Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/kwXk5lchLSQusIqWIc1_LElpPmw.roa
File: kwXk5lchLSQusIqWIc1_LElpPmw.roa (raw, json)
Hash identifier: ruCSMnKApmMujFMc/KrEw7+q84O8Se1YB2oZOAhAAA0=
Subject key identifier: 93:05:E4:E6:57:21:2D:24:2E:B0:8A:96:21:CD:7F:2C:49:69:3E:6C
Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial: 019473AAEBDF5F58168932450ACB0DE6C11B
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/kwXk5lchLSQusIqWIc1_LElpPmw.roa
Signing time: Fri 17 Jan 2025 09:49:28 +0000
ROA not before: Fri 17 Jan 2025 09:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 131.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:aa:eb:df:5f:58:16:89:32:45:0a:cb:0d:e6:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
Validity
Not Before: Jan 17 09:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9305e4e657212d242eb08a9621cd7f2c49693e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:92:5c:0a:99:44:e6:fa:31:07:49:0c:71:
de:e2:63:71:28:78:7b:1a:34:2f:b6:b7:c8:b5:c1:
d9:bf:7a:de:2f:1a:ac:d5:0b:8e:e8:9b:1d:e9:ff:
30:76:48:7a:fa:8f:03:07:8a:0f:2b:e1:2d:6d:58:
f0:73:fe:04:ed:ae:29:eb:3c:64:23:98:e4:98:ee:
6c:58:27:10:2a:f9:c9:b1:92:ab:f9:c8:0e:6c:fb:
17:79:f9:c3:89:69:7d:ed:9b:92:dc:65:28:db:9d:
a4:fa:fe:52:9d:2a:d9:cc:11:8d:02:ef:b3:c2:2e:
0c:73:f6:67:1a:c4:a2:82:d1:50:ae:9d:d2:7c:a5:
ea:3c:f4:f0:bc:95:e8:b6:3e:ab:58:0e:33:d4:d3:
3c:6d:be:a2:20:93:c1:63:ac:ad:c5:50:a3:3a:32:
67:37:1b:29:c3:03:f1:4e:51:c5:e8:0d:28:fb:bd:
47:a9:52:05:32:b8:eb:a8:0b:36:83:b4:88:dd:bc:
8e:a7:b0:74:44:5d:b5:60:eb:c7:1d:c5:36:e3:db:
e6:64:73:2d:d7:88:62:34:84:5c:8f:8a:44:61:b3:
73:c7:96:e3:12:7b:04:86:45:4b:75:2b:d0:04:a1:
25:99:8b:64:3a:34:92:8e:3d:7c:b7:9a:f6:1a:70:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:05:E4:E6:57:21:2D:24:2E:B0:8A:96:21:CD:7F:2C:49:69:3E:6C
X509v3 Authority Key Identifier:
keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/kwXk5lchLSQusIqWIc1_LElpPmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.174.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:38:70:ba:c0:fd:89:07:78:02:e9:4f:79:66:f6:c0:04:b4:
e1:a7:fd:f9:53:d7:50:6a:ec:f2:2f:c1:f9:05:58:94:bb:6b:
80:b8:88:e1:ff:a2:02:cd:65:14:02:eb:0b:8f:fa:2b:20:3c:
e0:7f:02:bf:58:32:65:80:92:e6:d9:7d:f3:2b:91:a9:9b:4c:
dd:d4:1e:f3:28:59:ba:c8:b2:00:a9:87:8b:75:5d:d4:3d:5b:
07:33:f0:9d:1e:9c:ed:84:a1:08:ef:2f:1f:65:fa:4b:0d:a9:
4b:65:1d:6a:b2:76:13:4c:e5:c8:d7:2c:f8:f4:4e:7d:27:72:
61:35:53:1a:f6:ff:08:4c:fa:0e:b7:2b:4f:9d:23:25:2c:12:
bd:ea:38:aa:9b:7e:15:da:e9:b1:c6:b1:96:0d:fd:bf:b0:cf:
38:7b:7e:f4:c2:02:5f:0c:86:bf:1a:90:e5:40:64:a1:08:28:
fe:70:72:d3:23:e7:65:7a:44:7e:7d:72:8e:e8:64:6d:4e:30:
b9:4c:f7:33:9b:aa:f6:ca:ff:01:cd:3a:83:d6:18:2c:a4:d3:
b0:ee:de:62:11:89:ed:fb:f1:0e:2a:cf:a9:8d:94:62:c8:af:
ba:12:a1:b6:ec:5d:7b:53:24:dd:3a:d1:dc:19:65:34:0a:ac:
cc:83:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:36:03 2025 by rpki-client