Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/KOB0vwmJ7cfgZ_1WOb_Xx7LqG6U.roa
File: KOB0vwmJ7cfgZ_1WOb_Xx7LqG6U.roa (raw, json)
Hash identifier: a7bo8HXeX2LyPkuCveHxDVKdqnbGHzPDqS6LymzXHUs=
Subject key identifier: 28:E0:74:BF:09:89:ED:C7:E0:67:FD:56:39:BF:D7:C7:B2:EA:1B:A5
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 019473B96A45FAE817C6E2F204A46420EE50
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/KOB0vwmJ7cfgZ_1WOb_Xx7LqG6U.roa
Signing time: Fri 17 Jan 2025 10:05:18 +0000
ROA not before: Fri 17 Jan 2025 10:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1128
IP address blocks: 130.161.0.0/16 maxlen: 24
131.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:b9:6a:45:fa:e8:17:c6:e2:f2:04:a4:64:20:ee:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Jan 17 10:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28e074bf0989edc7e067fd5639bfd7c7b2ea1ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:c9:c7:d2:a2:e5:18:1f:fa:c5:ea:59:e0:
a1:41:de:f6:a5:86:35:f5:b8:4a:a8:1d:e6:72:8a:
6a:25:8e:1f:3a:e4:2e:ff:aa:f7:51:7a:99:21:c1:
d5:11:c6:6b:45:38:ab:22:76:5c:5f:a1:0d:c5:13:
62:9b:3e:e2:90:79:3b:c9:be:09:19:fa:77:3a:ed:
b4:bf:9d:bf:06:3f:89:c5:e1:87:3c:ae:d4:01:12:
ca:14:9d:ad:dc:ce:15:a9:08:aa:ae:0f:25:66:5a:
1c:0d:de:bd:a6:cd:19:58:ca:d6:b0:d9:48:1d:5e:
9a:2b:3c:83:89:08:13:69:71:77:30:e8:57:38:74:
52:f8:5b:c6:60:21:23:f9:09:8c:a1:a0:c9:63:3b:
7e:d7:0e:0a:79:7c:e8:11:5f:88:1e:a4:23:57:de:
2e:16:31:28:13:0f:92:ea:df:49:9b:b8:21:6e:c6:
09:01:3b:d0:1f:ca:51:16:66:94:b2:e7:6f:63:dc:
8e:f6:c8:2b:24:6f:1e:ce:d2:b9:68:99:dc:60:69:
42:6e:ee:d6:64:af:a2:75:c8:b1:b0:b8:5a:f9:8c:
c5:ca:81:af:12:a6:9e:56:86:4e:37:07:d9:d7:30:
39:18:2a:bc:10:1f:cc:64:7c:2e:ab:f4:b3:ab:0f:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E0:74:BF:09:89:ED:C7:E0:67:FD:56:39:BF:D7:C7:B2:EA:1B:A5
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/KOB0vwmJ7cfgZ_1WOb_Xx7LqG6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.161.0.0/16
131.180.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:28:05:08:70:db:31:ac:39:d3:d3:7c:8a:4c:7e:91:f0:44:
65:c3:27:36:6d:54:a9:c7:94:b5:dc:de:39:4c:ac:28:26:2e:
61:62:e3:fb:bb:1d:30:15:d8:5f:25:e5:89:54:74:f0:c3:9b:
70:c2:22:c9:4e:49:68:5f:a7:a0:e4:df:d5:6b:61:ec:43:3e:
f0:0f:fb:4e:bd:3e:88:1e:84:3f:10:02:c1:81:d2:ce:c4:48:
d9:b0:71:d1:ea:5a:ee:4a:94:41:e4:26:89:6e:48:45:9e:05:
0d:ca:59:ac:0a:73:04:77:90:b0:77:e8:1e:71:64:63:06:5c:
71:d1:63:04:de:12:b9:7f:a7:8a:a1:49:a5:ce:08:9b:62:78:
cc:a0:e3:84:c2:01:e6:8f:e8:02:72:46:ee:c2:ac:80:fb:7c:
43:39:6d:d1:61:ae:3a:f4:88:08:fd:f8:f9:7a:b4:e5:25:a7:
b0:0f:cf:e5:d1:75:3b:96:bf:05:fe:27:f7:79:5a:d7:bd:8e:
fb:9f:8e:cf:e2:ac:ef:04:4c:f2:ed:82:52:a3:89:e1:0c:ac:
a3:d3:e4:cf:32:55:ad:1c:cc:5b:20:c9:ae:9a:09:dc:fc:a2:
5e:1b:3e:9d:26:73:be:eb:6b:1b:4b:17:5c:28:57:a0:dd:02:
ed:fe:a5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:53 2025 by rpki-client