Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/_jlBiE7O0eaXuvKKOMYHsdQXqnY.roa
File: _jlBiE7O0eaXuvKKOMYHsdQXqnY.roa (raw, json)
Hash identifier: oWKKB2sRk4IOXOCQEBV2cawhfw8fQHgzKjTy0CJvom8=
Subject key identifier: FE:39:41:88:4E:CE:D1:E6:97:BA:F2:8A:38:C6:07:B1:D4:17:AA:76
Certificate issuer: /CN=a4c1bb101a814b9e2ee8264f81352a5bf2f2d025
Certificate serial: 018A5F0A58862EA8DB368EEA7DEDA2C7D47A
Authority key identifier: A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/_jlBiE7O0eaXuvKKOMYHsdQXqnY.roa
Signing time: Mon 04 Sep 2023 07:13:48 +0000
ROA not before: Mon 04 Sep 2023 07:13:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1942
IP address blocks: 129.88.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:0a:58:86:2e:a8:db:36:8e:ea:7d:ed:a2:c7:d4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c1bb101a814b9e2ee8264f81352a5bf2f2d025
Validity
Not Before: Sep 4 07:13:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe3941884eced1e697baf28a38c607b1d417aa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:46:c4:f7:5c:30:95:2b:70:87:83:5c:65:
c5:4b:7f:ad:eb:76:81:c2:1e:7f:f6:8d:57:ed:95:
6c:67:45:70:d7:f7:9f:33:ed:37:d5:1d:dc:1e:46:
6e:9f:00:78:2e:b5:d9:a3:78:3e:42:5d:7a:f5:fe:
32:0a:1d:fa:21:7a:64:09:58:e2:e2:35:a5:01:94:
20:91:49:4b:f9:11:ad:b1:4d:b1:4d:d7:fb:c6:74:
b7:6e:59:e8:af:14:b1:1d:81:9d:90:71:17:71:78:
98:c0:d3:b4:a8:fa:cb:6a:30:53:04:76:d4:38:d2:
68:8e:ce:52:b3:7a:0f:dd:69:8b:10:bb:f5:e8:31:
10:f9:4d:43:2b:47:4f:77:2a:e8:48:82:30:93:9e:
91:a3:f3:35:32:e5:69:e5:76:9a:bf:0a:da:61:68:
ce:25:e4:da:c9:4f:d7:bc:79:78:dc:d3:2c:44:8f:
d9:f5:ad:37:31:f3:37:dd:d8:12:05:a4:9f:67:bc:
15:7d:0f:f9:92:b6:ed:f6:bb:67:26:1a:1e:6f:1f:
44:14:8b:75:80:00:67:e6:d4:69:cf:6c:19:13:9e:
4a:54:ea:ad:d1:63:6a:a4:f1:52:9f:ff:8f:5e:98:
5d:a1:dc:82:03:86:41:b8:ca:eb:12:a4:c9:5f:8e:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:39:41:88:4E:CE:D1:E6:97:BA:F2:8A:38:C6:07:B1:D4:17:AA:76
X509v3 Authority Key Identifier:
keyid:A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/_jlBiE7O0eaXuvKKOMYHsdQXqnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/pMG7EBqBS54u6CZPgTUqW_Ly0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:1f:bd:10:ec:cb:d7:31:ad:36:2c:9e:f2:e6:33:66:55:98:
55:bd:f8:26:5e:eb:7c:99:5c:4e:5e:da:7e:85:9a:47:4d:ce:
ae:d7:0b:bc:3b:3f:65:d8:73:02:8a:63:3e:e6:6b:cd:fc:c9:
29:f4:51:e0:fa:96:da:f0:ae:63:d1:ea:35:a4:66:c0:c2:f9:
66:0f:a1:02:39:91:86:fc:9d:53:65:5b:14:91:39:16:5b:3e:
72:0b:98:06:91:1e:d3:9c:aa:52:d2:f5:df:ab:fd:62:f3:fb:
1d:74:b8:87:36:6a:59:dc:ab:8e:2d:8c:d8:f6:43:84:29:be:
a6:fa:9f:a4:a5:82:a4:2d:bd:d8:1f:80:c5:a1:8b:a8:7f:3a:
c2:20:04:37:b0:2f:23:bf:95:93:1a:ec:ba:ea:d0:70:2d:1d:
27:0b:a5:f0:39:99:77:38:6f:57:0a:33:2c:bd:85:a5:49:f6:
51:a9:68:50:95:c8:a9:a0:84:e0:72:35:36:91:85:e0:da:9d:
7d:c6:d3:75:30:9b:83:42:1c:72:b6:6a:08:77:b2:b7:3d:2a:
cc:2f:70:b0:ad:ec:e5:74:9a:ee:df:d4:f3:f4:60:8f:05:42:
8e:ff:f1:2d:8d:6d:97:99:bd:e0:90:40:d6:32:cb:ab:bc:35:
32:05:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:26:49 2025 by rpki-client