Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa
File: 3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa (raw, json)
Hash identifier: F/8n4kYq76m4ZS+34MKi7W7c5dmdl0PtvWuG8cLJRrQ=
Subject key identifier: DE:B2:EE:5B:C4:33:CA:88:51:E4:6F:06:96:9A:10:3E:EF:90:EB:EB
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019423D7D8BA605817492BC15DD6DADFAB77
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa
Signing time: Wed 01 Jan 2025 21:48:55 +0000
ROA not before: Wed 01 Jan 2025 21:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8551
IP address blocks: 128.139.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d8:ba:60:58:17:49:2b:c1:5d:d6:da:df:ab:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Jan 1 21:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deb2ee5bc433ca8851e46f06969a103eef90ebeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:4b:b1:a5:0a:4d:4b:bd:6b:14:bc:e4:a3:
81:c0:21:da:44:0b:87:42:d8:8a:dd:75:f3:bd:82:
b3:1f:e9:6a:90:51:93:46:3d:8c:76:58:15:46:c0:
fa:77:d8:09:b4:f5:5d:fe:41:20:9c:cb:c1:8c:e6:
0d:9b:22:8e:27:29:d1:63:1e:d0:84:40:fd:4d:58:
a9:26:f4:02:7f:ac:41:d4:40:fc:07:6e:25:fa:e1:
1c:18:d5:a1:63:e0:be:e6:f6:c7:fc:b6:fd:09:70:
a0:8a:f2:ce:72:fb:11:3c:66:07:80:af:01:55:62:
0b:30:ff:4e:0d:b0:42:59:dc:3f:eb:97:5f:14:93:
e1:3f:1b:f1:09:18:65:36:f7:ad:ff:bf:be:b8:5a:
02:98:e0:cb:66:07:74:ba:c6:a8:7d:2f:66:9e:f1:
d4:fb:80:e7:07:69:56:4b:c0:88:c8:f8:a9:6b:fa:
79:97:00:bc:f2:d0:17:06:54:ab:04:a3:20:c1:38:
91:0c:0a:88:0f:13:04:49:f2:75:8f:a8:ec:6b:66:
67:e0:a8:ca:c7:81:2f:00:29:84:6c:44:0f:05:70:
3c:06:bd:9d:e6:78:08:ae:3a:48:33:01:a5:8c:66:
ca:a8:25:df:b1:49:e8:36:43:28:38:f4:01:c8:c6:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:EE:5B:C4:33:CA:88:51:E4:6F:06:96:9A:10:3E:EF:90:EB:EB
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.194.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:82:6d:8d:0e:78:44:11:30:81:4f:47:96:54:34:2b:e8:c6:
b1:b2:5f:b7:46:ed:cc:10:20:8b:fe:09:99:38:51:de:92:53:
89:28:1b:2a:01:36:5d:50:0a:af:d1:0a:7c:6a:d0:b6:a8:55:
41:d4:75:0e:4d:7d:8a:2d:85:d1:9f:42:12:fe:e3:d0:e1:c8:
0c:ff:e7:9b:1c:64:76:93:5f:d3:42:bc:9c:c4:df:08:70:f7:
41:55:03:29:dd:c8:ba:af:fa:68:80:38:85:b0:54:80:b5:b8:
f5:61:b8:db:fb:9f:ff:de:b0:54:d5:51:8e:68:21:3b:2c:97:
a4:5a:c9:2f:b9:d6:da:ab:86:a6:86:8e:79:ea:c9:08:dd:e8:
f9:d4:f7:b3:1f:ea:cc:14:d9:b9:29:85:ce:f8:66:bd:33:b1:
c0:b6:c8:2b:2e:39:e3:cf:98:aa:b5:23:d0:79:2a:8e:bc:58:
4e:7b:d6:89:2e:e7:ea:bf:ac:2f:cc:c4:25:a3:40:a3:70:46:
e0:8d:c9:1f:59:ae:23:18:a5:23:bd:ea:f4:f9:e8:c6:b0:6a:
1e:2b:f0:9a:32:91:d9:c0:17:bb:f4:c0:79:29:dd:15:a9:1a:
df:c9:fe:8e:44:a1:0d:d6:5e:71:3d:2b:10:a8:42:01:bd:9b:
1d:2a:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:21:56 2025 by rpki-client