Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/lKv2UXEAuZ3pVmPri_cgjqsjuH8.roa
File: lKv2UXEAuZ3pVmPri_cgjqsjuH8.roa (raw, json)
Hash identifier: 21YjP9sGrHMd/UxygO+uZmaIfIlwivtYQxl8y+y2Ni4=
Subject key identifier: 94:AB:F6:51:71:00:B9:9D:E9:56:63:EB:8B:F7:20:8E:AB:23:B8:7F
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 01942747B4AE4ECDF88843B459B090AA7CBA
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/lKv2UXEAuZ3pVmPri_cgjqsjuH8.roa
Signing time: Thu 02 Jan 2025 13:49:58 +0000
ROA not before: Thu 02 Jan 2025 13:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43160
IP address blocks: 176.32.48.0/23 maxlen: 23
176.32.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b4:ae:4e:cd:f8:88:43:b4:59:b0:90:aa:7c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 2 13:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94abf6517100b99de95663eb8bf7208eab23b87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:94:01:33:43:fd:ba:40:b6:c5:37:8c:39:
31:d2:04:3e:83:7e:33:a2:4e:68:54:18:74:35:01:
b5:eb:af:1f:c7:de:72:95:3c:20:d7:e1:5a:e1:fb:
50:fb:fd:11:4e:59:9b:61:7c:ff:84:6a:90:d2:dd:
53:4a:12:db:48:19:0d:5f:fb:3e:85:b6:22:ef:98:
d9:29:b7:a9:8d:a7:09:a5:9d:16:2c:8f:07:75:85:
f3:f1:00:48:2b:cd:fe:d5:af:5c:8b:e6:f8:c0:08:
d5:f5:57:7a:a3:fc:69:61:44:44:e4:ab:db:89:5c:
9b:81:b8:be:8c:0a:7a:76:0c:fc:6e:31:02:61:d6:
2f:33:b0:f6:01:66:68:d0:51:18:a5:e7:d0:59:d5:
11:38:de:c8:de:f9:03:21:b3:10:50:0e:a5:67:03:
27:94:fb:fa:8f:d1:4b:a8:b9:95:60:0b:e3:13:d4:
ed:74:74:01:70:1f:44:2a:3f:a2:d4:77:dc:40:42:
81:56:4e:76:47:ee:e3:59:8f:c4:02:4a:98:a7:ac:
4d:d9:af:66:ec:e1:1f:af:16:1f:1d:8a:14:72:9b:
d3:2a:0d:65:36:6a:0c:0c:ce:a4:bc:db:fa:f2:78:
89:cb:87:f7:74:a6:bf:26:eb:63:4a:fb:9f:96:5f:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AB:F6:51:71:00:B9:9D:E9:56:63:EB:8B:F7:20:8E:AB:23:B8:7F
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/lKv2UXEAuZ3pVmPri_cgjqsjuH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.48.0/23
176.32.52.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:47:0c:4c:63:bc:60:be:15:dc:c6:cd:c1:e3:f9:f9:ae:3a:
12:fd:9c:f6:b7:42:65:c8:ea:37:f1:ca:8d:94:35:26:ee:fd:
9d:d9:64:f0:0a:2a:3d:20:e4:af:b8:e5:88:0c:39:c9:bd:d0:
91:ba:94:35:3f:8f:11:f5:80:4b:f9:80:44:5e:59:80:59:1b:
ac:bf:b0:40:ac:9c:de:49:18:4e:9c:64:32:c6:e0:31:b6:39:
b4:2a:dc:eb:99:34:f2:4c:53:ba:a4:70:d1:65:7e:0c:9e:d9:
0e:3d:6d:41:fb:96:d8:d2:55:08:3f:6f:1f:05:b1:a1:98:57:
31:14:74:62:a2:5c:7c:0e:44:c4:ae:39:b6:4e:e3:9d:32:38:
8b:98:24:f2:34:6e:4c:7c:c2:f6:60:0d:11:a6:cf:66:07:fb:
a9:a3:97:06:14:41:37:87:be:b7:05:0c:91:0a:53:a5:51:01:
0f:ec:7f:0c:e5:09:08:cf:82:bb:2e:3e:ef:9a:a0:21:7e:fd:
aa:9c:e7:09:e0:9b:f1:b7:51:38:26:49:81:85:59:4b:90:6a:
e2:93:ba:68:38:8a:ba:45:26:20:a8:12:15:72:40:d0:b1:a1:
ce:b9:ba:cd:2a:c2:4e:8c:44:fa:ed:60:04:f3:13:19:36:ea:
0c:69:dd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:40 2025 by rpki-client