Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/kL5tCodlPmsKcG8VmzS3vTT-EpU.roa
File: kL5tCodlPmsKcG8VmzS3vTT-EpU.roa (raw, json)
Hash identifier: rTcyxkJLmIdGub6lXVfezUyk6BdEW9e85j13e1XiRBA=
Subject key identifier: 90:BE:6D:0A:87:65:3E:6B:0A:70:6F:15:9B:34:B7:BD:34:FE:12:95
Certificate issuer: /CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Certificate serial: 0194258FB7372AAF85D85118195516EEB357
Authority key identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/kL5tCodlPmsKcG8VmzS3vTT-EpU.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29256
IP address blocks: 188.247.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b7:37:2a:af:85:d8:51:18:19:55:16:ee:b3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90be6d0a87653e6b0a706f159b34b7bd34fe1295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:24:2a:4b:a8:b1:4b:eb:7c:79:50:85:0c:
12:27:bf:88:d4:58:73:fb:8c:56:e8:72:ab:e5:3f:
4f:4a:13:77:1c:4a:73:dc:60:94:04:1e:db:ca:60:
a3:3d:1d:81:40:8d:6b:4c:fb:af:a1:46:4c:e6:ad:
c6:52:d8:08:1b:6c:95:5d:4b:0d:a4:7e:8a:3e:5a:
5f:ed:cf:76:1e:08:da:94:69:97:8e:26:0b:ab:59:
ae:5d:cf:27:7f:96:d0:be:19:f3:7b:f8:3c:8e:2a:
a1:b8:b1:db:45:d0:62:1c:33:f7:ee:6f:4c:12:5c:
4c:5d:2d:59:9d:08:df:18:0c:ac:66:be:ca:18:2c:
0d:1a:f6:b3:fc:d6:38:9b:53:4b:83:b3:b2:8b:07:
20:d3:46:39:d2:f4:89:0a:27:7a:62:4b:a2:44:83:
a0:03:93:64:ad:24:fb:64:2c:17:f7:b2:83:84:43:
0c:76:d8:0e:9b:de:5b:4b:46:87:61:5d:e8:84:b1:
d4:ad:8a:e7:c3:9b:00:06:35:bc:43:33:88:3b:6b:
d7:cd:73:00:89:f2:ab:25:22:ed:d4:48:38:ec:45:
68:66:d8:c8:00:1b:20:50:45:66:2b:78:14:26:3f:
e9:b9:09:96:27:bc:28:f9:64:ec:af:1f:ee:f8:65:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BE:6D:0A:87:65:3E:6B:0A:70:6F:15:9B:34:B7:BD:34:FE:12:95
X509v3 Authority Key Identifier:
keyid:94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/kL5tCodlPmsKcG8VmzS3vTT-EpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.247.0.0/19
Signature Algorithm: sha256WithRSAEncryption
01:eb:7d:a6:08:3f:f1:ac:05:82:62:63:ca:00:3c:49:66:1a:
44:ea:5c:85:ff:4d:4a:13:f7:bf:cd:3e:ae:a7:04:6c:42:df:
a5:be:33:06:ae:13:e5:e0:bb:b6:a6:c7:b4:2e:d5:fc:95:f8:
1d:d8:17:ca:ba:06:0b:e6:5d:dd:51:b4:10:30:32:8f:1e:38:
b6:3f:96:58:c2:97:83:b0:d3:16:0c:61:14:df:97:10:c8:52:
af:88:de:b2:cd:1a:9b:31:d2:db:30:de:67:f2:6b:49:4c:a4:
d3:b9:7f:8b:93:ee:b9:88:a8:32:34:49:8b:8c:18:ca:79:f5:
56:9a:b5:0f:74:4f:5d:ab:f3:17:1b:7f:26:0b:b9:3c:85:58:
e6:52:da:14:d6:9e:dd:6c:c2:2d:c6:9a:5c:fd:17:d6:35:40:
1e:1d:b8:2e:db:8e:b8:8d:c5:5b:59:c2:f0:bd:43:94:a1:35:
8e:40:a2:18:8a:73:de:a8:1f:c2:63:95:47:de:aa:4a:da:72:
58:20:27:5a:f7:06:99:78:a3:1d:4e:26:f9:f8:8d:39:3f:2b:
fa:ed:f7:ee:7e:1c:16:ef:89:0d:2d:61:34:57:2a:a9:21:8b:
64:e8:f2:b3:ab:aa:ad:6c:cd:6b:a5:a1:b2:c1:b3:d8:d0:13:
55:53:09:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:15 2025 by rpki-client