Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa
File: 3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa (raw, json)
Hash identifier: mpBdcgU7I+uQ5H1oVCfF7A1oXC3Ul6uCrit0pbGiORo=
Subject key identifier: DC:BC:20:BF:C1:BB:1F:53:3B:69:4A:5C:12:F3:60:9A:8C:25:2F:1E
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 019426D9F11A4C897AE71D23D4A043F1E1ED
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24836
IP address blocks: 193.111.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f1:1a:4c:89:7a:e7:1d:23:d4:a0:43:f1:e1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcbc20bfc1bb1f533b694a5c12f3609a8c252f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:8b:90:32:90:f3:0e:35:93:42:ab:ed:92:
31:88:64:e4:d8:c7:6b:ac:93:20:e8:cd:cb:b0:f8:
85:b1:2f:4e:2d:67:55:07:c6:d9:46:f4:44:de:a2:
25:a3:09:c8:1c:6e:df:63:9b:60:93:38:be:ef:fb:
cb:ec:85:c7:94:4a:6d:e8:79:93:f1:43:b5:1e:28:
6d:cc:99:e2:6c:96:32:12:4c:68:0e:b6:ab:67:65:
11:9d:b0:6b:fc:b6:cb:09:70:15:ff:3f:e9:a9:08:
25:30:ac:c6:24:34:77:44:4a:00:c4:06:2f:12:09:
e7:18:54:81:63:50:0d:f5:80:29:e5:9c:a9:7b:0b:
59:b4:55:13:95:75:a4:b0:22:aa:4b:de:9e:ae:47:
8a:f8:4e:8a:43:f4:5f:9e:5b:f0:fa:42:ab:8c:c9:
4c:3b:09:a4:3c:73:c9:72:1a:e6:93:f1:91:b8:fb:
2f:89:31:09:fe:c7:7b:35:95:b1:5e:71:cb:20:de:
fc:3b:3f:b1:08:0d:64:25:e6:dc:f1:b5:6e:85:77:
d1:09:c4:2e:bb:c4:4d:04:d6:ff:08:cc:d8:f4:06:
77:d0:d5:90:48:fe:4c:8e:0c:6b:2f:8d:bd:1e:f6:
99:2a:ec:e0:60:4a:9f:17:93:2e:8d:29:a9:ca:b8:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BC:20:BF:C1:BB:1F:53:3B:69:4A:5C:12:F3:60:9A:8C:25:2F:1E
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.163.0/24
Signature Algorithm: sha256WithRSAEncryption
59:1c:e8:5f:88:31:76:d1:c1:7e:f8:09:c7:12:d1:91:4d:fd:
53:b8:83:4e:04:6e:cc:c1:e5:53:70:6e:97:4c:0d:66:0e:74:
0b:30:ac:30:c7:79:ca:5d:46:92:32:e0:47:01:53:11:24:73:
2e:5a:96:4a:3d:18:c4:cc:82:a6:bf:0d:54:cb:dc:23:55:9f:
98:6d:a2:d7:b9:41:49:3b:fe:d7:73:e0:34:b4:f6:0a:35:95:
be:95:0e:17:f5:8c:36:32:81:c6:a3:d8:d0:7e:69:eb:6e:27:
dc:16:5a:59:03:2a:b0:a8:c3:01:03:87:6b:e3:95:b2:a2:c9:
c4:a1:69:c2:70:bd:aa:b9:da:0d:48:74:db:e3:bc:74:9d:de:
f1:81:bd:ff:06:1e:13:d2:0c:47:46:3a:97:9f:16:9b:b7:4e:
4d:6b:76:f8:73:28:b8:6f:ef:bb:24:e5:4e:de:59:bc:84:46:
11:46:17:b9:48:54:44:29:dd:7a:ce:dd:07:c0:49:53:af:dd:
70:d8:1e:66:9d:d8:0a:90:c8:d2:2a:bb:23:77:6f:a9:fb:4f:
68:6c:4b:87:9f:0f:f8:28:f2:28:78:bb:f9:46:61:94:3c:70:
2a:50:58:e8:39:71:44:34:05:97:50:eb:78:1f:13:1e:e8:12:
38:85:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:36 2025 by rpki-client