Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/3LlkLwGlc8UlwVYCI2PmRtNBoNA.roa
File: 3LlkLwGlc8UlwVYCI2PmRtNBoNA.roa (raw, json)
Hash identifier: fJd2HrwJ7Cj1H57OwJp5MERJlPs2WC3kFr0Oyw+Q0kY=
Subject key identifier: DC:B9:64:2F:01:A5:73:C5:25:C1:56:02:23:63:E6:46:D3:41:A0:D0
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0188024A14381E7E3BB5BA6C1A8027E37E92
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/3LlkLwGlc8UlwVYCI2PmRtNBoNA.roa
Signing time: Tue 09 May 2023 20:53:09 +0000
ROA not before: Tue 09 May 2023 20:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61424
IP address blocks: 94.131.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:02:4a:14:38:1e:7e:3b:b5:ba:6c:1a:80:27:e3:7e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: May 9 20:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcb9642f01a573c525c156022363e646d341a0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:26:2a:72:2c:60:10:14:61:43:5b:84:48:
c9:90:a9:26:e4:05:b8:8f:90:96:a9:1c:43:7b:5d:
b4:59:a0:ee:75:d0:e8:e7:6c:03:24:0b:74:e2:6e:
b4:cb:c1:46:98:d9:c4:7a:d6:dd:02:11:88:ca:58:
29:df:92:2f:c8:ba:a0:17:02:70:dd:11:de:77:1f:
af:81:ca:d0:37:82:f6:ec:d6:10:e9:a5:cc:9a:87:
1d:f6:2b:f4:02:f2:5e:26:e4:a9:26:3a:a3:e5:74:
68:b3:80:8e:28:bb:1f:de:b5:4f:14:c3:25:f2:bf:
f8:c6:a4:4d:fb:7c:a3:ad:5d:9f:23:48:07:ae:bd:
2b:11:0c:61:77:48:70:ec:35:d2:85:d6:b9:a1:13:
05:0e:39:b3:80:11:83:da:94:2a:ab:95:0f:6c:e1:
1d:af:d9:c6:e2:80:07:33:b3:71:ce:96:55:d0:9e:
da:64:78:c3:a1:51:fd:e2:7f:ef:b8:ed:dd:89:6b:
b4:ec:5c:bf:ec:d1:f5:12:49:b5:a0:9a:58:7d:2c:
6b:c2:aa:56:90:2b:3c:dc:c2:db:93:8f:f7:3c:c2:
90:52:2f:be:68:c2:c5:75:d4:a6:1e:be:20:43:91:
86:a5:0a:1e:09:34:24:9a:8c:1e:b4:90:b9:8c:5f:
3b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B9:64:2F:01:A5:73:C5:25:C1:56:02:23:63:E6:46:D3:41:A0:D0
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/3LlkLwGlc8UlwVYCI2PmRtNBoNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.103.0/24
Signature Algorithm: sha256WithRSAEncryption
77:57:2a:33:bc:5c:72:99:8a:b0:cb:e8:33:eb:32:82:0c:b2:
cd:03:2a:4c:76:00:c2:6e:57:d3:9c:c3:f4:b9:6c:ca:28:45:
13:37:f0:de:62:b3:37:35:b0:e2:6e:19:e1:81:b7:45:6f:03:
3f:45:b9:50:94:6f:36:62:c4:52:f8:f2:9c:aa:ff:99:60:48:
87:99:68:12:d6:66:ea:ed:2c:e6:55:1b:cf:ec:3d:79:c5:fa:
3f:05:28:e4:8f:3b:6b:e9:d4:92:4c:41:bb:ef:9f:9d:3b:f8:
9b:35:44:90:66:14:ec:49:3a:50:4a:fe:a4:5e:84:0c:ca:c1:
25:91:3d:88:bb:bd:ad:19:1f:65:a3:c1:6e:28:d0:fc:57:76:
82:d1:30:cb:bf:93:60:3c:1b:3c:27:fb:0e:ff:9f:b8:7f:0d:
e0:86:5c:7b:67:19:27:01:63:51:ed:ae:69:e5:a6:7f:ae:52:
15:4b:f0:32:cf:4b:37:25:47:b9:a2:99:73:48:0d:02:97:e4:
c4:c9:98:f8:a4:2e:00:1b:82:0a:29:fc:68:53:4b:f7:07:29:
29:de:ae:7d:1f:74:10:b0:33:79:6f:34:d6:e1:78:f2:26:77:
31:06:7b:32:56:c8:b9:eb:c0:d2:a6:b3:ca:fe:45:15:73:79:
1a:9e:3d:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgCShQ4Hn47tbpsGoAn436SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjMwNTA5MjA1MzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2I5NjQyZjAxYTU3M2M1MjVjMTU2MDIyMzYzZTY0NmQzNDFhMGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/MmKnIsYBAUYUNbhEjJkKkm5AW4
j5CWqRxDe120WaDuddDo52wDJAt04m60y8FGmNnEetbdAhGIylgp35IvyLqgFwJw
3RHedx+vgcrQN4L27NYQ6aXMmocd9iv0AvJeJuSpJjqj5XRos4COKLsf3rVPFMMl
8r/4xqRN+3yjrV2fI0gHrr0rEQxhd0hw7DXShda5oRMFDjmzgBGD2pQqq5UPbOEd
r9nG4oAHM7NxzpZV0J7aZHjDoVH94n/vuO3diWu07Fy/7NH1Ekm1oJpYfSxrwqpW
kCs83MLbk4/3PMKQUi++aMLFddSmHr4gQ5GGpQoeCTQkmowetJC5jF878QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNy5ZC8BpXPFJcFWAiNj5kbTQaDQMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvM0xsa0x3R2xjOFVsd1ZZQ0kyUG1SdE5Cb05BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXoNnMA0G
CSqGSIb3DQEBCwUAA4IBAQB3VyozvFxymYqwy+gz6zKCDLLNAypMdgDCblfTnMP0
uWzKKEUTN/DeYrM3NbDibhnhgbdFbwM/RblQlG82YsRS+PKcqv+ZYEiHmWgS1mbq
7SzmVRvP7D15xfo/BSjkjztr6dSSTEG775+dO/ibNUSQZhTsSTpQSv6kXoQMysEl
kT2Iu72tGR9lo8FuKND8V3aC0TDLv5NgPBs8J/sO/5+4fw3ghlx7ZxknAWNR7a5p
5aZ/rlIVS/Ayz0s3JUe5oplzSA0Cl+TEyZj4pC4AG4IKKfxoU0v3Bykp3q59H3QQ
sDN5bzTW4XjyJncxBnsyVsi568DSprPK/kUVc3kanj3e
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:38 2025 by rpki-client