Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/LD0Ui4wMeU8IWaHDiSVwgyowOUw.roa
File: LD0Ui4wMeU8IWaHDiSVwgyowOUw.roa (raw, json)
Hash identifier: 31h6z+WARy6dkl6qHeADOyyrJnTIy/84Jsu1HRgGL7A=
Subject key identifier: 2C:3D:14:8B:8C:0C:79:4F:08:59:A1:C3:89:25:70:83:2A:30:39:4C
Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial: 019427B578E9CE5D46394BA10EDA002FFF78
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/LD0Ui4wMeU8IWaHDiSVwgyowOUw.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24971
IP address blocks: 130.193.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:78:e9:ce:5d:46:39:4b:a1:0e:da:00:2f:ff:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c3d148b8c0c794f0859a1c3892570832a30394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:cd:2d:bb:da:c6:df:e8:b2:88:12:b0:25:
66:29:5a:0a:f1:77:f9:a0:06:b9:d6:c6:18:78:0b:
dc:dc:ec:cf:60:cd:5c:2c:40:0b:ac:2d:32:23:ef:
a8:18:54:76:99:a9:bd:7d:b7:69:ec:8a:c8:37:dd:
cf:a6:10:5b:97:a9:cd:2d:84:25:a4:82:2a:f6:f1:
65:9a:cc:44:4a:b5:c2:f1:51:d3:65:5b:63:ef:b6:
87:cc:0e:e7:b3:c6:02:59:92:d8:40:26:f9:d5:11:
73:b1:3a:86:77:bd:f4:d8:71:79:4f:19:fd:2b:1c:
f1:57:24:ea:b5:fd:81:a0:ce:e7:5f:98:55:4b:95:
27:0c:49:62:8e:c8:04:65:a7:a4:9c:6f:c4:bd:34:
17:e0:7f:3a:55:ab:41:a6:f9:17:f3:87:9c:f9:0a:
33:4d:00:0e:dd:dd:51:e8:24:f4:6f:d7:f9:d2:2a:
ae:2c:b0:ba:a3:4b:c6:84:28:ad:6d:3c:df:82:21:
a7:5c:6f:54:d2:51:c4:cb:4c:2e:18:b9:de:aa:2d:
76:a4:15:26:66:f5:e0:15:7a:cc:f5:c3:07:e5:52:
d3:49:ea:af:38:3f:57:93:3c:4a:d6:b4:65:f5:fe:
04:76:a5:bd:14:1c:b4:70:71:b5:f8:2a:f5:5f:8b:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3D:14:8B:8C:0C:79:4F:08:59:A1:C3:89:25:70:83:2A:30:39:4C
X509v3 Authority Key Identifier:
keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/LD0Ui4wMeU8IWaHDiSVwgyowOUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b7:a7:5f:0f:06:07:94:77:d4:a3:ae:51:29:b5:5b:ea:49:
43:2f:66:4f:a8:d0:9f:e9:57:b9:86:5f:11:0d:85:a8:64:a1:
cd:1e:25:9d:10:a0:77:74:5a:9a:5c:a1:b3:fe:ab:12:a8:a6:
ba:21:9b:bb:ee:1c:1d:7a:11:f5:76:c3:7d:73:6e:4c:88:34:
52:af:61:a9:e4:54:27:0e:76:39:d7:43:7b:8a:bc:cd:c7:87:
69:c4:0b:c1:da:68:74:e5:4f:74:a6:2d:35:8c:64:e7:2b:b7:
3a:f8:45:b3:3e:a3:95:42:9f:e4:5f:19:59:1e:8a:85:4c:25:
d7:99:ee:dc:0f:e1:8c:ec:e8:23:af:33:5c:24:2c:11:02:7c:
1e:19:fc:fb:25:c7:da:e4:48:f1:e4:65:46:e7:0a:51:6f:e8:
8f:76:24:a7:33:a0:a5:8c:c8:2e:d0:ab:03:45:fa:5c:8c:a7:
24:85:10:54:5a:a6:0a:55:c1:89:fc:95:ca:0a:79:3d:7d:cd:
30:62:68:3f:9f:a5:f8:d9:7c:3c:84:31:8b:9f:d7:1f:bd:c4:
fa:b9:1a:80:a2:62:8d:13:c2:3b:bb:34:e9:1b:1a:2d:bc:f5:
e1:c7:35:a3:eb:2a:f1:b2:b0:95:12:32:08:ae:2c:02:0b:b9:
56:c0:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:27:32 2025 by rpki-client