Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/KmGlwP7CjIaywccOkX2DOwKl0TQ.roa
File: KmGlwP7CjIaywccOkX2DOwKl0TQ.roa (raw, json)
Hash identifier: sUOuCVVmxheCpfNzBgnrrUGNWsQqJtbWGWiV/9xLfds=
Subject key identifier: 2A:61:A5:C0:FE:C2:8C:86:B2:C1:C7:0E:91:7D:83:3B:02:A5:D1:34
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 01942067D4DD60FF7BF671F462D33C28F824
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/KmGlwP7CjIaywccOkX2DOwKl0TQ.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 155.231.110.0/24 maxlen: 24
155.231.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d4:dd:60:ff:7b:f6:71:f4:62:d3:3c:28:f8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a61a5c0fec28c86b2c1c70e917d833b02a5d134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:fa:a9:4e:2b:ce:81:c5:f1:31:3b:0a:b9:
cd:07:fc:de:94:42:77:b7:6b:42:ff:9d:64:5b:ff:
3e:ea:c5:c4:4b:c5:2b:ff:7f:db:37:e9:b5:6d:66:
14:3f:bc:15:53:7b:3a:9b:f3:80:e3:82:b2:d0:49:
97:4e:9a:f9:cd:ad:af:ca:51:2a:25:60:ee:d3:06:
e5:e5:a4:16:2e:2c:5f:80:a4:fd:d5:62:13:0a:34:
75:c2:a6:75:7b:b3:51:bc:7f:c2:b1:ce:9d:28:62:
57:d5:ce:7d:6b:39:0c:7c:40:84:95:94:05:81:da:
a0:8d:ab:3f:78:d8:47:d1:e6:52:bc:41:55:5d:91:
c7:7e:eb:40:ad:47:31:08:c3:43:12:55:03:48:29:
2b:5c:c2:6e:2d:b2:bc:ac:c7:0d:b9:82:62:40:12:
fe:0a:a0:7a:8c:03:6d:a0:b8:40:89:fe:11:1c:cf:
23:5e:33:7b:33:15:35:6b:7d:4a:97:69:c1:16:25:
96:ce:39:b3:c3:fc:9b:47:7e:38:d6:e2:1a:08:d7:
17:1f:ca:5b:4e:c7:c4:65:15:0d:80:d9:89:4f:73:
f8:47:b9:6e:12:d6:2f:9d:9f:5f:0f:ae:50:48:f2:
35:05:db:11:58:46:e2:0a:4c:5d:8d:f3:c1:02:3b:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:61:A5:C0:FE:C2:8C:86:B2:C1:C7:0E:91:7D:83:3B:02:A5:D1:34
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/KmGlwP7CjIaywccOkX2DOwKl0TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.231.110.0/23
Signature Algorithm: sha256WithRSAEncryption
13:f1:b8:ac:1e:5e:a0:60:85:0b:0e:24:fb:5b:48:91:61:4a:
e9:d8:0b:dd:ec:01:4b:23:64:47:06:bb:ae:c5:4d:62:62:e5:
92:a0:d1:6b:1b:1b:4b:ea:96:07:13:3a:f2:7b:e9:2f:b7:bd:
0c:3d:cb:6e:82:3e:15:16:89:2c:d5:df:80:f9:c6:66:b1:d9:
7c:d3:e8:d5:63:ec:2e:be:9b:3d:d0:26:99:c9:09:19:f5:86:
ea:98:51:ff:a7:ed:4b:90:7c:ef:2e:92:00:a2:cc:0a:fd:8b:
72:ad:32:7a:53:c9:16:f1:8c:76:3d:ff:72:ea:4f:85:15:22:
52:43:2d:c8:73:35:f3:2e:8b:40:dd:57:69:7d:c7:f0:11:f2:
33:a8:4b:56:f6:32:d3:4f:4e:bc:66:ce:96:8c:ef:fe:b9:ea:
2a:0b:3e:cd:5d:ba:09:1a:93:83:3c:ce:4d:e4:f2:c8:3d:91:
c8:35:e4:23:f1:a5:05:89:d9:62:d2:88:33:97:51:be:58:c7:
2f:6b:e0:ac:e1:5b:49:98:84:33:8b:fc:f7:4b:83:0f:c7:e0:
ad:23:7a:96:20:b1:1f:ce:c3:4d:83:89:b9:a4:27:f2:7b:9f:
53:68:7a:ca:bd:73:41:31:cf:75:ae:7a:08:84:a2:ba:c7:00:
dc:e7:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:41 2025 by rpki-client