Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a6c720-79fc-483a-a257-d60d2557e4f2/1/3LGeMpL3KHCc5fcLsHbgM8qP70o.roa
File: 3LGeMpL3KHCc5fcLsHbgM8qP70o.roa (raw, json)
Hash identifier: 61Wx1621nRK92WbQ0E6UW+4wgleOtddisFDH+fvO9AQ=
Subject key identifier: DC:B1:9E:32:92:F7:28:70:9C:E5:F7:0B:B0:76:E0:33:CA:8F:EF:4A
Certificate issuer: /CN=68105d81a389cf689ce0369ac839762351259f1b
Certificate serial: 751B27
Authority key identifier: 68:10:5D:81:A3:89:CF:68:9C:E0:36:9A:C8:39:76:23:51:25:9F:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBBdgaOJz2ic4DaayDl2I1Elnxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a6c720-79fc-483a-a257-d60d2557e4f2/1/3LGeMpL3KHCc5fcLsHbgM8qP70o.roa
Signing time: Sat 01 Jan 2022 04:01:18 +0000
ROA not before: Sat 01 Jan 2022 04:01:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22427
IP address blocks: 193.107.23.0/24 maxlen: 24
2a11:4580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7674663 (0x751b27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68105d81a389cf689ce0369ac839762351259f1b
Validity
Not Before: Jan 1 04:01:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcb19e3292f728709ce5f70bb076e033ca8fef4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:0c:70:b2:d5:39:b6:56:39:53:2e:a3:06:
3e:a3:05:a2:a7:ce:43:de:db:d1:11:8d:99:27:18:
49:ec:b6:ef:09:fe:d1:ec:7a:5b:b3:c4:3c:c2:ba:
b9:cf:17:2c:46:bc:f1:83:15:76:ac:01:e2:7a:ff:
0e:f2:e0:92:2f:8c:09:cf:bf:20:cc:7d:56:8d:99:
32:9d:38:f5:e3:4c:b1:b1:c9:df:0d:11:1e:2e:c6:
e7:0f:14:fd:06:a1:fb:5b:97:dd:94:28:db:84:c9:
57:94:c1:c5:66:46:be:5b:96:02:de:35:6e:88:9b:
4a:58:49:80:e0:49:af:ec:8d:c0:28:4d:1a:af:75:
09:f5:09:d2:cf:47:b8:e3:ad:17:1a:3e:8a:cb:29:
88:5e:d1:28:2f:c9:ac:08:3a:7e:b1:07:00:24:d5:
7d:c9:2b:a5:64:cf:bd:73:7a:9a:a6:ee:41:c4:f9:
fa:35:6b:6c:ef:55:28:45:88:c1:55:6d:60:cc:ff:
81:13:c3:87:4f:3d:d5:ac:c8:01:c0:a2:5c:dd:56:
3b:16:48:55:f6:30:c6:0a:8d:4d:ca:33:94:39:35:
64:c5:45:21:bf:0b:62:ea:99:d8:fd:84:e6:9b:1b:
8e:32:77:5f:25:5d:ec:db:45:af:40:f0:8a:37:4e:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B1:9E:32:92:F7:28:70:9C:E5:F7:0B:B0:76:E0:33:CA:8F:EF:4A
X509v3 Authority Key Identifier:
keyid:68:10:5D:81:A3:89:CF:68:9C:E0:36:9A:C8:39:76:23:51:25:9F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBBdgaOJz2ic4DaayDl2I1Elnxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a6c720-79fc-483a-a257-d60d2557e4f2/1/3LGeMpL3KHCc5fcLsHbgM8qP70o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a6c720-79fc-483a-a257-d60d2557e4f2/1/aBBdgaOJz2ic4DaayDl2I1Elnxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.23.0/24
IPv6:
2a11:4580::/29
Signature Algorithm: sha256WithRSAEncryption
26:6e:55:09:4b:fc:a4:43:e7:de:e1:06:61:2c:d2:82:a7:82:
34:fe:ac:c5:66:d9:3d:e2:b2:7f:4e:83:74:46:9c:78:77:02:
56:e9:9c:83:e6:d8:09:75:69:51:22:e9:a5:80:16:c9:b2:2c:
a0:65:c4:5f:82:59:4b:c5:fa:fc:d5:e6:3a:35:f8:73:1d:e8:
a5:45:54:96:a9:ec:b3:02:f3:ee:d0:47:1c:31:44:67:f8:2b:
64:fa:0a:d5:fa:5a:ff:56:68:40:3f:8a:84:99:3c:d4:5b:67:
be:4e:28:95:fe:c9:b0:52:28:0c:a5:6f:f0:82:40:4d:d2:e7:
60:66:e2:d9:11:d5:28:71:10:5f:88:d4:30:95:86:e5:7b:34:
a8:84:68:d5:0f:3f:8b:ac:aa:aa:9c:44:e8:83:c7:05:28:b0:
10:a1:b9:d4:89:80:17:e5:de:8f:b9:0c:3d:70:76:2f:69:0a:
9d:4d:fa:3c:b3:2a:08:98:6c:9b:97:a8:64:e4:96:02:7b:f7:
37:d9:b1:bd:b1:e0:6e:28:93:46:23:d6:7f:37:48:7d:09:88:
74:9f:90:16:b3:3f:a5:ad:44:32:26:bb:26:41:7a:46:1b:fe:
dd:3f:46:61:a2:d0:c4:4e:24:0a:24:43:b5:33:b3:86:79:c0:
32:55:66:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:44:53 2025 by rpki-client