Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/ivIvX3ybfrEo6-_TJQtybec7lto.roa
File: ivIvX3ybfrEo6-_TJQtybec7lto.roa (raw, json)
Hash identifier: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=
Subject key identifier: 8A:F2:2F:5F:7C:9B:7E:B1:28:EB:EF:D3:25:0B:72:6D:E7:3B:96:DA
Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial: 0194258FCB4160F9E8C26F2FA69C97D99754
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/ivIvX3ybfrEo6-_TJQtybec7lto.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 134.60.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cb:41:60:f9:e8:c2:6f:2f:a6:9c:97:d9:97:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8af22f5f7c9b7eb128ebefd3250b726de73b96da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:7b:0d:f1:ee:65:d6:87:de:54:4a:84:2f:
12:53:d4:33:1f:fa:a4:7b:ce:c9:52:1a:ca:b7:4e:
96:bb:e4:2f:83:5f:af:32:72:38:3b:df:b3:04:4a:
a4:28:45:3a:8b:a8:84:38:48:ba:6c:24:89:4f:b1:
c0:b5:14:8a:8e:bb:34:3f:74:df:d6:19:75:93:88:
f5:da:ae:ec:9e:35:52:61:29:ca:44:c4:4e:02:c6:
e7:e1:8f:64:bb:18:5c:fd:6c:7e:42:75:d3:cc:fe:
b1:4b:45:10:54:f0:72:1d:b9:58:40:51:c8:92:e9:
b3:45:2f:82:e7:2c:f9:d1:23:a6:67:cb:d4:27:f0:
ec:6b:55:5e:c8:22:ac:80:6a:a8:47:a7:98:04:b4:
e2:2f:d9:6e:06:9a:b4:68:14:55:12:2a:54:00:78:
91:8e:6c:d7:72:a7:f4:80:10:f2:12:8f:56:c4:f3:
cc:fa:bb:00:8b:98:85:d3:6c:aa:22:56:1f:17:7a:
cb:07:1c:24:8b:20:c8:4f:1c:be:50:f1:db:61:9a:
97:67:54:91:cb:91:e9:d5:bb:26:7d:a1:23:58:33:
7b:d9:92:53:45:d5:94:96:7a:5d:ec:30:18:da:69:
24:77:7e:b0:12:34:bb:ba:9a:72:51:c1:a6:5d:33:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F2:2F:5F:7C:9B:7E:B1:28:EB:EF:D3:25:0B:72:6D:E7:3B:96:DA
X509v3 Authority Key Identifier:
keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/ivIvX3ybfrEo6-_TJQtybec7lto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:ce:18:10:87:54:8e:f0:d2:0a:f3:3a:7b:17:68:fa:12:47:
2a:ec:da:d1:28:41:5c:f4:56:10:06:92:34:43:fe:f0:3f:28:
24:fd:5e:f3:d0:1a:ec:4c:99:72:00:d9:fb:97:93:5b:05:23:
e8:ed:b1:e2:39:67:8f:a7:b4:91:17:ed:c4:c2:60:81:b0:96:
08:ec:24:fd:d9:44:d7:7e:e6:81:4d:d9:07:7a:85:d3:b6:eb:
d3:46:97:7b:e5:1d:af:9b:af:ce:35:c4:33:84:d2:45:35:1e:
99:ed:e3:84:81:fc:7f:d8:c2:1a:32:d4:b1:38:5e:73:a8:95:
f9:1b:9f:54:f2:96:33:83:5b:1b:22:9d:07:d2:a9:c3:e7:d9:
f5:c9:e5:28:3d:a6:1d:98:ff:1c:c0:29:f9:84:e9:3f:cc:27:
f9:2e:b3:18:7d:c7:e5:ab:3c:87:5f:6d:fe:0a:ca:f3:56:f4:
dc:9b:56:cf:2a:55:50:a1:56:51:4b:28:a1:7e:d6:49:3f:05:
32:b1:bc:57:e2:15:73:31:23:19:85:e9:6b:1d:48:cf:db:2c:
03:9d:fd:63:14:ab:d5:43:27:33:28:bf:f7:57:39:27:6f:a8:
a4:3e:7d:72:e7:42:11:7f:c9:0c:37:21:49:e3:31:7d:4e:67:
69:ca:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:11 2025 by rpki-client