Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/dNeuYEAQmOoidPn9sPTHpBf3kwM.roa
File: dNeuYEAQmOoidPn9sPTHpBf3kwM.roa (raw, json)
Hash identifier: XKk9IUkG18VeN9nDomy3arFXLgPu8Jw+AjyCy/j87MA=
Subject key identifier: 74:D7:AE:60:40:10:98:EA:22:74:F9:FD:B0:F4:C7:A4:17:F7:93:03
Certificate issuer: /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial: 019473BB0F24C8AD4A4CA41FF200EC279826
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/dNeuYEAQmOoidPn9sPTHpBf3kwM.roa
Signing time: Fri 17 Jan 2025 10:07:06 +0000
ROA not before: Fri 17 Jan 2025 10:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1161
IP address blocks: 131.155.0.0/16 maxlen: 24
192.31.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:bb:0f:24:c8:ad:4a:4c:a4:1f:f2:00:ec:27:98:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Validity
Not Before: Jan 17 10:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74d7ae60401098ea2274f9fdb0f4c7a417f79303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:c0:cd:df:0d:44:5b:9f:b8:8f:ef:d9:ea:
46:10:61:0e:63:eb:e1:75:5b:fa:1a:82:3f:d7:ca:
57:2f:72:e3:58:3d:18:ce:64:5c:11:ec:0f:b4:73:
0a:af:a3:5f:37:d5:4b:fc:15:3f:13:23:58:8a:c5:
67:e2:38:15:83:21:82:81:ee:c2:06:ea:01:2d:3e:
22:bb:79:ca:58:c0:33:12:c0:2f:b0:23:2c:b6:d8:
30:e6:f7:bf:ce:79:a2:26:2f:03:4e:10:9e:13:13:
d9:51:83:91:b5:b8:31:8a:fa:7b:e4:f7:05:52:b0:
52:8a:19:4c:9b:3e:3d:d1:46:56:7b:4f:02:0f:e4:
29:cc:05:83:d0:1f:cd:1b:d4:ea:d0:fd:dd:bf:23:
41:33:6e:14:98:53:01:94:27:3e:e3:e2:c0:61:a8:
a8:38:76:90:6b:b2:10:60:dd:4b:1b:89:01:41:a0:
f8:47:e3:c6:c9:fb:0d:3e:62:16:72:fc:ff:08:1c:
a3:fe:bf:2b:e8:1d:27:5b:d4:78:25:bb:ef:25:87:
55:09:c9:d6:d4:06:e0:23:67:09:45:d8:76:f8:18:
cd:fe:6d:65:07:c3:96:9f:b0:31:c1:29:e0:41:f7:
e9:f0:09:f8:64:52:0c:75:a9:7c:97:d6:b2:dc:26:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D7:AE:60:40:10:98:EA:22:74:F9:FD:B0:F4:C7:A4:17:F7:93:03
X509v3 Authority Key Identifier:
keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/dNeuYEAQmOoidPn9sPTHpBf3kwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.155.0.0/16
192.31.168.0/22
Signature Algorithm: sha256WithRSAEncryption
50:d4:7a:5b:58:e4:a6:c0:46:1d:01:16:2d:1c:3d:dc:9b:46:
d3:9a:e5:ac:8e:c8:e7:78:dd:57:b3:28:8d:08:a8:93:1c:3b:
4a:4a:3e:81:34:5f:8a:d8:34:01:68:32:89:06:71:63:77:97:
d7:2e:d4:bf:66:71:d7:b9:66:71:ee:60:b4:0f:c1:14:02:c7:
f1:f2:8b:41:9c:ee:e9:ec:15:c3:2f:35:79:4d:55:75:3f:26:
cc:fd:fa:3e:28:52:c2:89:69:0a:6f:dc:76:19:b7:0e:ef:eb:
bd:37:4e:89:1a:db:df:2a:4a:43:10:1b:6e:fa:e4:83:00:10:
0a:63:7d:d9:02:45:3f:69:10:f9:75:9d:95:54:f2:04:90:43:
b9:06:d6:fe:49:d6:70:4d:0d:f2:1f:a5:c0:a9:ae:26:f0:8d:
1c:11:de:a5:bd:38:e2:e5:e6:de:c1:90:48:72:79:c7:7a:71:
b6:dd:12:32:39:59:ba:d1:cf:d9:b5:33:97:91:24:23:b0:70:
0f:a9:a1:4b:07:87:18:5c:1b:32:58:d3:5f:c8:9a:19:c1:80:
a9:81:70:1d:ad:5a:5c:61:f4:c9:93:08:41:ca:06:0d:98:0a:
68:52:da:15:b8:9b:38:6f:bc:bd:e6:f5:88:6d:cf:bc:b8:96:
96:9c:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:51:02 2025 by rpki-client