Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KdcZWpoVubbM4rHKWW1ZpVwI7ww.roa
File: KdcZWpoVubbM4rHKWW1ZpVwI7ww.roa (raw, json)
Hash identifier: jDxgAMlOHHk/SmmyqPHWqM/O0eSTAFp+8Bw8MZImVa8=
Subject key identifier: 29:D7:19:5A:9A:15:B9:B6:CC:E2:B1:CA:59:6D:59:A5:5C:08:EF:0C
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067C062B8ECE3257EB9CA2AB2390820
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KdcZWpoVubbM4rHKWW1ZpVwI7ww.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 138.188.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c0:62:b8:ec:e3:25:7e:b9:ca:2a:b2:39:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29d7195a9a15b9b6cce2b1ca596d59a55c08ef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:ca:35:79:4f:2b:1f:ae:8a:4e:37:11:17:
bc:ba:59:ab:28:6b:53:1a:b1:71:1a:e7:f0:e3:3d:
e5:38:53:1d:d1:b3:12:a2:4f:cd:91:9b:31:f9:cc:
ef:72:08:1a:f0:c1:e2:ff:14:96:33:eb:68:9a:f3:
e0:58:1e:45:c7:08:d5:de:c1:51:92:48:a0:3e:48:
09:38:76:9f:9c:eb:93:de:a4:a0:13:e7:e3:8c:00:
a4:24:bb:9d:2f:94:5d:ea:91:92:0d:29:b7:10:33:
ee:91:32:85:e5:8c:28:8d:c8:ed:1b:a8:eb:2d:6a:
86:37:3d:87:ca:a1:c6:a9:f0:e5:53:51:ab:24:1a:
f8:b3:80:e3:2f:a1:dd:fd:cf:cc:c8:45:ff:b0:9f:
2f:89:8b:fb:82:c1:ee:70:cc:b5:79:34:a0:c3:65:
e7:ff:81:75:91:7b:8f:38:07:c8:9c:b6:6c:e3:f1:
09:e7:23:06:1c:43:f3:41:96:d9:eb:f9:18:57:29:
9c:4e:8d:84:ba:33:9c:5c:61:f4:a4:a0:ec:aa:a8:
f4:8c:60:4a:a0:37:c5:24:6e:98:bb:f7:54:7c:e3:
8b:96:48:4d:9a:59:29:ec:15:79:ef:82:fa:13:4d:
b3:fc:d7:d9:1b:62:a6:c8:40:91:26:56:ef:c6:49:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D7:19:5A:9A:15:B9:B6:CC:E2:B1:CA:59:6D:59:A5:5C:08:EF:0C
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KdcZWpoVubbM4rHKWW1ZpVwI7ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.188.174.0/23
Signature Algorithm: sha256WithRSAEncryption
41:47:02:7f:32:69:1d:ff:ca:75:3e:9e:6a:5b:2b:c3:fb:6b:
a7:1b:2a:c0:2d:6f:a4:cc:57:01:0d:11:70:47:02:bf:7c:aa:
6c:10:2c:df:0d:9a:a9:e9:c4:2a:36:5f:91:a8:6a:92:54:9d:
8e:99:de:d9:bf:71:8d:f8:63:e6:a4:dc:b2:00:5f:49:86:cd:
21:e8:f6:e6:9b:6c:12:0d:48:a3:74:43:2c:aa:ad:86:de:e2:
5c:2e:e6:55:53:42:b3:d8:5a:54:5a:63:90:eb:26:a3:24:f6:
31:57:e0:bc:b3:de:07:3b:eb:e6:49:08:ef:9c:af:be:e1:df:
0e:b4:c3:45:a8:66:1c:09:37:d9:7e:61:99:99:b3:e7:23:03:
98:49:fc:50:d8:e0:40:f8:b4:39:df:00:a5:54:bf:2f:d7:c0:
50:55:da:4c:c8:e9:74:11:b9:ae:cd:59:2b:43:b2:03:44:02:
89:ca:44:2a:0d:3d:4c:a1:30:1e:f1:1b:2a:bb:c6:fe:7e:7e:
26:22:64:3f:ca:90:02:d0:5e:38:ec:16:19:f9:a9:71:1d:00:
d8:7a:20:55:f2:64:c3:96:b5:fb:b2:db:53:b2:83:f5:c4:01:
1d:2e:48:51:8f:4c:2d:20:77:f6:e6:5f:a6:45:70:bf:a4:e3:
38:59:fe:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:14 2025 by rpki-client