Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/a-yoqKKM2_VTyMIpYk7of2SsSkg.roa
File: a-yoqKKM2_VTyMIpYk7of2SsSkg.roa (raw, json)
Hash identifier: tkjvrZdB0sy56VknBMzLGgv8ID+xT8Z3KrJT0me2WLI=
Subject key identifier: 6B:EC:A8:A8:A2:8C:DB:F5:53:C8:C2:29:62:4E:E8:7F:64:AC:4A:48
Certificate issuer: /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial: 01942067DBDF583E1E046759B4A7F3835F34
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/a-yoqKKM2_VTyMIpYk7of2SsSkg.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20956
IP address blocks: 128.140.186.0/23 maxlen: 23
128.140.186.0/24 maxlen: 24
128.140.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:db:df:58:3e:1e:04:67:59:b4:a7:f3:83:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6beca8a8a28cdbf553c8c229624ee87f64ac4a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:79:b9:ac:0b:da:e4:ff:e7:f8:c3:dd:a8:
70:09:1d:c9:a7:81:a0:2c:5e:e5:95:a1:19:8f:bf:
bc:d7:b2:e9:3c:a1:a1:52:5a:c6:56:f7:90:e6:61:
40:f2:cb:58:7d:60:17:e2:15:29:88:29:46:07:ca:
56:18:75:ab:03:4a:33:3c:13:01:9d:f2:9d:0b:91:
58:4d:13:d7:69:1b:af:7c:12:1f:1f:6b:df:97:d2:
18:dd:ce:31:50:02:14:c7:49:3f:c4:a3:59:83:78:
e5:19:a0:f0:6b:94:09:91:04:c6:a8:8b:d1:01:e1:
9a:14:33:1d:e3:4b:b7:54:f7:6b:47:92:4e:c6:4f:
89:39:1e:b6:1b:09:3b:14:fe:7b:77:e8:e7:94:72:
ad:d1:05:3c:74:1f:0b:81:95:1a:d8:8c:81:38:4f:
73:b0:40:f4:22:92:48:e8:7c:81:c4:3f:a6:a1:41:
a6:18:dc:9f:f9:cc:0f:96:0a:a5:e4:0a:9d:d0:4c:
61:e1:bc:98:80:c3:40:bb:12:43:dd:ac:2e:30:5c:
f8:c3:b4:aa:76:25:1f:1d:cc:37:88:48:8b:25:52:
c6:77:1b:b0:aa:df:35:0b:a0:42:15:1d:eb:d4:a5:
ea:99:91:b1:10:73:d1:95:88:e8:f4:dc:7f:d7:55:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EC:A8:A8:A2:8C:DB:F5:53:C8:C2:29:62:4E:E8:7F:64:AC:4A:48
X509v3 Authority Key Identifier:
keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/a-yoqKKM2_VTyMIpYk7of2SsSkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.140.186.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:39:7c:f2:c5:09:39:c5:4a:1d:b8:0f:35:b5:7a:a7:16:ca:
a5:9d:4d:aa:bb:2e:f5:b8:55:27:90:08:a4:7c:9f:6c:1c:29:
0a:56:ee:10:73:d1:51:aa:39:e2:6f:48:21:61:28:44:d5:2c:
4f:39:93:0b:d7:f9:20:5f:d9:32:63:7f:86:de:ce:1c:d9:22:
1d:9e:75:2f:1e:52:5f:be:96:13:ce:c1:ef:a0:05:0d:f4:c8:
44:ae:2c:dd:3a:54:b0:0c:da:88:d0:e2:8c:20:25:1d:2a:99:
8f:b9:4e:e7:d7:2e:e5:9b:3a:e9:c4:3b:41:ef:6c:69:30:30:
8f:a4:1e:2c:55:58:e1:e5:82:54:b1:56:7a:5b:44:c5:50:cb:
d1:9f:7f:db:c3:66:0f:3d:0e:52:99:96:16:c8:1d:3e:f2:4e:
50:da:a5:a2:1a:cb:8f:45:7f:bd:ab:17:65:e0:51:ed:06:19:
ea:24:cd:c2:20:b0:6b:49:1c:b2:26:e7:50:86:67:66:ac:1e:
97:2b:3a:ae:36:84:e1:e3:83:b3:f0:b1:d9:85:15:49:b0:8f:
76:e6:44:0f:da:bb:7b:ae:12:a6:b4:b7:47:fc:fc:d0:e6:91:
19:66:cb:fc:a6:e2:61:64:9c:a2:92:eb:4b:60:31:68:20:c2:
d2:8f:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:26 2025 by rpki-client