Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/TO-c-gxlCa9li53pwXZjFeiYxgc.roa
File: TO-c-gxlCa9li53pwXZjFeiYxgc.roa (raw, json)
Hash identifier: KTTc+ZyHhHpndyJmA4qAshj6UXqx8KbQZBMcXAIkEjk=
Subject key identifier: 4C:EF:9C:FA:0C:65:09:AF:65:8B:9D:E9:C1:76:63:15:E8:98:C6:07
Certificate issuer: /CN=dd82de4f1304339fde527ba06033ca9e511171bd
Certificate serial: 018A2189499D70E0A9893D42A0112217071A
Authority key identifier: DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/TO-c-gxlCa9li53pwXZjFeiYxgc.roa
Signing time: Wed 23 Aug 2023 08:35:59 +0000
ROA not before: Wed 23 Aug 2023 08:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203162
IP address blocks: 157.119.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:89:49:9d:70:e0:a9:89:3d:42:a0:11:22:17:07:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd82de4f1304339fde527ba06033ca9e511171bd
Validity
Not Before: Aug 23 08:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cef9cfa0c6509af658b9de9c1766315e898c607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:e5:da:09:0c:cc:e0:62:1b:9d:a4:8e:f4:
d7:68:df:09:79:46:c6:3c:8f:79:64:09:d3:3f:9a:
c3:a3:fc:a7:cf:72:00:48:b8:20:40:18:ac:88:4c:
4c:ab:bd:5b:f5:79:36:43:17:0a:3d:37:3c:e2:c3:
2b:9e:22:b1:71:65:5b:e6:f8:fd:86:db:e1:f9:c8:
d3:da:a3:b0:05:75:c6:f9:49:c9:7c:e6:f6:6d:26:
7f:18:d5:43:9a:3a:1b:9f:54:33:11:da:c6:ea:91:
75:a8:d7:ae:c4:16:95:af:7c:24:f6:03:87:43:0d:
f0:6d:6b:b0:e7:31:19:33:4f:36:8b:03:cf:80:40:
c6:93:bd:73:51:bd:46:bc:bd:e0:eb:5e:4c:2c:d5:
ef:3e:b9:74:8c:6c:1c:6d:ab:81:41:d8:41:4f:6b:
3f:c5:e6:3d:6d:16:f3:e5:c2:7e:40:36:92:a7:28:
3b:71:18:ba:3e:21:1e:6f:41:5d:40:6a:b3:29:91:
97:3f:05:22:54:de:10:91:6f:8f:09:c0:0b:15:6b:
60:01:5d:6f:08:59:14:c6:14:de:db:b2:6b:fb:8f:
86:f2:40:99:8a:07:6d:79:00:cc:2d:c7:4a:2f:9f:
10:34:d6:f3:7a:a7:86:df:34:be:76:16:cd:ee:ab:
67:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EF:9C:FA:0C:65:09:AF:65:8B:9D:E9:C1:76:63:15:E8:98:C6:07
X509v3 Authority Key Identifier:
keyid:DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/TO-c-gxlCa9li53pwXZjFeiYxgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.119.189.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:56:a3:b8:58:78:b4:c9:e0:a5:26:05:61:40:30:d1:4f:cd:
ad:69:92:49:d8:ab:97:d2:84:da:04:ef:15:9e:3d:6a:0b:47:
76:22:9c:4f:21:a3:0c:33:d5:1b:5c:10:f1:cc:45:3d:57:ed:
c5:38:28:7a:7b:30:d1:3e:32:e1:f4:e3:8b:72:8b:6f:c9:c7:
4a:00:55:d1:3a:85:6f:87:6e:bb:38:94:9b:b6:32:f1:28:5b:
99:de:1e:8e:32:49:a0:4c:0d:d4:4e:9a:fc:e1:ef:9f:27:2d:
0d:4d:91:53:5e:32:61:1a:e2:ac:89:52:65:f0:4a:e1:92:9e:
f5:e8:40:aa:b1:0b:be:5a:63:5c:7f:e1:24:bf:4e:b2:72:6d:
e6:a9:2d:6e:d5:3d:3c:61:53:fe:7a:71:c7:04:c2:2f:fd:a5:
31:d6:eb:b6:1e:44:9b:16:51:87:f9:73:78:69:19:62:f1:cc:
ad:48:40:32:0b:a7:09:05:d0:ad:a6:12:5f:95:c2:97:41:bb:
3f:d0:b1:42:6b:90:e1:48:b0:5d:70:98:6f:3e:d9:24:bc:cb:
46:bb:ab:f0:18:98:24:71:66:18:ec:48:84:51:9a:e5:dd:b8:
d8:30:57:ce:0d:2b:c0:d6:f6:3d:4f:d0:3f:c7:f7:0b:d1:c5:
b7:94:5d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:52:21 2025 by rpki-client