Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/Lqe5vcwgWue09k7p7ctNg9AlXcM.roa
File: Lqe5vcwgWue09k7p7ctNg9AlXcM.roa (raw, json)
Hash identifier: YaDYxTi/SH2+EMKhFcDi7OA2pSDfUeTirPWPAhdJeo0=
Subject key identifier: 2E:A7:B9:BD:CC:20:5A:E7:B4:F6:4E:E9:ED:CB:4D:83:D0:25:5D:C3
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 0194206845AA2C94F612178E743EE2810FDE
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/Lqe5vcwgWue09k7p7ctNg9AlXcM.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44097
IP address blocks: 193.27.0.0/24 maxlen: 24
193.43.214.0/24 maxlen: 24
2001:67c:ec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:45:aa:2c:94:f6:12:17:8e:74:3e:e2:81:0f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ea7b9bdcc205ae7b4f64ee9edcb4d83d0255dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:88:d9:3a:f1:39:9a:8b:91:03:e9:ab:86:
1d:0a:4b:40:bf:a7:89:3a:e0:3f:66:c2:d8:6d:c7:
1c:1c:bc:90:5c:4c:a7:13:7c:fa:e7:f6:b1:3c:71:
01:4f:d8:f4:18:fd:57:96:74:02:6d:67:0e:c3:59:
63:84:67:de:ee:85:c7:95:38:d3:95:82:86:3e:fa:
0e:d3:af:58:51:2c:c6:73:dd:b2:df:2a:1c:66:b8:
b4:58:f3:ba:97:fb:18:81:fa:05:1a:66:f2:0f:2d:
aa:8e:88:b9:37:ab:e6:93:54:13:eb:ad:fa:a7:ad:
e6:2a:c4:4a:24:11:6b:83:91:cc:e4:ce:34:7d:97:
21:b6:5b:3e:20:d4:15:01:3a:70:ee:04:c2:b4:e0:
7c:25:44:a3:27:65:2f:72:d1:6a:f8:1b:b6:a0:62:
ac:72:c8:38:4a:d1:27:3a:97:b3:b7:76:e0:91:78:
67:df:6d:e7:a1:55:e9:df:0a:84:de:94:e4:fd:d7:
e8:0e:8b:24:3d:64:c6:03:93:e2:66:1e:d5:40:c7:
1e:74:eb:31:78:cf:37:f8:51:9a:a9:55:20:a6:cc:
e5:13:5f:a4:aa:7f:df:f4:06:b6:b1:e5:3f:3c:a9:
67:c3:d5:76:09:f2:65:c0:f8:d5:84:a3:c0:74:7a:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:B9:BD:CC:20:5A:E7:B4:F6:4E:E9:ED:CB:4D:83:D0:25:5D:C3
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/Lqe5vcwgWue09k7p7ctNg9AlXcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.0.0/24
193.43.214.0/24
IPv6:
2001:67c:ec::/48
Signature Algorithm: sha256WithRSAEncryption
46:4c:01:d0:0a:da:88:cd:ce:94:b6:cd:4b:81:8b:e1:71:c4:
6b:8a:f2:36:d9:fe:a5:09:ed:27:38:35:62:db:ef:25:e4:b9:
ee:80:c6:98:22:a0:55:88:07:51:5f:79:f3:1a:da:ec:ad:ff:
02:ba:e2:aa:2a:4c:39:fb:0c:48:d1:02:c7:d7:69:ce:1f:33:
3c:25:bb:39:9b:9d:fc:02:d8:3a:6d:44:ba:08:75:25:cf:9c:
ab:20:30:f3:f3:3c:c8:f1:3d:ee:7a:b8:48:3b:05:8f:34:bc:
35:4c:c3:56:ff:40:d1:3d:0d:fa:41:c6:2e:f3:23:2b:f1:e4:
f5:a8:1b:4b:22:32:8b:a9:3d:1d:76:32:74:5e:82:1c:fc:39:
e4:d0:e0:c7:3e:e8:ad:69:5f:b3:6f:7b:71:4b:42:4b:3b:92:
99:11:76:29:31:ce:45:04:99:c0:7d:58:57:e5:06:d5:ae:a8:
3b:d6:23:ac:6b:ef:6d:83:d3:7e:4a:91:23:fb:16:08:13:14:
01:15:4c:cb:9d:3d:c0:80:a2:3c:07:cd:fe:6a:9c:b3:85:1e:
a5:71:a1:fb:da:10:35:0f:82:2a:07:f7:39:28:50:00:37:bb:
71:79:1d:c0:a8:b3:cc:03:46:53:ba:d3:b6:be:06:e3:cb:ea:
8a:95:ed:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:30:02 2025 by rpki-client