Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/0x1lqWA0KZOHOORQhJDoeRssVQ0.roa
File: 0x1lqWA0KZOHOORQhJDoeRssVQ0.roa (raw, json)
Hash identifier: 7p6FxiYzO+LvJNJvXWwPz8wlUJ/sKTNUZeXhx0HXHCY=
Subject key identifier: D3:1D:65:A9:60:34:29:93:87:38:E4:50:84:90:E8:79:1B:2C:55:0D
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 01941FFA11FE13044770CC817430DE8635B4
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/0x1lqWA0KZOHOORQhJDoeRssVQ0.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.243.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:11:fe:13:04:47:70:cc:81:74:30:de:86:35:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d31d65a9603429938738e4508490e8791b2c550d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:40:0e:49:b0:35:93:18:c2:50:87:5f:e3:
b0:ff:d9:0c:f0:b4:73:c8:df:a7:1f:bf:53:06:93:
d2:0b:ed:15:33:7b:90:d4:33:f8:6d:a3:44:86:e5:
95:3e:45:c6:1a:12:e7:5e:41:5c:a4:ea:97:28:f1:
6b:44:e0:14:6e:30:c5:29:85:2e:19:57:e0:e4:aa:
83:71:6c:c1:a5:cf:1f:2d:6e:26:5f:a3:47:09:d7:
b8:a1:2f:d7:69:a8:35:d3:90:4f:f0:ca:ba:94:d6:
26:88:dd:c8:d0:db:8a:a3:4f:61:54:46:b0:0c:5e:
a4:0f:74:60:fa:94:c4:de:d7:60:f9:a7:be:aa:36:
08:eb:f6:4e:36:b3:f3:22:ca:37:13:32:bd:12:10:
86:f3:70:21:5a:8c:49:83:f2:f7:85:1e:bd:1e:7d:
75:e2:e3:2e:49:e9:1f:49:1f:0f:af:4c:16:11:fa:
82:35:1a:73:dc:1a:2b:b9:4e:25:18:15:40:67:b7:
e6:74:5f:2d:f7:d5:a0:c0:ef:bc:69:bd:1b:17:0a:
19:a5:b0:29:09:68:09:dc:66:cb:86:34:0e:c0:d9:
29:c6:67:b7:d9:41:92:c0:2a:29:cb:c5:f2:b3:bf:
bd:11:8d:c2:73:6a:7f:bc:b7:08:ba:96:31:db:9d:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1D:65:A9:60:34:29:93:87:38:E4:50:84:90:E8:79:1B:2C:55:0D
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/0x1lqWA0KZOHOORQhJDoeRssVQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:85:bf:45:04:a7:59:af:5e:f4:c4:86:3f:8f:5e:7d:04:fc:
b1:34:cd:ff:49:4a:ec:fd:47:ff:7d:86:db:48:11:e3:43:c0:
b7:49:af:4f:ae:b5:b9:f1:34:1c:0b:0c:76:f3:a9:e3:e2:bd:
d9:16:4b:d5:ed:3b:0f:2a:13:c3:30:2e:d4:4e:2c:b2:74:e6:
7e:c4:27:08:81:20:42:56:06:be:eb:f5:c7:46:a2:4f:5e:8b:
99:0c:d3:df:07:21:42:3c:c8:36:40:98:65:91:64:c8:2c:54:
76:09:8d:cb:f5:b6:8b:b5:5b:c3:e6:16:29:b2:7f:ec:b1:16:
20:15:9c:55:66:28:9a:eb:1c:86:00:a0:30:bb:ae:1a:68:48:
81:39:90:e3:2a:7a:94:fe:47:d9:07:e3:c4:05:54:16:8d:e4:
d6:eb:d4:d3:f3:14:a8:01:22:ee:66:e9:26:d2:98:8e:92:9b:
68:e8:d8:81:14:07:a4:e2:65:cf:0a:34:d9:c2:ba:42:a4:5c:
d1:d2:71:9d:ad:7d:79:00:0a:fa:e9:75:d7:e1:09:f6:b4:f2:
5e:44:14:3d:97:54:7e:ec:a0:5e:ba:cc:11:73:bd:15:2b:39:
43:d9:c3:4f:9c:b2:b1:26:2f:b5:17:44:23:e9:af:cc:bf:ef:
2f:23:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:35 2025 by rpki-client