Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/LlemLUDCd84kXEFGKBA1pEcpzVU.roa
File: LlemLUDCd84kXEFGKBA1pEcpzVU.roa (raw, json)
Hash identifier: JfcpiQRrDVeOVEeINVti/ZaYZkfMnqCLAWmq46zuOoM=
Subject key identifier: 2E:57:A6:2D:40:C2:77:CE:24:5C:41:46:28:10:35:A4:47:29:CD:55
Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial: 019421B22747E1D71D616D8692A3A0C1EA30
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/LlemLUDCd84kXEFGKBA1pEcpzVU.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16371
IP address blocks: 193.3.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:27:47:e1:d7:1d:61:6d:86:92:a3:a0:c1:ea:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e57a62d40c277ce245c4146281035a44729cd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:31:25:30:b1:e4:78:24:0c:a9:0d:a3:a6:
4e:84:a8:68:27:b0:ae:b1:26:4e:59:0b:26:e6:06:
a9:e6:1d:a4:66:0b:40:0f:1e:c7:6a:d6:87:69:31:
b2:e5:0e:fd:b9:1c:a6:ca:1d:2e:36:7f:71:33:4b:
32:5e:88:35:8e:93:e9:77:8a:d2:75:34:15:94:35:
31:2e:1e:72:95:3e:10:7e:13:87:78:26:73:11:3f:
f4:1e:68:a9:28:3e:bc:45:eb:45:2c:82:d5:3d:96:
4e:2a:87:05:05:ea:df:87:31:5b:c3:99:86:0c:f7:
59:cc:f9:31:77:d3:5b:76:c8:91:0a:2d:1a:4b:c4:
32:df:a4:fd:16:b9:46:86:a1:e4:cc:85:92:a8:b4:
05:23:b3:e8:66:44:4f:bc:b7:31:37:8f:b4:a7:1d:
6f:7a:43:45:fa:51:39:29:78:71:22:75:76:26:0b:
d4:9d:16:b5:2a:f9:5f:e8:a8:12:be:62:b2:02:df:
b1:9f:91:28:4e:65:d2:16:a7:d1:44:67:a6:0a:52:
80:bc:34:39:80:d7:14:fc:79:6c:f5:b9:ba:15:43:
bd:7c:80:ea:53:aa:7f:bc:88:c5:26:c0:92:19:65:
1c:40:26:64:fc:2d:a2:6b:d3:57:51:37:81:25:9c:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:57:A6:2D:40:C2:77:CE:24:5C:41:46:28:10:35:A4:47:29:CD:55
X509v3 Authority Key Identifier:
keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/LlemLUDCd84kXEFGKBA1pEcpzVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:6c:d6:2c:5a:bc:ab:dd:76:cb:77:03:34:d2:e9:a8:98:79:
70:8f:af:e5:1b:f4:72:a2:f6:77:b8:45:74:0f:55:3d:fc:e8:
a5:ee:fd:a0:f3:56:f9:40:21:52:ef:6e:6a:49:53:ec:5b:3c:
17:6f:c3:ca:ee:52:87:95:c6:47:26:cf:75:5e:50:3f:1b:43:
ea:81:e5:86:80:02:52:95:dd:f1:9e:27:1f:16:84:98:47:ba:
04:f2:6c:30:8f:99:72:6e:bb:3b:f8:c2:82:78:c9:98:9a:29:
1a:17:4d:76:58:3e:87:80:63:0c:0d:3d:a1:2d:a7:d1:73:66:
91:d2:d3:a5:8c:64:8b:54:4d:3a:11:16:f7:45:60:05:01:c0:
f7:01:2c:3f:8f:4a:f7:4c:c2:2b:2f:ff:e5:90:15:a4:c8:32:
db:78:a5:5a:f7:31:ea:b7:da:89:54:d4:8e:68:b2:3a:b3:b5:
ad:a9:53:71:92:ce:42:09:52:c7:0d:5d:50:cb:84:9a:33:0a:
22:e8:f0:78:4e:0f:37:0a:8f:ae:fc:a6:ee:2a:8f:af:ae:37:
a1:72:91:0c:40:20:90:13:cf:86:9e:1b:11:22:18:bd:97:e9:
a9:64:97:26:13:fd:4e:b0:a3:02:ac:c5:e7:13:45:3d:ee:0e:
e2:ca:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:12:42 2025 by rpki-client