Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa
File: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (raw, json)
Hash identifier: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=
Subject key identifier: 2B:56:48:6D:65:4C:09:F3:96:FA:CA:EE:F0:2A:BA:85:F6:A0:50:5F
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 01941F8C7C822E373E3AA6848A41E2A36AF5
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21449
IP address blocks: 160.53.0.0/16 maxlen: 24
160.53.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7c:82:2e:37:3e:3a:a6:84:8a:41:e2:a3:6a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b56486d654c09f396facaeef02aba85f6a0505f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:13:e1:56:c7:5f:2d:c8:62:96:8c:85:a1:
3c:d5:80:6b:b1:6a:62:2f:c0:ef:08:f6:4b:93:53:
0f:d0:54:29:20:6e:df:30:9c:a3:2b:34:1e:5e:96:
f5:2b:79:4c:f1:71:2c:0d:f7:89:70:07:c5:3d:ac:
d7:15:2e:16:15:92:3d:5f:c7:76:2a:8f:0a:8a:74:
1e:fa:3d:5d:b8:26:85:9d:10:92:a4:b7:b7:72:1e:
50:cd:cf:1c:83:8f:15:58:0d:fd:ea:d2:f0:19:35:
15:41:12:87:1e:08:62:8a:a5:49:51:f3:cf:c4:98:
c8:1a:ea:70:60:37:43:dc:ad:a3:cf:d4:61:36:a8:
3c:a5:00:bd:1d:b6:07:23:c3:2f:e0:dc:98:bd:75:
09:29:5d:e5:6a:d8:81:ca:8e:64:f1:54:63:c1:06:
97:4d:f3:b4:19:1d:35:b8:ac:a8:5c:bc:74:e7:23:
61:c0:72:f7:ca:18:21:79:b7:08:cd:b4:15:dc:4f:
3d:c1:6d:58:c0:05:46:e8:15:fd:1c:03:72:35:63:
55:50:83:0c:f2:bd:5a:66:e5:96:47:d4:4a:c5:86:
44:ea:19:03:c8:f3:49:eb:c5:83:8f:35:37:fd:c9:
55:1c:99:44:5d:e8:77:ea:76:d2:82:90:d0:37:cb:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:48:6D:65:4C:09:F3:96:FA:CA:EE:F0:2A:BA:85:F6:A0:50:5F
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:fb:92:37:3f:37:35:8d:c0:97:56:20:73:c7:dc:6f:b7:e7:
75:49:ee:a2:7e:ae:ee:07:84:39:8e:b2:26:0a:50:79:d9:8c:
38:f8:a2:01:65:e1:e7:24:60:75:a6:b1:d7:e7:71:a6:87:c0:
c7:e7:a4:56:d3:b7:ee:14:e9:c3:55:fb:57:55:8e:b1:49:d9:
50:8f:8e:db:01:8f:28:14:b6:0c:15:6d:8f:49:e8:06:c6:5c:
e6:fa:6d:b1:1d:f5:0f:87:eb:0d:a3:d7:09:0c:0f:1c:39:bc:
65:8c:47:a8:cc:c7:1f:c4:fb:33:22:47:10:44:b3:a4:ad:68:
3c:6f:db:be:4d:3e:31:13:78:f1:4f:64:f1:fe:71:0c:2a:a4:
32:40:e7:ba:6f:90:18:bb:c1:f5:41:e4:19:24:54:9f:40:e7:
e5:f9:90:4d:88:45:ec:7e:f4:65:38:08:e2:3c:79:b0:22:e2:
6c:7a:44:ac:75:24:f0:5f:0d:e1:10:ae:59:b7:03:59:96:b9:
8e:ab:3d:10:7e:ef:fd:d0:b4:21:0e:ed:ef:30:79:b2:65:e7:
f7:5f:bd:5a:b9:6f:d4:67:c3:16:a7:7a:5a:9e:ea:cc:ef:27:
e6:d5:0f:e0:c5:58:95:95:2a:68:a2:4f:9e:c5:5d:33:88:51:
d5:90:27:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:23 2025 by rpki-client