Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/7EOkJISYh1lPEvtjEsSd_uB091A.roa
File: 7EOkJISYh1lPEvtjEsSd_uB091A.roa (raw, json)
Hash identifier: iyJBe6KDY2jgmtE4ar31VWghuSb4Z0TN62CuRa0HGDo=
Subject key identifier: EC:43:A4:24:84:98:87:59:4F:12:FB:63:12:C4:9D:FE:E0:74:F7:50
Certificate issuer: /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial: 019425FDB52FA3C109A2A999C2209026FEAD
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/7EOkJISYh1lPEvtjEsSd_uB091A.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60118
IP address blocks: 5.254.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b5:2f:a3:c1:09:a2:a9:99:c2:20:90:26:fe:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec43a424849887594f12fb6312c49dfee074f750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:e1:52:5e:94:b0:cb:30:9d:95:86:8f:39:
77:d7:ff:a4:ae:44:f8:47:bb:62:a4:c7:06:29:2c:
ec:b4:06:05:f4:c4:55:08:35:b3:d8:57:72:3a:af:
48:9a:3a:00:b9:46:35:13:e7:26:a3:5c:39:f5:09:
e8:d0:42:ef:13:cf:24:df:08:17:ff:d3:0e:4b:32:
2b:49:41:73:d8:6d:b0:3c:36:22:26:75:f2:53:9c:
af:cc:d0:ce:fe:14:ee:9a:42:0f:8d:ac:f7:6e:54:
48:cf:e2:22:cd:e5:5c:ce:a5:a0:df:c8:57:fc:2b:
e9:44:0f:54:9b:87:9d:70:47:27:f9:bc:ec:14:f7:
0d:84:51:1a:c5:08:c8:96:6e:00:20:08:39:65:c5:
15:29:b0:42:3a:3a:a3:30:64:b3:37:7b:1d:44:51:
54:72:64:d6:e5:63:99:2f:b7:d6:ef:cc:af:75:bf:
03:0c:52:91:79:8a:b4:89:8f:8d:d6:85:85:38:65:
fa:a5:89:23:b3:28:57:97:67:c5:79:8d:23:13:eb:
87:4d:4a:6b:4b:ea:a2:04:ca:10:8b:48:a6:4f:82:
ac:09:a9:21:62:09:b4:ce:3a:28:a3:9a:96:8f:f4:
30:3b:62:17:7e:85:09:b5:2b:b5:d7:79:dd:1c:eb:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:A4:24:84:98:87:59:4F:12:FB:63:12:C4:9D:FE:E0:74:F7:50
X509v3 Authority Key Identifier:
keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/7EOkJISYh1lPEvtjEsSd_uB091A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a1:74:67:53:95:bb:54:82:16:06:c8:dd:8f:4b:ba:1c:2c:
dc:ab:20:2b:9b:34:75:0f:17:f7:65:8c:ad:c4:ea:58:96:8d:
34:ff:cd:c6:ff:75:86:4c:fd:26:98:57:42:5a:98:2f:d3:29:
5d:93:a2:9a:e6:b4:05:ac:83:ee:5a:9e:61:3f:08:a4:63:80:
20:63:61:98:27:4c:54:2a:3d:46:8b:92:c8:c6:d7:b0:75:04:
8f:19:bd:27:2d:cf:d7:e7:22:93:fd:8f:aa:17:66:a5:86:90:
60:9c:81:b4:77:4d:b9:dc:69:de:34:d3:6b:26:43:fd:8b:08:
af:da:0b:ca:5f:2a:c4:f6:ee:78:1f:8e:49:27:34:07:5f:ea:
ca:b4:8e:31:d8:f5:06:75:1a:f7:8d:61:3b:e3:96:57:65:65:
18:a5:71:0a:27:6c:8b:76:e8:08:31:f1:34:10:98:64:4c:2e:
00:0c:08:40:74:9c:51:28:7f:b6:1a:b2:2c:b4:8f:78:53:de:
77:26:7e:1a:d5:ad:3d:b2:51:07:0f:da:2c:73:95:02:ab:6a:
f6:df:86:c6:12:9b:0c:6c:41:77:4a:77:05:a8:f4:f5:35:97:
fa:13:74:4b:3d:fb:5b:d9:bd:03:92:65:16:dc:ad:4c:77:20:
c7:d3:96:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:02:49 2025 by rpki-client