Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ibLzU6WOFgguTWaNZhfqPFD3yJo.roa
File: ibLzU6WOFgguTWaNZhfqPFD3yJo.roa (raw, json)
Hash identifier: GRnTI0UguvurZg0lBoyoqJCyaRrTY4Zz0Fz1Sh8Z0A8=
Subject key identifier: 89:B2:F3:53:A5:8E:16:08:2E:4D:66:8D:66:17:EA:3C:50:F7:C8:9A
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 0194F00709AA9B589499DEA4C88FC3DA6E2E
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ibLzU6WOFgguTWaNZhfqPFD3yJo.roa
Signing time: Mon 10 Feb 2025 13:23:00 +0000
ROA not before: Mon 10 Feb 2025 13:23:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 114.69.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:07:09:aa:9b:58:94:99:de:a4:c8:8f:c3:da:6e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Feb 10 13:23:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89b2f353a58e16082e4d668d6617ea3c50f7c89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:99:7c:94:ab:d0:ea:1f:f4:f4:f6:78:9c:
d6:8d:6e:f8:a7:70:cc:8a:23:d1:fb:79:a5:6c:8a:
94:43:9f:fe:4f:f5:40:d0:9b:ff:d2:0c:c9:8b:4d:
20:9c:5c:95:c9:eb:75:82:d5:20:51:5c:82:5e:6a:
16:3a:8f:f7:bd:1f:08:a7:22:e3:23:da:f4:c0:23:
ea:8f:47:f3:87:9c:9e:36:ba:39:f0:10:7c:15:57:
16:63:31:2a:22:cc:a9:a9:b2:e9:39:5f:2a:0f:20:
45:90:ce:45:f3:66:1f:8e:29:0b:15:48:d4:18:cd:
81:37:5b:de:d7:bd:a2:51:ad:8d:87:73:33:a4:8b:
eb:96:54:09:b1:12:1a:d7:e4:46:1d:27:ac:47:e0:
9e:b5:78:61:72:89:83:24:6d:dc:5d:b7:d4:c9:25:
70:40:bc:dc:95:9c:87:7e:56:ce:8a:aa:05:41:ae:
f1:a9:94:9b:03:4e:a4:11:6f:c5:69:2e:71:ca:de:
61:39:0d:dd:e4:b2:9b:70:55:d2:d0:a0:8e:fe:6d:
95:82:7c:ce:26:49:2f:25:eb:f9:8b:22:da:cc:1e:
ba:01:e3:ff:d6:1e:32:85:f4:b3:f8:ea:e3:bc:4a:
dd:d1:2a:25:a8:4e:9b:a1:82:2b:27:a1:4c:43:b0:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:F3:53:A5:8E:16:08:2E:4D:66:8D:66:17:EA:3C:50:F7:C8:9A
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ibLzU6WOFgguTWaNZhfqPFD3yJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.69.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:11:1a:6b:d8:30:93:c5:a2:a5:cf:19:9f:bc:58:15:5b:ae:
fd:18:12:8f:c3:a4:b6:6e:04:bf:19:1c:44:d3:ae:38:46:8f:
7c:a0:b6:c1:97:c3:fb:7b:bf:8f:a0:c8:0d:d3:a9:97:a1:15:
c5:6d:41:d9:59:08:9e:5c:61:02:9f:6f:d0:a0:e9:3d:3f:f9:
3d:e8:93:3e:38:fd:c5:c8:2c:53:b4:5d:89:44:07:91:dc:6b:
5c:20:8c:8c:59:c7:0b:ae:09:c1:a0:c6:5b:1f:5e:98:6b:ba:
a9:32:3e:11:45:8c:7b:42:e2:a5:f5:ba:59:57:58:45:ec:b6:
2e:9e:02:14:d8:ca:bc:03:5b:12:e6:f2:8b:38:09:a1:94:4c:
0c:4b:22:53:b0:6c:a6:4e:43:32:cd:67:8b:71:05:8a:e5:79:
f7:32:31:8b:60:b9:59:36:e6:6a:8e:3e:9c:93:5e:1a:3c:d2:
2b:95:8a:63:9f:be:ac:5b:cd:75:c7:01:14:5f:23:2b:46:25:
19:cc:c7:a9:38:d8:a4:13:4e:6d:70:9e:ea:5b:6c:5a:65:8f:
da:cc:70:c1:cf:9d:e6:ee:fa:ae:f1:cd:06:b9:77:b6:d6:c8:
92:f5:1b:c4:63:06:9a:b9:8b:29:57:d5:85:d6:c6:33:95:b1:
34:f0:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:32 2025 by rpki-client