Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/0JRoWQ-bKpnOguLXiXYB3jJdTu4.roa
File: 0JRoWQ-bKpnOguLXiXYB3jJdTu4.roa (raw, json)
Hash identifier: VzJsKHpUQpit3sPn+6kTTMxbJRpLiMINGWJUJX/UKbE=
Subject key identifier: D0:94:68:59:0F:9B:2A:99:CE:82:E2:D7:89:76:01:DE:32:5D:4E:EE
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0194228D214D4857009697F8C392BF988E8C
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/0JRoWQ-bKpnOguLXiXYB3jJdTu4.roa
Signing time: Wed 01 Jan 2025 15:47:41 +0000
ROA not before: Wed 01 Jan 2025 15:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47721
IP address blocks: 167.160.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:21:4d:48:57:00:96:97:f8:c3:92:bf:98:8e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jan 1 15:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d09468590f9b2a99ce82e2d7897601de325d4eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:97:85:96:37:64:fb:88:7f:3e:46:5c:fe:
96:1c:e0:52:50:ac:c4:8b:40:41:fb:9c:32:aa:4c:
2d:23:f4:93:b2:6b:d5:ed:35:5a:19:7a:01:e0:1f:
48:a2:ae:90:6d:fa:42:0c:a1:d1:ce:8a:4b:13:d9:
ee:90:76:52:6a:c7:80:11:17:b5:aa:27:6e:18:06:
5b:95:40:56:05:4e:40:4e:1b:7a:38:3a:eb:01:73:
c7:1b:53:88:d1:25:8e:14:28:5f:96:7c:86:49:25:
0f:6b:ec:a2:ed:a8:b1:82:d5:66:28:fe:24:35:42:
1c:dd:c5:6f:a6:aa:7a:3f:3a:25:c9:75:3d:15:2e:
59:5b:6e:69:c1:73:ac:72:b2:f7:7c:b6:a0:e5:d0:
a0:8e:3f:4b:84:b9:0d:49:84:9f:bd:15:81:fa:a9:
7e:18:11:af:d2:f8:a0:65:0f:e4:74:9f:2b:81:e2:
e8:50:7d:1f:b2:d8:10:7b:3f:0b:46:f9:23:92:22:
8d:5c:4e:c2:f7:ea:d9:fe:22:6f:b7:7f:9e:85:0a:
f2:92:06:eb:2a:bb:c8:b3:37:e3:d3:62:10:34:da:
27:87:8f:7c:09:11:a9:de:8a:69:86:84:57:1d:fe:
32:dd:a8:09:9f:2b:cf:08:c5:ad:24:3e:94:1d:34:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:94:68:59:0F:9B:2A:99:CE:82:E2:D7:89:76:01:DE:32:5D:4E:EE
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/0JRoWQ-bKpnOguLXiXYB3jJdTu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.10.0/24
Signature Algorithm: sha256WithRSAEncryption
76:32:fd:23:e2:fa:f3:4b:fc:cc:13:47:18:1e:63:47:27:45:
de:c1:77:08:05:fc:38:53:54:43:c2:f9:68:f1:d9:3e:90:2b:
ea:13:fd:21:45:17:2d:1d:64:6c:8e:f4:e5:57:9a:a8:79:0e:
03:7a:6e:0a:93:04:35:93:87:5a:99:92:d9:7f:31:f1:27:3b:
19:26:95:31:a3:44:f5:0c:20:7b:fd:b4:f7:86:92:8d:54:c2:
93:c8:70:eb:77:c9:b4:11:04:52:57:08:33:ab:ac:3e:e1:eb:
de:56:20:28:5f:b6:57:75:f7:c8:26:ef:da:5b:82:5c:9a:bd:
db:c6:dc:7b:dd:9b:f7:3c:67:6d:58:3d:9d:22:cc:27:a0:3c:
ec:37:1c:af:d4:8f:9e:41:59:b8:07:59:17:b2:3f:da:fe:a4:
39:66:c6:ef:5e:d7:ee:bc:0b:19:df:f9:00:86:14:a7:18:e0:
fe:13:ad:44:8a:36:1f:3d:08:bd:05:cb:6e:e2:c9:2b:0b:87:
57:1a:5e:4d:d1:16:2b:21:74:91:f0:22:5b:9e:22:99:2a:cc:
95:87:78:78:3d:e2:0e:58:52:bd:75:2b:38:d5:86:55:9c:c8:
32:1c:ce:51:03:bd:75:4d:3e:50:01:39:b6:02:6d:be:5e:ff:
70:63:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:37:13 2025 by rpki-client