Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/1e_Q0XV3YxJ8p55NdRJKulyC_iM.roa
File: 1e_Q0XV3YxJ8p55NdRJKulyC_iM.roa (raw, json)
Hash identifier: EsYRLoHyhXdgcnW+QHJhMOJQzadq357CQlrJ87YPeoI=
Subject key identifier: D5:EF:D0:D1:75:77:63:12:7C:A7:9E:4D:75:12:4A:BA:5C:82:FE:23
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018A64C419DDBA216BC6EC93C1CA051E0704
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/1e_Q0XV3YxJ8p55NdRJKulyC_iM.roa
Signing time: Tue 05 Sep 2023 09:54:47 +0000
ROA not before: Tue 05 Sep 2023 09:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 130.255.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:c4:19:dd:ba:21:6b:c6:ec:93:c1:ca:05:1e:07:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 5 09:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5efd0d1757763127ca79e4d75124aba5c82fe23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:89:2c:34:2c:54:b3:04:66:fa:72:5e:2f:
a3:5f:b2:69:f6:38:6c:00:66:0d:bb:a0:02:b9:29:
bb:ce:b9:83:2c:87:94:3e:1a:c9:90:30:f0:74:6c:
1b:6a:af:18:a5:42:a3:e8:17:d6:7c:0d:a4:52:71:
c5:3e:89:1f:66:93:d6:21:41:95:c1:1e:f6:7f:e3:
93:33:bc:8d:61:5b:85:c8:fa:92:86:ea:90:44:57:
5e:e5:03:e1:14:8b:3f:b3:ac:69:54:ce:fa:6e:63:
3a:c9:84:43:b3:43:31:8e:8a:07:ae:ce:42:65:29:
22:ac:a8:22:40:cf:23:2a:ab:38:2d:96:8e:4f:30:
58:cc:bc:b9:d0:27:b3:1c:b7:1c:1a:df:fd:cc:ff:
9f:eb:86:a6:e3:dc:6f:bf:89:82:cc:2d:12:ad:a0:
7e:38:82:91:76:99:49:b8:77:8c:16:94:35:9a:62:
3a:ad:8b:e6:e2:7c:29:75:b9:16:2f:85:d6:3b:7a:
47:86:f0:11:3f:3a:1f:5a:53:b6:1a:50:16:14:ab:
68:53:98:db:86:35:df:ef:89:96:cb:70:3d:ea:f4:
2e:a6:37:70:1e:e4:99:fa:bd:72:c9:15:4e:3f:a8:
32:99:43:d8:97:2f:c8:e5:24:97:99:73:3e:bd:41:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:D0:D1:75:77:63:12:7C:A7:9E:4D:75:12:4A:BA:5C:82:FE:23
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/1e_Q0XV3YxJ8p55NdRJKulyC_iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e5:e7:16:39:4b:57:c3:94:0d:8f:da:e7:9c:75:49:ed:9d:
9c:b6:f1:f1:88:ff:33:90:2d:81:95:8f:eb:e5:25:79:33:93:
ba:a8:b6:c0:1f:0d:9f:11:13:cf:8d:e3:b9:0b:1a:a0:06:85:
60:65:c2:e1:ca:0d:f2:46:2a:78:9a:97:8b:da:55:69:b3:9e:
7c:99:a8:27:f4:7a:36:96:40:d4:8d:36:18:b0:5b:21:6c:a7:
aa:40:42:c2:67:dc:38:b6:a4:f6:a6:76:37:fa:0d:5c:a6:4d:
c6:38:a3:ed:0c:f4:04:1c:38:66:0e:c0:85:3e:2b:7a:3d:dc:
55:a0:c3:8d:3c:ea:5d:b1:d0:a1:2a:37:d6:83:4a:33:92:19:
a0:4e:1e:9e:0a:0c:b8:87:f2:fe:a2:a5:87:29:d9:0b:11:0a:
5d:3c:51:b5:58:09:84:b4:f7:d4:e5:bf:05:58:d9:46:a9:0c:
ac:7a:35:ad:a3:75:d9:79:69:91:35:1a:cf:35:0e:d1:a0:29:
3d:e4:2e:bd:ad:3a:bb:51:be:f0:ee:54:91:b9:07:02:a7:77:
3d:f4:db:92:31:33:d3:a8:d0:fc:89:99:38:0a:98:d7:20:44:
88:bc:a8:a1:12:86:c9:b1:7a:e9:7f:ec:f5:64:23:8b:0e:94:
11:e2:5e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:36 2025 by rpki-client