Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/LWliqhN0QNI3b_5LxBc5Md-_W6E.roa
File: LWliqhN0QNI3b_5LxBc5Md-_W6E.roa (raw, json)
Hash identifier: Kl3YYXUzfRK1hMikcauShr4LiePi/Ylo8Ofv5BgcJhw=
Subject key identifier: 2D:69:62:AA:13:74:40:D2:37:6F:FE:4B:C4:17:39:31:DF:BF:5B:A1
Certificate issuer: /CN=a16f2a8162a75524ff52783f8132c33007da4d98
Certificate serial: 01919E449401EE3716A3F18AC3E0AE5D1D20
Authority key identifier: A1:6F:2A:81:62:A7:55:24:FF:52:78:3F:81:32:C3:30:07:DA:4D:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oW8qgWKnVST_Ung_gTLDMAfaTZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/LWliqhN0QNI3b_5LxBc5Md-_W6E.roa
Signing time: Thu 29 Aug 2024 13:13:00 +0000
ROA not before: Thu 29 Aug 2024 13:13:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5482
IP address blocks: 193.17.86.0/23 maxlen: 24
193.17.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:44:94:01:ee:37:16:a3:f1:8a:c3:e0:ae:5d:1d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16f2a8162a75524ff52783f8132c33007da4d98
Validity
Not Before: Aug 29 13:13:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d6962aa137440d2376ffe4bc4173931dfbf5ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:8a:06:41:b2:b2:61:ed:3e:30:ac:28:93:
ff:70:8c:aa:70:78:e9:08:e4:69:ea:eb:b5:b6:3d:
85:cf:78:d3:da:5e:0b:b9:2e:6f:8f:32:f3:f7:a1:
a0:ae:93:8a:25:ea:3c:bb:92:b1:b5:7b:90:34:0a:
1a:98:eb:94:a5:e5:71:4e:13:34:58:aa:fb:52:f2:
29:da:bf:21:bb:69:3b:ab:09:9b:e7:c6:ee:dd:e6:
f8:bc:36:de:1e:d7:4a:a3:45:7e:88:f7:83:9e:60:
70:fc:d8:33:d6:3c:f0:a7:99:22:3e:b9:7d:ef:22:
52:39:fb:b7:7c:a4:06:e2:59:7a:0a:53:42:cc:40:
31:1d:50:75:01:56:76:a5:f7:3a:28:b0:9c:e0:41:
81:17:66:4b:d1:92:8c:29:33:d4:f7:31:c6:87:d4:
b2:8d:7c:8f:8a:23:0d:29:de:ef:4e:28:a0:35:e8:
06:54:03:1a:20:45:03:ae:b4:ff:6b:13:5c:7e:fb:
03:e4:da:4e:80:83:8b:8a:48:8e:43:ab:43:75:aa:
b3:7c:5d:b4:11:80:6e:d4:26:5a:03:aa:9b:c2:94:
d2:4b:04:9b:df:04:ae:69:17:68:58:e3:4a:77:21:
cc:c7:26:dd:99:54:5f:e7:2f:b6:10:f8:12:f0:0e:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:69:62:AA:13:74:40:D2:37:6F:FE:4B:C4:17:39:31:DF:BF:5B:A1
X509v3 Authority Key Identifier:
keyid:A1:6F:2A:81:62:A7:55:24:FF:52:78:3F:81:32:C3:30:07:DA:4D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oW8qgWKnVST_Ung_gTLDMAfaTZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/LWliqhN0QNI3b_5LxBc5Md-_W6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/oW8qgWKnVST_Ung_gTLDMAfaTZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.86.0/23
193.17.176.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:da:b5:a8:f7:24:a3:b7:3b:09:bb:a2:64:19:48:78:86:d6:
f4:3f:31:15:b7:7a:cc:5d:7c:fd:c0:4d:70:b4:54:a0:0c:d3:
86:f7:91:24:e1:4d:1c:c9:13:09:0a:b3:94:d6:89:b2:98:64:
44:e7:70:85:ed:b5:27:19:cf:25:bc:1a:d8:7e:36:8e:aa:d0:
f9:28:df:50:d1:b7:3d:a4:78:35:b7:b6:c2:75:51:df:32:98:
77:66:d4:8f:fa:e8:87:d7:38:05:5b:a2:ee:68:2d:e4:14:26:
db:bc:93:2a:bd:1e:14:b4:b5:e8:80:24:6b:46:64:b6:35:ba:
96:f9:69:cd:b4:9d:b3:49:fc:d2:b4:f7:1c:8d:98:df:0d:80:
c4:fc:47:6e:8d:b3:d8:de:85:28:d0:81:69:e4:e6:61:d7:27:
e7:15:8c:97:02:34:3d:3a:07:66:2a:5c:a0:79:81:f4:44:67:
80:55:73:45:af:09:b5:67:22:2e:cb:1f:0b:5e:9c:f1:b0:e3:
27:e2:c7:62:ff:34:c8:ea:a9:e2:48:55:7b:fc:c3:36:f2:a6:
3b:77:f6:cf:c3:72:a4:70:20:bb:9a:c7:ac:6c:62:ce:a7:f0:
c7:65:9b:6a:00:f6:6e:61:88:6f:70:7b:65:dc:2e:65:3e:62:
4c:c4:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:23 2025 by rpki-client