Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1-lcqj9vD7HAGF9hYZHR5xyi9WF8.roa
File: 1-lcqj9vD7HAGF9hYZHR5xyi9WF8.roa (raw, json)
Hash identifier: ASRwNE5wsaZaPgqmA7TRd3/PCZOiteLbTUYKuoxWQhc=
Subject key identifier: FA:57:2A:8F:DB:C3:EC:70:06:17:D8:58:64:74:79:C7:28:BD:58:5F
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019425FC13C98C05009EB5D363C352E57F20
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1-lcqj9vD7HAGF9hYZHR5xyi9WF8.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.63.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:13:c9:8c:05:00:9e:b5:d3:63:c3:52:e5:7f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa572a8fdbc3ec700617d858647479c728bd585f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:c0:a6:21:10:d2:27:7e:f1:3a:2a:2e:cb:
ad:26:62:93:cf:a6:fa:d0:0e:e3:e6:60:01:a1:64:
ff:c4:79:8e:c8:16:14:8b:81:2f:3a:a3:e5:f4:18:
80:8c:1d:0c:21:11:43:0c:f3:90:e0:9f:fc:d6:ed:
85:ce:cd:55:10:7a:c1:ca:9a:a6:fc:e5:51:1b:e0:
ff:b8:93:e5:63:95:63:76:3b:b7:24:c3:4c:37:da:
c1:54:05:d1:6c:ee:f4:4b:8e:4c:90:1f:be:ff:61:
6c:a9:9b:01:a6:79:a5:14:cd:bb:d8:5e:03:25:09:
f4:65:e7:b3:72:ef:06:61:ba:68:fc:b8:56:d0:24:
a1:11:e5:f8:98:59:df:4f:a4:4e:e7:2d:9a:41:44:
05:12:0f:0a:91:b7:0e:ba:ab:c8:2f:19:26:6d:33:
37:63:90:a4:d9:44:b3:4c:47:e8:c2:05:62:a1:2d:
f2:ea:af:fa:66:17:8f:5e:f0:a1:ea:31:52:d1:47:
48:53:ae:55:dc:fc:3d:8a:12:75:b0:c0:73:be:98:
4b:fd:bd:79:d0:f5:4f:03:7b:67:63:14:0e:f2:94:
0b:03:75:62:54:f4:ba:f3:c3:1e:7c:5a:92:81:3f:
dd:6f:05:07:90:69:e1:bf:5a:40:72:85:d6:9a:21:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:57:2A:8F:DB:C3:EC:70:06:17:D8:58:64:74:79:C7:28:BD:58:5F
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1-lcqj9vD7HAGF9hYZHR5xyi9WF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.63.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:5a:f7:ca:dc:d3:86:49:dc:15:6b:27:e9:a2:28:8f:4c:97:
81:1f:09:89:a4:5f:87:17:5d:17:e3:8f:da:58:01:61:63:af:
6b:3c:14:57:22:5a:59:a1:c9:3d:85:c5:94:b3:43:4b:55:38:
fc:e1:ef:90:e7:0a:3e:a7:a1:53:f7:f0:33:28:9c:1f:93:3b:
68:a1:32:3a:46:17:c2:03:c4:f1:c2:1c:f4:60:68:2c:18:2c:
43:5e:99:9b:09:5f:a1:36:76:90:6c:c0:81:b3:7f:0a:58:9c:
11:54:c6:7c:5b:74:c1:19:69:10:50:11:92:71:46:79:d8:89:
19:55:c4:e4:32:39:18:76:09:d4:f1:df:11:9f:b4:14:d9:c8:
f3:23:7c:7d:2c:0a:7b:e6:ef:63:77:b6:50:ad:6f:31:81:35:
69:1c:96:99:11:f8:cf:7d:41:80:53:95:2a:e6:a2:d7:a4:4a:
3e:75:7a:bd:5e:bf:69:df:0f:5b:60:a0:4d:13:31:2d:95:c2:
7f:eb:83:dc:c7:49:c9:d0:4e:5f:b2:3b:78:d1:73:71:7c:50:
fd:f6:84:fe:53:08:75:37:1e:bb:c7:b0:29:18:9b:e0:64:18:
c6:fb:09:ad:96:16:d8:db:e1:2e:6b:44:f4:ba:08:6d:c0:e3:
79:6a:19:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:44:31 2025 by rpki-client