Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/1-KmFUzHbucdbN5TQkvDPK4wZ39M.roa
File: 1-KmFUzHbucdbN5TQkvDPK4wZ39M.roa (raw, json)
Hash identifier: Qax+Xb9vw/23iTUjB2OoA1zaYBmoweBka6CPltPxwOY=
Subject key identifier: F8:A9:85:53:31:DB:B9:C7:5B:37:94:D0:92:F0:CF:2B:8C:19:DF:D3
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 0185B4E7CC8B1178EA7D7C9140F6DCCF46CF
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/1-KmFUzHbucdbN5TQkvDPK4wZ39M.roa
Signing time: Sun 15 Jan 2023 10:09:28 +0000
ROA not before: Sun 15 Jan 2023 10:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56655
IP address blocks: 138.124.181.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b4:e7:cc:8b:11:78:ea:7d:7c:91:40:f6:dc:cf:46:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Jan 15 10:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8a9855331dbb9c75b3794d092f0cf2b8c19dfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:3c:a9:82:2b:ea:27:8b:41:62:74:77:74:
39:b9:d4:a9:f5:34:14:b7:5a:e1:ef:a8:ad:4d:71:
8c:bc:62:6a:25:c2:44:c1:ee:3a:2a:d3:76:a8:ae:
e2:fe:6b:7c:33:21:70:ed:26:4f:74:10:70:e5:62:
75:dd:7c:39:dc:c8:fa:ea:d5:52:7c:61:77:6a:29:
75:46:c6:9c:43:29:c5:2d:8a:a5:ac:f8:3d:76:78:
10:57:d2:1f:50:b5:99:30:6c:77:73:a1:28:ec:ca:
b0:79:76:2e:b9:5c:b2:a8:1b:d7:e0:d4:75:84:69:
8c:05:ad:12:d8:6c:aa:96:bb:b8:f4:ac:2b:d3:73:
20:8c:05:b8:dc:c0:c9:c6:e4:43:fc:1f:a8:55:96:
9c:77:a5:33:fa:f5:46:f8:dd:6f:8c:7a:b8:98:22:
d3:41:2f:37:c8:20:43:be:13:ee:9e:0e:e5:21:14:
bb:6c:8e:68:0e:3d:eb:d2:c7:73:20:bd:37:65:c4:
29:d1:c2:20:60:69:33:5f:a5:4e:79:91:f8:cc:f8:
80:b1:b7:9f:da:1e:27:b0:6b:8d:f2:3a:67:84:a2:
31:b6:0f:41:aa:43:ca:1b:18:55:00:58:17:fb:fd:
64:46:f2:a2:68:73:07:8c:b4:38:b7:29:5c:00:dc:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A9:85:53:31:DB:B9:C7:5B:37:94:D0:92:F0:CF:2B:8C:19:DF:D3
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/1-KmFUzHbucdbN5TQkvDPK4wZ39M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:02:e2:e6:9d:13:c8:12:00:3b:74:e3:8d:3d:1e:b4:cb:ca:
db:a6:48:02:dd:29:34:4c:55:7d:2f:c5:92:e7:24:ea:2b:3d:
3e:3d:f9:8e:ff:43:75:e0:0c:6d:8b:34:c6:ba:64:f2:53:94:
67:af:b5:e4:e1:90:4e:c1:df:f9:e7:80:5c:de:38:e0:4b:6f:
b6:c5:f4:32:f3:dc:74:07:1a:1e:53:ad:db:10:66:d7:6f:be:
c2:c1:1b:8f:af:ae:be:0d:b7:64:7b:42:e4:90:8c:9f:1a:9c:
5d:d7:63:83:2c:4d:27:15:3e:16:10:4f:1b:5e:03:f2:97:bd:
e4:44:ff:bc:10:4c:14:0d:ed:e1:fd:5b:b4:a5:a1:20:09:5b:
55:28:14:ec:81:14:4c:ea:ab:ec:11:0f:ab:58:03:da:aa:2c:
17:9b:9d:6b:21:53:8b:b0:61:49:9d:b3:91:4f:10:eb:41:48:
01:56:c2:a5:4b:60:3e:e0:5b:0e:96:dc:cc:6b:f7:d9:45:13:
69:3f:97:2d:db:6c:40:c5:89:b1:1e:9e:ca:ae:42:27:5c:8c:
2c:54:ee:02:1a:c6:74:f1:32:52:08:71:10:54:98:4f:bf:7b:
c4:dd:c5:b5:94:0f:80:f4:1e:46:75:ac:ae:40:c6:e4:79:ab:
72:71:08:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:18:01 2025 by rpki-client