Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/l3CxsRe6lXWBML9apstKtmGDLng.roa
File: l3CxsRe6lXWBML9apstKtmGDLng.roa (raw, json)
Hash identifier: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=
Subject key identifier: 97:70:B1:B1:17:BA:95:75:81:30:BF:5A:A6:CB:4A:B6:61:83:2E:78
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 019473BCE4A67C2F881BD393008F0D216F11
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/l3CxsRe6lXWBML9apstKtmGDLng.roa
Signing time: Fri 17 Jan 2025 10:09:06 +0000
ROA not before: Fri 17 Jan 2025 10:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 132.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:bc:e4:a6:7c:2f:88:1b:d3:93:00:8f:0d:21:6f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Jan 17 10:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9770b1b117ba95758130bf5aa6cb4ab661832e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:84:44:f0:8b:51:c2:55:3a:da:ef:17:1c:
22:80:a2:95:e0:d0:c8:4e:2a:c4:56:52:c6:5a:0f:
d8:c1:10:9a:70:21:7a:f0:6d:06:07:3a:e5:9a:e4:
d7:03:de:c0:50:08:02:ca:8d:2e:1b:fc:a5:68:68:
4a:be:72:3f:32:49:07:cf:20:17:ae:ff:dd:25:87:
f5:7d:79:7e:60:b7:c5:8f:dd:76:e3:e4:a4:58:aa:
25:df:34:e0:f7:d1:78:c2:38:03:58:74:43:83:83:
0c:31:30:36:79:8d:2f:5e:da:1b:8b:ad:c8:af:3f:
bf:2d:79:28:63:a2:72:3b:50:cf:65:56:12:43:81:
79:e4:7c:e3:13:3d:24:36:d0:ef:27:ad:f5:0f:ee:
a3:50:a6:36:96:72:c7:5d:3e:82:51:87:9b:c8:7b:
d6:e2:82:1d:3d:eb:39:c7:48:1d:13:30:07:68:e6:
c4:bb:b1:cb:c8:a8:aa:9d:86:87:50:c9:c4:09:1d:
ec:a3:99:e4:69:e9:a1:47:45:73:70:61:3e:ca:f5:
14:39:1c:87:1b:14:fe:08:37:b9:25:07:9e:20:1a:
d2:c5:d7:28:62:fb:7e:e7:4c:ce:34:e4:4b:9b:6c:
6c:cb:9a:aa:38:d1:3a:cd:d5:87:e2:ff:d9:5c:16:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:B1:B1:17:BA:95:75:81:30:BF:5A:A6:CB:4A:B6:61:83:2E:78
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/l3CxsRe6lXWBML9apstKtmGDLng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.229.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:4e:6a:62:ec:69:89:de:41:0f:af:7c:33:e6:c3:cc:2e:fc:
54:dc:97:e2:3c:14:1b:93:f1:49:09:60:2c:6b:fc:54:4c:fd:
f0:23:36:85:95:87:f6:0c:c4:7d:41:2a:25:aa:fe:b9:f4:0b:
8b:5e:e4:49:87:68:38:25:18:e5:3b:8f:ea:ec:18:ea:68:69:
d2:ee:04:01:c2:7a:e9:fb:db:12:30:91:b6:cc:d4:dd:d2:45:
85:59:f6:42:21:0d:de:eb:96:e4:49:69:d8:9c:d8:c8:7a:94:
90:af:b4:04:b6:bc:4b:ae:f2:68:27:fb:3f:a5:04:58:20:3f:
31:08:8e:60:00:df:f0:18:58:04:71:71:20:ae:7b:ed:59:2c:
b7:ac:3c:d7:f4:7b:27:ec:7b:2c:17:b0:84:95:55:88:53:50:
91:1c:9f:c5:cc:3f:9a:5d:54:5e:f5:59:f4:c2:bd:95:01:27:
c1:ba:8f:fe:03:17:61:52:19:6d:6e:39:e1:6e:e4:43:d7:19:
3e:7c:e4:59:80:04:64:09:9c:ed:75:b1:0d:94:88:ce:54:79:
8d:97:85:9b:b1:ff:59:7b:d3:36:7b:66:34:f4:ba:11:bb:32:
21:a1:9c:66:a9:7f:5c:cb:6b:b5:e8:24:9c:13:49:9a:37:73:
8b:cb:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:36 2025 by rpki-client