Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/AI-SjUNk27UlWzeJbfub1LMpR_c.roa
File: AI-SjUNk27UlWzeJbfub1LMpR_c.roa (raw, json)
Hash identifier: n1P92aXpjrqVVtgYbgV1MuvoAPU8jvz1Hn4J2/+sFwE=
Subject key identifier: 00:8F:92:8D:43:64:DB:B5:25:5B:37:89:6D:FB:9B:D4:B3:29:47:F7
Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial: 019425FD560CE58FC8B5F7358A3A54A5E655
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/AI-SjUNk27UlWzeJbfub1LMpR_c.roa
Signing time: Thu 02 Jan 2025 07:49:07 +0000
ROA not before: Thu 02 Jan 2025 07:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 128.178.0.0/15 maxlen: 16
192.26.28.0/22 maxlen: 22
192.26.32.0/21 maxlen: 21
192.26.40.0/22 maxlen: 22
192.26.44.0/24 maxlen: 24
192.26.46.0/23 maxlen: 23
192.33.192.0/20 maxlen: 20
192.33.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:56:0c:e5:8f:c8:b5:f7:35:8a:3a:54:a5:e6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
Validity
Not Before: Jan 2 07:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=008f928d4364dbb5255b37896dfb9bd4b32947f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:90:7a:97:9b:99:63:15:49:e8:6a:a6:26:
69:a7:8b:d1:2f:d4:3f:98:8d:57:94:f8:11:98:51:
1f:88:fa:f2:8f:7e:9c:d6:df:2c:4e:9d:67:57:e4:
58:ec:12:b3:b4:d6:e3:39:2e:bd:eb:fc:c7:d7:ee:
3d:2d:25:e8:f5:a7:c3:98:72:6d:0c:13:5a:d4:ec:
1a:e8:fd:92:e5:3c:92:d8:09:dd:41:db:c4:ec:d6:
dc:f4:03:62:2a:0a:0f:ef:0f:9a:be:87:48:5e:31:
19:18:ab:35:2d:6e:df:f1:58:0f:91:42:ef:c9:5a:
11:7f:b1:ab:4e:02:1f:db:d2:44:89:42:ed:5e:0f:
78:69:dd:3e:73:2a:b0:d6:a7:20:b9:bb:25:cd:8b:
e3:dd:02:9f:33:c4:1c:a8:06:72:cd:55:3a:e3:d4:
40:51:98:eb:4f:01:a5:d5:ae:ce:24:38:e1:e1:64:
01:ef:16:28:b9:d0:73:1a:9c:f2:a1:8c:fd:20:a2:
df:c4:dc:a2:3c:27:c1:45:d3:64:68:9f:92:1e:8a:
05:9d:de:ca:e7:05:01:e3:a9:25:b3:26:1f:98:e7:
6c:d6:61:0a:f7:df:3c:2c:d3:c4:e1:76:5b:c1:fe:
f8:89:64:45:ce:3b:92:04:b2:f8:f7:26:5c:d0:67:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8F:92:8D:43:64:DB:B5:25:5B:37:89:6D:FB:9B:D4:B3:29:47:F7
X509v3 Authority Key Identifier:
keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/AI-SjUNk27UlWzeJbfub1LMpR_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.178.0.0/15
192.26.28.0-192.26.44.255
192.26.46.0/23
192.33.192.0-192.33.211.255
Signature Algorithm: sha256WithRSAEncryption
95:68:7a:8a:49:d5:9f:b8:4c:1c:fc:81:03:75:be:45:39:26:
7a:39:7f:b0:83:cc:de:ff:84:c8:d4:af:24:7b:66:cc:e4:58:
a3:4e:e8:b9:28:a1:4e:a6:3a:66:b3:79:ef:aa:2a:e9:e3:32:
36:4a:75:77:ca:eb:33:a5:a4:0d:35:8c:7b:ed:28:6a:8c:b8:
8e:69:eb:c5:c4:9e:55:c8:1f:c9:c7:3a:ae:f2:86:d4:fe:c2:
be:1b:0e:85:73:66:a6:4d:08:d3:bd:9e:52:50:9e:33:82:a9:
c3:72:77:1d:d7:5d:c0:f6:76:0c:fb:56:5e:b3:26:eb:37:2f:
6d:f0:95:d4:f9:8a:08:3f:66:69:f6:af:07:94:dd:ae:c2:b5:
62:fc:51:e9:a1:a6:13:29:91:f7:65:97:be:56:fe:f0:77:89:
a1:c1:7c:aa:56:67:af:1b:ed:3f:56:da:bb:a4:f7:e2:c8:a0:
e2:2c:dd:17:c5:84:7c:83:1d:49:06:4d:f0:5b:55:67:1d:a5:
e1:60:b0:b0:f0:59:77:25:f3:b2:a8:f2:d4:9e:39:23:c1:0b:
2f:58:5a:34:5b:78:9e:fb:00:9f:c3:53:d5:23:77:9c:56:75:
af:32:d3:ac:54:f6:5c:00:79:67:f6:0f:9b:41:99:9c:5d:82:
f6:04:c4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:58:42 2025 by rpki-client