Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/2iT_kM3PkUEf8NeJ29enDVY5XmM.roa
File: 2iT_kM3PkUEf8NeJ29enDVY5XmM.roa (raw, json)
Hash identifier: Dzh4bklpE4pirUMSN3Hq/Ic2ypp5OVgKHU7vTB3ErEs=
Subject key identifier: DA:24:FF:90:CD:CF:91:41:1F:F0:D7:89:DB:D7:A7:0D:56:39:5E:63
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 01942748412115C244710B6DBDE0313876AF
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/2iT_kM3PkUEf8NeJ29enDVY5XmM.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1741
IP address blocks: 130.234.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:41:21:15:c2:44:71:0b:6d:bd:e0:31:38:76:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da24ff90cdcf91411ff0d789dbd7a70d56395e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:72:43:45:2b:db:8f:91:0b:2b:d6:bf:1f:
b6:94:06:13:c6:bb:2e:d9:e2:de:6a:af:63:6c:66:
f6:08:75:51:02:85:85:ad:4f:3d:59:ac:f1:22:00:
85:44:5d:bf:59:a4:d8:be:bb:15:f4:f9:3f:0e:72:
4a:50:3f:8e:d8:fd:e6:58:51:f7:d9:86:2d:f0:93:
88:a9:86:ce:a4:62:19:27:6b:58:9b:70:ed:22:cb:
b5:b6:21:56:a1:80:4f:4a:db:26:e5:6a:f2:66:4a:
d9:f0:c5:a2:40:b6:c1:44:5c:f1:06:08:9e:9b:ae:
cc:f1:da:69:7a:26:48:67:67:3b:db:77:2b:42:29:
a8:b4:5c:8f:61:64:3a:b5:16:79:ea:6a:d4:b3:12:
c5:fe:3c:c1:11:47:ee:1d:17:56:a0:b8:8e:3c:ed:
92:fa:6d:8f:b4:69:c8:0d:9b:51:96:08:f6:32:ad:
7c:6e:5e:e4:85:43:dc:16:1d:e9:08:cc:ed:4a:15:
1b:01:60:be:c5:1b:b0:f8:db:af:0b:45:d4:99:52:
e6:87:72:d0:23:f1:13:08:01:5d:c2:d2:df:97:3e:
bd:0e:88:a4:48:26:d2:3a:ae:a3:99:93:a8:a2:c3:
73:9b:a9:60:d9:aa:0b:10:15:3b:5a:71:11:e6:6d:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:24:FF:90:CD:CF:91:41:1F:F0:D7:89:DB:D7:A7:0D:56:39:5E:63
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/2iT_kM3PkUEf8NeJ29enDVY5XmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:01:65:04:a6:f2:bf:73:33:75:78:3c:b0:0c:f8:80:11:82:
3b:15:9c:dc:d9:5b:7d:f6:1f:5c:2e:a2:bb:6c:76:bc:15:c7:
1f:b3:ef:55:c8:f0:c3:76:2a:2e:2e:ea:0d:00:cd:69:2c:d6:
33:e5:1e:37:70:8b:05:c9:46:20:d6:17:c0:1c:3b:75:f3:d7:
71:a7:f6:a4:44:2d:73:0c:1e:67:ce:29:ea:ce:6a:1b:8f:1b:
42:74:9c:4b:55:e1:48:02:da:7d:0c:75:43:b6:1e:84:22:cf:
6e:86:37:f4:4e:f1:b7:1f:5c:1f:46:4a:c0:8b:4a:af:96:45:
c9:a5:f4:75:e2:3f:75:46:67:64:f7:ca:8f:35:f6:32:3d:7b:
d1:08:2c:9b:fc:ac:65:5a:85:fa:1e:06:34:97:cb:c4:d8:54:
6b:60:f4:ad:28:3b:c6:78:9a:eb:92:fa:a0:70:d2:8a:6e:ce:
d2:04:34:be:fe:7a:95:34:a9:f3:13:4b:df:bc:21:8d:a6:47:
67:70:77:79:12:87:ca:66:d8:2d:a4:8d:ef:f4:79:06:10:1c:
0a:18:6f:0c:ed:d1:b1:55:dc:c0:d0:1e:96:5b:c1:b4:b4:b7:
ca:d9:d5:b8:38:d5:0d:08:70:8b:f7:57:95:6a:24:97:32:40:
6e:8f:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:16 2025 by rpki-client