Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/aLSVAfacqaZr6BA2v4tQ-QXBrgk.roa
File: aLSVAfacqaZr6BA2v4tQ-QXBrgk.roa (raw, json)
Hash identifier: rL2xfK8jFD84mw82J1yDkeEUrUQ/6YLwlfDqBZ119is=
Subject key identifier: 68:B4:95:01:F6:9C:A9:A6:6B:E8:10:36:BF:8B:50:F9:05:C1:AE:09
Certificate issuer: /CN=1488c18c62f08a4ed8ef83e0aa8d5690b8505368
Certificate serial: 01856BE5B79A576A5C149082BACD9C8CA03A
Authority key identifier: 14:88:C1:8C:62:F0:8A:4E:D8:EF:83:E0:AA:8D:56:90:B8:50:53:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIjBjGLwik7Y74Pgqo1WkLhQU2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/aLSVAfacqaZr6BA2v4tQ-QXBrgk.roa
Signing time: Sun 01 Jan 2023 05:54:54 +0000
ROA not before: Sun 01 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50131
IP address blocks: 176.116.1.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b7:9a:57:6a:5c:14:90:82:ba:cd:9c:8c:a0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1488c18c62f08a4ed8ef83e0aa8d5690b8505368
Validity
Not Before: Jan 1 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68b49501f69ca9a66be81036bf8b50f905c1ae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:15:d2:7a:a5:f8:82:94:3c:a9:6c:83:26:
56:71:7b:d7:2f:dd:e5:e4:61:64:75:dd:5e:52:ee:
6a:2b:9c:b2:e6:2e:3c:12:82:89:d8:ea:29:7e:7d:
22:ca:35:84:e5:b6:8c:5d:15:77:84:e2:a8:04:dd:
f3:f4:d6:06:48:10:e7:bc:ac:58:51:ad:d6:a3:25:
fb:c9:9a:8b:75:37:a4:f5:f3:48:31:9c:28:69:27:
37:19:df:e4:af:ab:2c:98:99:64:bf:41:27:2a:1a:
c3:7e:63:8a:5c:a9:12:7f:d0:0a:cd:72:10:32:b9:
14:2f:d3:11:ee:f2:f8:cf:b4:f5:23:58:8b:08:b7:
c7:ad:b5:9d:26:b5:38:c7:14:1c:47:ca:38:41:c8:
c6:ba:b8:f8:2d:46:bb:f5:a4:75:fc:c5:97:a1:72:
a4:ba:34:0f:20:d7:f2:03:ed:b9:63:12:f2:a1:8e:
57:0b:48:d4:54:89:9c:16:49:7b:fb:6f:71:c9:52:
5f:f7:2e:e3:eb:b2:5c:a3:39:a9:17:aa:dc:43:ca:
31:cd:09:0e:1d:3d:37:e8:27:96:99:f8:ab:a0:d1:
72:17:2f:94:3a:42:5b:30:1e:bf:3d:36:03:5f:47:
96:e5:6e:3c:ec:c1:7b:a1:68:07:77:95:68:a8:a1:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B4:95:01:F6:9C:A9:A6:6B:E8:10:36:BF:8B:50:F9:05:C1:AE:09
X509v3 Authority Key Identifier:
keyid:14:88:C1:8C:62:F0:8A:4E:D8:EF:83:E0:AA:8D:56:90:B8:50:53:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIjBjGLwik7Y74Pgqo1WkLhQU2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/aLSVAfacqaZr6BA2v4tQ-QXBrgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/FIjBjGLwik7Y74Pgqo1WkLhQU2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.1.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1c:2e:66:4e:e6:14:78:62:72:8b:75:d1:01:b2:0e:1f:e9:
eb:42:95:88:f6:fe:c1:48:c0:13:be:2f:75:d2:7c:98:d0:f7:
d7:86:6b:b9:42:1c:48:77:b9:37:f6:d7:da:30:50:82:c4:85:
62:81:3e:c3:b4:89:0f:d7:9c:15:3f:32:1a:38:d1:8e:39:51:
4b:c9:16:8b:58:ab:71:e2:7c:90:5c:5d:9e:49:f8:09:20:c5:
66:9a:9b:4d:7f:10:18:67:f6:2e:43:90:72:24:6b:68:39:07:
4f:13:18:4b:03:70:e8:ce:e5:0b:e9:b5:f8:fe:2c:60:0e:83:
ef:64:90:af:4b:3b:bd:22:5f:06:b2:48:a4:85:04:05:fe:13:
b3:96:6e:6a:ac:57:e4:3d:43:5c:4b:f3:c2:da:98:76:b2:73:
0e:46:bd:b8:62:66:fd:cf:b7:ed:55:a4:d7:a8:99:1e:82:f3:
c9:f9:b3:33:7c:c6:d2:f6:32:c3:48:f4:f8:c5:61:06:52:86:
26:8b:31:41:0b:5b:eb:e8:1d:64:3e:86:82:66:3f:68:d5:95:
7e:5f:f9:1f:db:cc:e4:9b:c5:b8:51:f4:0d:b6:19:69:08:da:
c3:03:32:7f:e2:18:31:92:e1:b4:1f:8e:71:f1:7f:fc:ea:73:
fa:f9:a3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:04:04 2025 by rpki-client