Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/skXm2fkwzq64ONGiXwLfUYMzOOo.roa
File: skXm2fkwzq64ONGiXwLfUYMzOOo.roa (raw, json)
Hash identifier: eZX3z+2+p9WFafZJ1Sv1eq5Rzpet45IDFVeaiO++2eM=
Subject key identifier: B2:45:E6:D9:F9:30:CE:AE:B8:38:D1:A2:5F:02:DF:51:83:33:38:EA
Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial: 0194228E057947E04F09B15A48C45E2B798F
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/skXm2fkwzq64ONGiXwLfUYMzOOo.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15096
IP address blocks: 204.99.132.0/24 maxlen: 24
2a07:e480:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:05:79:47:e0:4f:09:b1:5a:48:c4:5e:2b:79:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b245e6d9f930ceaeb838d1a25f02df51833338ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:35:61:2c:14:82:36:0f:f0:5c:89:de:31:
63:97:93:90:3f:0f:d9:06:29:14:0a:0a:83:76:f1:
e6:55:2a:c2:c1:f4:e0:d1:34:4b:61:35:e6:b0:9c:
4e:cd:b1:41:91:83:dd:93:c0:2d:d9:13:2e:45:c4:
dd:74:f5:55:e5:1f:a2:6f:ba:0a:e2:dc:ed:35:05:
d4:03:8c:83:6d:4d:77:11:48:3d:7e:a9:e5:88:4e:
04:38:e2:dc:10:3f:ed:a5:84:ab:7c:15:9c:67:78:
be:b9:ff:11:cc:3f:bf:43:64:68:1a:98:eb:06:84:
2c:c8:12:84:0c:d1:71:f4:87:1c:4e:fd:94:5d:a1:
15:bb:9a:72:9d:5e:d8:04:1d:ad:54:8c:03:55:52:
1f:e0:31:8a:35:47:8c:e9:ed:ba:15:b4:8e:93:f9:
b6:56:6f:0b:4a:10:89:0b:2e:72:64:95:f0:45:b7:
11:68:cc:fb:e2:56:e6:d1:82:55:8e:70:72:52:5c:
88:79:ff:a0:95:f3:5d:50:d0:8e:a3:e5:f2:6a:73:
f0:21:e4:21:41:09:a5:6b:0c:fe:32:be:1d:42:dc:
bf:5d:09:f4:35:0d:f1:26:ec:3c:54:2f:71:89:69:
09:3f:7d:62:78:fb:99:06:b8:09:73:2c:e1:bb:b3:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:45:E6:D9:F9:30:CE:AE:B8:38:D1:A2:5F:02:DF:51:83:33:38:EA
X509v3 Authority Key Identifier:
keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/skXm2fkwzq64ONGiXwLfUYMzOOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.99.132.0/24
IPv6:
2a07:e480:200::/48
Signature Algorithm: sha256WithRSAEncryption
59:00:2a:1c:3e:28:e8:6c:60:c8:82:40:7d:3f:60:27:89:e1:
6f:0e:12:f8:83:27:72:a1:22:ea:84:cd:77:44:73:72:ce:86:
f4:0e:d9:98:9a:78:c3:2d:fe:d4:c9:77:2f:34:13:86:cc:62:
90:2f:97:a0:55:92:3f:c4:a5:a9:30:64:67:53:a0:a7:3f:dc:
34:0d:ad:0e:cc:ec:5c:1a:ac:29:65:a8:6b:97:55:cb:f3:14:
9a:8b:37:85:50:dd:72:ad:d8:55:90:fc:b2:bb:ed:e6:ec:9e:
c9:ef:ae:1f:a9:a0:c8:17:dd:32:da:95:6d:5c:97:44:d4:41:
6d:6f:9a:1a:5b:f0:1c:70:30:ca:96:a0:37:a3:59:4b:4d:b4:
e7:ab:2e:32:1e:d6:b8:4f:8f:a1:7f:b4:ab:cc:2d:eb:ca:c7:
7e:32:98:f2:26:e4:9d:06:7e:40:5e:f7:54:1e:fe:fe:dc:a9:
56:fa:f6:9c:57:8d:78:70:9f:0b:b0:73:0d:01:23:ee:e0:ac:
0b:67:11:ea:e9:75:fb:a4:7e:63:b4:e4:d1:5d:6c:e1:c2:0a:
4b:6e:15:ce:28:98:11:de:54:77:69:c1:fa:35:1c:a1:1f:18:
ce:fc:6f:e0:e7:03:8f:8e:50:f0:7c:6a:16:f9:2e:5d:54:cc:
73:6f:19:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:26 2025 by rpki-client