4f:96:89:84:1f:25:c3:37:39:35:29:4b:8e:fa:04:
cf:89:a6:79:f4:65:6f:7f:1f:41:a4:f0:9f:f5:ed:a9:49:e6:
1b:b3:22:c9:41:af:4b:62:12:12:9b:01:ca:bb:78:82:2a:0c:
c8:57:17:6e:ed:0b:ba:e6:58:70:57:de:d8:d9:c5:60:09:2f:
0f:83:f7:ae:fd:a8:0a:62:e6:41:38:41:a5:cc:58:80:91:33:
12:4e:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:42 2025 by rpki-client