Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/l-86N1xNtY5uScFI7-RKcu_tM1g.roa
File: l-86N1xNtY5uScFI7-RKcu_tM1g.roa (raw, json)
Hash identifier: tjaw/t7FWkVaKVLFK1mB9oeSnERDlbutQFZnLHnYIbQ=
Subject key identifier: 97:EF:3A:37:5C:4D:B5:8E:6E:49:C1:48:EF:E4:4A:72:EF:ED:33:58
Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial: 019420D6423F3E42EB33D8CEABA5504885D5
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/l-86N1xNtY5uScFI7-RKcu_tM1g.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210568
IP address blocks: 193.111.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:42:3f:3e:42:eb:33:d8:ce:ab:a5:50:48:85:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97ef3a375c4db58e6e49c148efe44a72efed3358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:8b:13:d3:b4:4d:19:45:a5:53:a3:c4:40:
e0:f5:c5:6a:a6:3c:b2:77:13:16:04:4c:65:df:fe:
e5:61:2d:cb:4f:c3:18:ef:6c:16:d3:cc:68:6c:57:
11:8c:e8:60:68:c9:45:1d:31:76:96:64:2c:ae:a8:
c6:67:0a:05:03:b4:d3:a3:96:e0:5e:fb:e3:8b:e6:
55:0c:6c:7e:c3:01:9b:c5:52:0f:52:9a:8c:ae:f8:
d7:60:7e:04:9d:24:66:9a:69:59:cc:d5:21:0d:f0:
77:33:1d:94:31:2f:24:3c:f9:ed:11:1e:ab:c1:56:
31:8a:e9:b9:f8:b7:e4:40:31:ab:f1:04:da:9d:9c:
ee:39:4a:38:82:70:81:0b:1d:fa:a4:08:0c:48:69:
4b:ad:15:20:70:05:e4:3e:05:d0:17:f9:4a:d7:28:
af:1d:fc:3c:68:80:11:70:bd:63:a4:81:ea:48:7b:
74:16:93:35:9a:27:40:98:55:1f:24:5f:97:14:4b:
4d:74:ec:04:00:e4:9f:fe:95:37:35:90:a7:5e:af:
89:b5:5a:8d:6a:31:63:86:89:9a:d5:ad:8c:4f:10:
11:a8:0b:f6:b1:a4:87:36:89:0e:e0:8b:9b:75:35:
f7:54:d2:26:a0:ba:46:40:76:a0:c3:48:54:53:11:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EF:3A:37:5C:4D:B5:8E:6E:49:C1:48:EF:E4:4A:72:EF:ED:33:58
X509v3 Authority Key Identifier:
keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/l-86N1xNtY5uScFI7-RKcu_tM1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.28.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:da:28:51:36:2c:63:72:14:1c:29:92:b5:16:1c:4e:31:3c:
cb:fa:c4:eb:98:e7:3f:1f:49:3c:5c:68:fd:6d:9e:62:c1:96:
cc:5d:e0:cb:e5:c6:e7:56:89:cd:76:7a:29:31:12:0c:10:20:
28:69:de:f9:be:22:dc:9a:33:0b:94:71:57:83:41:88:a5:2c:
e1:aa:f4:c2:f7:70:e3:52:93:55:7c:7d:aa:4a:ee:cf:39:76:
6b:ed:c8:84:3e:be:88:3e:df:4f:fa:76:d1:bf:d5:05:52:db:
f0:80:c0:8a:cc:47:77:60:ee:d7:5e:a4:6f:c7:c1:20:ab:16:
4c:13:22:85:56:41:67:30:18:84:ae:77:c1:dd:e9:c0:3e:31:
d2:21:5c:4e:56:d8:d8:4a:08:79:da:dc:fc:75:9f:4a:fc:9c:
88:f7:dd:b3:a1:fb:22:9b:d8:db:da:fa:dd:2d:2f:f3:82:13:
a3:43:33:b5:96:7c:bd:de:52:39:ec:98:c0:d9:22:02:d2:92:
b0:72:a4:49:5a:94:6e:13:48:f0:06:a1:90:a1:a6:70:ea:8b:
c4:c7:54:a2:f9:ae:c7:79:c1:a5:4f:72:b4:2f:f9:2d:f0:18:
c1:71:e2:a5:89:b6:38:4f:9d:15:ce:57:8f:0a:cd:6a:74:1a:
1b:83:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:54 2025 by rpki-client