Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/dgRAbfnIFtx0YVL8YSa4O9cqBmU.roa
File: dgRAbfnIFtx0YVL8YSa4O9cqBmU.roa (raw, json)
Hash identifier: 57tqjpmxDcSIMFchoxn98LnxwDSNtrTM/6vNjZpZIjk=
Subject key identifier: 76:04:40:6D:F9:C8:16:DC:74:61:52:FC:61:26:B8:3B:D7:2A:06:65
Certificate issuer: /CN=0bf275af698a207079d9b7d7fcf32815a3f6192d
Certificate serial: 0168CC22
Authority key identifier: 0B:F2:75:AF:69:8A:20:70:79:D9:B7:D7:FC:F3:28:15:A3:F6:19:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_J1r2mKIHB52bfX_PMoFaP2GS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/dgRAbfnIFtx0YVL8YSa4O9cqBmU.roa
Signing time: Sat 01 Jan 2022 16:02:37 +0000
ROA not before: Sat 01 Jan 2022 16:02:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 5.1.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23645218 (0x168cc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf275af698a207079d9b7d7fcf32815a3f6192d
Validity
Not Before: Jan 1 16:02:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7604406df9c816dc746152fc6126b83bd72a0665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:84:82:80:a7:51:b3:4f:86:56:84:61:d9:db:
4d:c0:3e:f5:d1:c1:b9:8b:ae:c5:78:8e:60:34:9f:
60:e0:a8:e5:e6:fc:bf:6b:a9:fd:61:e7:e5:14:b8:
98:ab:17:fe:09:74:b5:7e:da:e1:ef:47:42:6d:9a:
fe:bf:80:47:3e:88:d5:39:ba:4d:01:0f:06:28:77:
03:04:1b:1d:c2:f6:0a:6b:07:97:ee:6f:00:42:63:
b6:f7:7d:40:51:e3:f7:1f:f8:04:84:8a:d6:91:6c:
d1:67:8d:48:de:84:87:76:72:9d:fc:63:58:d7:88:
92:4e:c9:98:a2:28:75:12:a5:98:61:18:21:2c:56:
36:67:38:1d:2c:3b:8e:4a:76:8d:73:92:b2:1f:fa:
11:6a:14:66:a9:0f:b1:46:98:6c:de:89:64:97:9c:
89:7d:71:eb:10:94:10:9f:ea:e5:80:1f:d3:0f:ce:
60:6a:c3:ef:42:94:12:34:0f:a3:41:8d:fc:7c:7e:
a5:eb:ab:9a:7b:9c:83:51:c9:e4:3c:07:90:a2:04:
b7:cc:c0:7d:0d:be:df:8f:eb:1d:b5:4a:1e:b7:52:
98:59:80:ed:b4:6b:be:3f:a9:3b:b4:16:7a:2f:04:
da:35:0e:3b:22:fd:ca:1e:fe:aa:36:50:ec:2c:3a:
06:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:04:40:6D:F9:C8:16:DC:74:61:52:FC:61:26:B8:3B:D7:2A:06:65
X509v3 Authority Key Identifier:
keyid:0B:F2:75:AF:69:8A:20:70:79:D9:B7:D7:FC:F3:28:15:A3:F6:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_J1r2mKIHB52bfX_PMoFaP2GS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/dgRAbfnIFtx0YVL8YSa4O9cqBmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/C_J1r2mKIHB52bfX_PMoFaP2GS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
Signature Algorithm: sha256WithRSAEncryption
90:21:0f:89:8b:53:af:2d:f1:f2:b8:fb:4d:46:06:68:00:93:
79:cd:95:e2:4a:13:8d:11:35:60:0c:5f:01:e9:da:64:8d:58:
79:f5:e5:9e:0e:aa:be:8d:0c:c3:e7:75:2a:ee:22:86:f0:c0:
89:21:35:99:5b:50:85:9a:54:5e:d9:64:12:7e:e9:08:b0:04:
60:db:ee:82:dc:ef:30:bd:c8:30:bf:58:f9:20:c7:b8:f0:25:
37:a8:cf:c0:de:4a:e8:37:f4:8e:56:45:55:2f:fe:7e:91:b9:
c1:ea:2c:6e:49:0f:f3:71:ab:61:b1:02:0c:10:63:59:55:b8:
a3:e2:ab:28:73:e0:95:a1:7e:8d:71:58:3b:13:98:aa:9b:5a:
32:11:25:73:fc:a3:3b:78:5c:62:39:ee:fd:53:6f:d2:d1:3c:
b2:4c:95:14:92:26:fd:4b:c4:ed:32:94:45:d8:b5:0f:16:e3:
7c:3e:a9:fe:4c:8b:67:1d:a3:65:61:06:0f:3e:8b:70:eb:17:
06:8c:5e:9a:55:61:57:43:cb:bf:6d:20:04:0b:12:b2:3a:de:
74:ed:56:4e:70:b6:0a:f2:f8:9f:ed:27:08:6c:b3:6a:0f:c3:
e0:45:51:e4:8a:35:40:d0:f4:79:73:cf:da:eb:89:f5:e2:a8:
04:cf:ff:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:19 2025 by rpki-client