Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ct5jXmRV16i6fK8y9z-vqgBC-eM.roa
File: ct5jXmRV16i6fK8y9z-vqgBC-eM.roa (raw, json)
Hash identifier: YwoZM0/dlMDJEjxF3IHm0bkS1+bWwqNb2ETiYm2dLk0=
Subject key identifier: 72:DE:63:5E:64:55:D7:A8:BA:7C:AF:32:F7:3F:AF:AA:00:42:F9:E3
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5E44540EAF42F869FB5D8E537212D
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ct5jXmRV16i6fK8y9z-vqgBC-eM.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211922
IP address blocks: 164.215.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e4:45:40:ea:f4:2f:86:9f:b5:d8:e5:37:21:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72de635e6455d7a8ba7caf32f73fafaa0042f9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:b2:03:e9:ba:3f:bc:80:65:23:9b:95:3f:
13:92:11:ea:cb:35:8f:ee:fe:10:31:5f:81:b3:c1:
b6:f9:18:7e:7e:e2:33:69:cf:cf:b3:c7:ed:59:61:
c7:81:5e:e2:be:4f:ec:91:15:22:7b:8b:65:62:fb:
9e:57:a2:9b:80:b3:34:c5:61:27:63:c3:4d:6d:da:
5c:d5:3d:22:53:b7:71:09:04:0e:fc:a2:34:f2:8c:
c1:69:7f:ad:0e:1b:62:9d:36:c1:11:53:ab:bf:58:
2f:2f:97:88:43:c0:31:aa:6e:5f:f2:bf:d3:d9:cd:
38:45:2f:91:c9:64:24:b6:4e:78:04:bb:bb:c3:e9:
9f:9d:60:a7:a0:b2:2d:4e:c4:8b:6f:a3:4b:59:a5:
05:ee:63:2b:d6:28:2b:13:b1:68:84:45:5d:d4:86:
ae:07:c3:05:a2:7f:f4:8a:7d:8d:60:20:59:93:90:
35:c2:3a:23:22:06:32:4f:0e:0a:77:5e:f2:28:99:
3c:76:4e:ab:c3:cb:06:c6:64:ba:ec:93:ed:ea:67:
f7:82:e8:d8:68:f2:83:ec:00:81:91:c8:5e:fa:6f:
e5:eb:0e:bb:6a:ed:98:33:b6:dc:d5:af:97:6e:df:
fa:94:d1:bb:47:7e:24:9f:92:2f:66:97:09:55:4b:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DE:63:5E:64:55:D7:A8:BA:7C:AF:32:F7:3F:AF:AA:00:42:F9:E3
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ct5jXmRV16i6fK8y9z-vqgBC-eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.99.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1f:0a:74:6e:1d:0a:d0:40:11:fb:85:bd:ad:af:76:43:92:
65:e4:5a:77:f9:19:e9:81:5d:71:4f:ae:6e:0d:5a:7a:ed:77:
70:d7:ad:1c:5a:32:4a:5a:21:c5:e2:03:44:f3:ec:f6:03:8a:
8b:88:92:fd:bd:57:5c:86:4a:0b:03:3a:bb:16:0a:c7:7c:8a:
60:e7:15:f3:94:1a:a8:97:f0:8a:54:33:8a:96:f9:35:9c:43:
7c:a1:0f:86:7a:2c:78:5a:3a:4a:f8:40:ae:a4:75:88:4b:01:
50:28:95:3b:0e:81:0a:e9:c7:95:a7:b8:76:c3:ae:7c:54:5e:
4e:cc:89:45:01:82:a0:2e:dd:28:4c:5b:9c:ad:ac:5f:8b:02:
7d:ce:b6:37:c7:47:39:6b:ae:67:fa:31:4f:60:11:ef:3e:e2:
fb:ab:7f:5d:ca:53:eb:a0:9c:af:46:d2:8d:e1:e8:ef:e6:82:
e9:44:05:01:29:75:45:fc:25:ea:50:9f:8f:59:ce:2a:69:d2:
d3:8e:42:aa:76:21:52:44:af:05:44:2d:01:52:99:58:2a:ad:
0c:a8:3f:26:47:d9:a4:8b:b3:57:ff:3d:ae:32:e9:0a:c2:27:
cd:da:71:79:ad:db:4c:be:9a:ea:d7:cf:e3:92:5b:46:1e:5d:
38:60:21:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:56 2025 by rpki-client