Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/52LURRKHhsuXGtaB1ANEy4yK2aU.roa
File: 52LURRKHhsuXGtaB1ANEy4yK2aU.roa (raw, json)
Hash identifier: 6pIRlcrWZsK7b5ZhODLvWeekkcvv6vlup79R4S6fe4w=
Subject key identifier: E7:62:D4:45:12:87:86:CB:97:1A:D6:81:D4:03:44:CB:8C:8A:D9:A5
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 0194258F9AC93E3E0DBE11DB1D82C8C6AC63
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/52LURRKHhsuXGtaB1ANEy4yK2aU.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16265
IP address blocks: 176.103.222.0/23 maxlen: 23
194.169.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9a:c9:3e:3e:0d:be:11:db:1d:82:c8:c6:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e762d445128786cb971ad681d40344cb8c8ad9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:cf:b3:2c:8d:1a:02:f0:60:99:86:a3:eb:
e7:21:5c:91:ac:ce:4d:2a:04:83:39:11:b9:dd:d3:
d4:e2:72:8f:14:fa:48:32:7a:51:08:46:32:71:59:
da:ce:d7:ed:a0:3f:1d:c8:26:7d:b9:1c:c7:3e:2a:
0b:2a:55:ef:1a:93:20:7b:da:4d:73:88:11:47:a9:
7e:0a:70:0f:0b:70:2b:60:99:b3:10:ee:e0:26:a6:
25:ef:79:e1:9e:26:8f:c1:52:fb:86:0a:b4:0b:e8:
68:e0:8e:85:b1:63:31:fa:28:43:35:f1:f8:30:15:
88:02:27:5a:9a:43:2c:95:b4:0e:7f:5d:43:86:27:
a2:52:2d:84:2f:da:02:72:76:1e:db:f9:d9:33:c8:
e5:7a:ea:72:b7:77:42:2b:2d:93:b4:ae:f2:d3:f7:
f9:d4:d4:a4:4d:14:0b:d5:78:6a:6e:12:12:b2:05:
ff:dd:b0:29:64:94:f9:1a:96:28:34:34:46:26:d4:
16:b9:6b:e9:e8:c2:e7:b1:54:c5:11:cf:b0:1a:5e:
19:36:a2:9f:28:7d:17:c8:9a:7b:55:8a:f7:19:15:
d8:52:79:d2:74:8b:03:12:fb:1d:87:5a:c6:45:40:
a0:80:a3:9f:91:14:47:72:d2:22:90:d7:57:ab:02:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:62:D4:45:12:87:86:CB:97:1A:D6:81:D4:03:44:CB:8C:8A:D9:A5
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/52LURRKHhsuXGtaB1ANEy4yK2aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.222.0/23
194.169.245.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:b6:c5:3f:51:f2:93:30:23:65:dc:59:41:42:da:28:c6:33:
2f:df:0d:31:c2:fb:45:66:c5:37:1d:d5:24:26:b0:06:d5:93:
12:6e:68:d4:f6:ab:58:6b:54:47:19:8f:5e:de:bb:38:6e:7d:
df:b1:6c:1e:ca:16:6a:ea:80:33:fb:54:d8:d9:d6:e0:6c:9c:
ff:4e:7c:63:e1:0e:dc:c5:03:ed:40:61:a6:c8:43:05:86:f9:
e9:78:4e:e2:03:21:e1:fd:34:d9:5d:32:3d:4d:a7:df:fb:23:
32:32:6a:91:d1:ea:f9:fa:f0:d4:47:39:c3:20:e6:6e:3c:60:
49:7a:07:99:04:7d:ba:9b:32:0e:81:a0:8e:e2:b9:66:b8:7e:
cf:90:67:23:4d:e5:8b:70:99:5e:bb:2c:8a:ae:07:04:a5:64:
8e:1f:a3:bd:c3:f7:ac:b9:14:2d:d1:65:d7:3e:91:f7:43:6b:
ee:bf:bb:6f:97:66:85:d8:b4:29:3f:b5:32:e3:26:f4:da:e7:
ed:f7:eb:1a:0c:01:a2:24:74:b1:a5:84:dc:71:1b:30:ac:b0:
20:34:a1:fb:41:b6:20:45:27:8c:b0:04:e3:6d:c3:06:a2:b6:
f1:d2:de:cf:17:07:29:99:e2:3c:a6:8e:f9:9a:52:8c:fb:5a:
31:3f:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:34 2025 by rpki-client