Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/L_pCaWKXWxPmZtcjgrdQ7etZb8o.roa
File: L_pCaWKXWxPmZtcjgrdQ7etZb8o.roa (raw, json)
Hash identifier: Rf3G50V/l2U33KMtzm9FvJ/DzwMwsgMINMfFaUfRHA0=
Subject key identifier: 2F:FA:42:69:62:97:5B:13:E6:66:D7:23:82:B7:50:ED:EB:59:6F:CA
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0187015C1F669263DBA1F52976DDB81BB211
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/L_pCaWKXWxPmZtcjgrdQ7etZb8o.roa
Signing time: Mon 20 Mar 2023 23:30:27 +0000
ROA not before: Mon 20 Mar 2023 23:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 155.254.62.0/24 maxlen: 24
107.181.135.0/24 maxlen: 24
2a07:9940:3333::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:01:5c:1f:66:92:63:db:a1:f5:29:76:dd:b8:1b:b2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Mar 20 23:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ffa426962975b13e666d72382b750edeb596fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:33:40:a9:17:a1:6b:d0:0b:6c:2c:6c:21:
cc:39:9f:b7:fa:b1:b1:be:4e:0f:21:06:ca:99:ff:
86:fc:21:d9:af:3d:f1:28:d2:d1:f0:07:9b:d2:cb:
54:fb:38:86:aa:1e:af:88:3a:5a:55:3a:fc:cb:8b:
6b:d4:e7:c2:21:01:10:2c:46:79:6f:2b:07:07:4e:
d5:0b:41:2f:21:3e:b6:7b:db:a9:7a:b5:05:0d:bb:
d6:6d:8a:4f:21:1e:b9:e7:25:a9:ff:68:aa:69:7f:
87:af:92:93:fc:0b:f6:d0:03:0e:4a:5e:61:ee:d6:
90:d8:d0:99:b1:69:2a:a9:69:d3:16:1b:56:84:32:
79:17:dd:4a:fc:79:ff:af:c8:32:b9:15:d0:ac:16:
c9:8c:0d:e9:f6:b6:6e:4f:d4:cb:ab:9f:25:c7:0a:
90:16:7e:a1:56:55:59:02:14:23:71:13:5a:14:d4:
0e:e9:98:45:4d:d3:28:31:e3:31:07:da:10:89:fe:
fe:a7:19:e1:c5:a3:67:82:ba:97:92:68:90:a9:63:
51:31:b9:14:2d:57:81:4b:a3:2e:67:6f:9c:6e:ea:
6c:2b:92:5a:0d:b2:18:aa:03:55:64:8a:ce:9e:cf:
07:07:88:8d:45:55:f8:e5:ba:0c:98:4b:e6:ae:4a:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FA:42:69:62:97:5B:13:E6:66:D7:23:82:B7:50:ED:EB:59:6F:CA
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/L_pCaWKXWxPmZtcjgrdQ7etZb8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.135.0/24
155.254.62.0/24
IPv6:
2a07:9940:3333::/48
Signature Algorithm: sha256WithRSAEncryption
19:22:07:5f:ee:ac:4a:04:0d:d0:81:3d:10:ff:e4:29:b0:dd:
93:5a:3b:0d:2d:f9:16:30:e1:68:51:5b:73:a7:46:cc:3b:fa:
1f:eb:72:8e:64:05:96:38:df:6c:60:7f:16:51:2d:88:43:57:
89:8f:ec:e1:eb:61:38:ee:84:27:59:32:62:ec:15:92:30:13:
c8:14:82:7a:d6:68:4d:44:df:c6:95:b5:f0:b9:7f:63:4b:ed:
db:86:28:a0:ef:0a:ce:e4:b2:ef:f1:90:16:62:4c:73:06:f4:
41:2f:76:5d:ea:68:3f:66:67:9c:28:5f:4a:ad:32:11:c3:05:
01:4a:f3:73:7d:0d:18:ec:fb:28:70:2a:b0:13:9c:1f:68:96:
ea:cb:1b:b4:7d:d8:2e:1d:54:24:1a:8c:48:72:8b:2b:a4:d6:
35:6b:f8:e1:1f:68:2c:42:2f:46:dc:85:49:c3:26:e0:ec:e0:
99:d3:38:bb:5e:0d:e7:f2:47:b8:6c:0d:95:4e:f5:5e:37:98:
d6:3a:f0:67:86:b4:22:50:88:be:b9:4a:c7:31:76:f4:34:d9:
0f:37:c6:f7:5a:8a:d7:ba:10:c9:b8:0e:ca:93:56:93:12:4b:
27:7b:dc:b7:d5:55:34:7c:d4:41:c0:0a:28:6a:c5:45:c1:ad:
8e:2c:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:38 2025 by rpki-client