Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/LWbif0B1GjIE18I7vwELt-c9l-w.roa
File: LWbif0B1GjIE18I7vwELt-c9l-w.roa (raw, json)
Hash identifier: d8IrvYkKiZyuhb8k6fQb7RXqEUdNoQvoKy7SfXCWzdQ=
Subject key identifier: 2D:66:E2:7F:40:75:1A:32:04:D7:C2:3B:BF:01:0B:B7:E7:3D:97:EC
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 01958EED959CE70334F8733C7347AF3591E9
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/LWbif0B1GjIE18I7vwELt-c9l-w.roa
Signing time: Thu 13 Mar 2025 09:54:49 +0000
ROA not before: Thu 13 Mar 2025 09:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.243.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:ed:95:9c:e7:03:34:f8:73:3c:73:47:af:35:91:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Mar 13 09:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d66e27f40751a3204d7c23bbf010bb7e73d97ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:0f:78:7c:9c:e7:26:94:f1:03:b7:6f:3f:
5a:ec:19:90:28:68:62:6f:e3:37:e0:ae:13:f6:91:
13:2d:af:4e:e9:c7:2a:cd:e3:25:e5:5d:07:9d:87:
86:d6:de:39:d4:a7:81:38:08:36:b2:58:cd:d6:9f:
46:38:59:e6:00:a0:c1:11:ae:74:ac:8c:26:e6:5a:
04:eb:7f:27:e4:9d:ac:72:58:65:83:9b:f2:c1:7d:
e0:94:64:67:aa:02:88:d8:fb:4f:ce:0c:84:a9:c7:
82:a4:88:87:5a:cf:6c:da:66:d3:c2:86:06:ec:c9:
31:be:0d:b9:6b:36:25:2f:18:a7:9a:e1:af:c5:ca:
81:10:7b:59:87:bd:73:8b:1f:e7:75:8a:fb:e4:c1:
fe:69:b6:b0:26:39:da:7b:b9:f1:39:11:62:f2:d9:
05:4c:ce:20:ea:f5:21:d9:f8:21:7f:e1:a2:cc:c8:
81:f8:80:a5:9f:59:d0:b5:87:d2:4f:04:85:88:40:
a3:c1:26:9a:67:e2:29:97:f8:e8:de:47:6c:f5:28:
7f:e0:60:d6:59:56:ee:49:0c:22:d6:15:dc:21:f1:
f9:fc:b4:9b:b2:71:47:7d:b7:49:4e:8e:16:d9:58:
69:95:b9:a9:03:89:e3:57:1d:82:41:81:eb:ac:ec:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:66:E2:7F:40:75:1A:32:04:D7:C2:3B:BF:01:0B:B7:E7:3D:97:EC
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/LWbif0B1GjIE18I7vwELt-c9l-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.154.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:20:bc:b0:ae:91:d0:f8:6f:59:0d:2e:cb:ac:04:6f:24:ba:
49:64:8b:ed:03:15:09:57:fc:60:26:c4:5b:10:c3:20:18:dd:
99:a7:c2:dd:f4:74:7f:20:5f:36:49:af:ae:10:12:12:ff:40:
67:3d:fb:b6:5e:f9:e2:e1:6e:5c:50:9b:56:2e:bc:b9:f7:e0:
a9:65:8d:2a:58:d3:ac:32:e8:73:f9:83:d9:d8:f2:c5:e6:21:
af:8f:9e:61:0c:d2:b3:48:ad:68:f2:24:18:97:16:f3:3b:76:
bc:55:4a:30:b2:2c:c2:25:e1:2e:dc:3e:69:3b:74:42:7b:11:
a7:6b:fb:e4:c0:5e:63:18:95:2b:51:fe:42:60:1c:8e:a8:6d:
cc:33:a3:4c:e8:af:b4:69:44:d1:b3:42:37:8b:95:50:66:24:
df:05:b2:28:8d:e5:ec:f2:b7:07:fd:31:dd:b2:93:0c:43:ed:
1f:40:28:31:f0:27:fb:fc:50:ae:f3:f3:9f:e9:0a:09:88:26:
63:1b:58:fd:82:ff:d3:b1:26:9f:7d:68:a2:90:7c:c3:b1:32:
ff:12:b8:0d:b4:0a:5a:da:5e:8c:9e:5d:fb:e9:83:af:d8:e5:
7c:f4:03:52:84:3a:b3:55:a8:71:ba:c4:33:b7:2c:bf:a5:ba:
d5:e7:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:59 2025 by rpki-client