Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa
File: KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa (raw, json)
Hash identifier: Hj3l47kt2nIv7SDXU84uufeP/5O2LYhvonXGlVlGdWo=
Subject key identifier: 2A:FA:48:0C:97:94:43:73:E3:94:15:46:57:C5:B7:BD:7D:B2:26:B0
Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial: 019424B396407093B7A70100AF1A319BC0EE
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35280
IP address blocks: 132.68.0.0/16 maxlen: 16
132.69.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:96:40:70:93:b7:a7:01:00:af:1a:31:9b:c0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2afa480c97944373e394154657c5b7bd7db226b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:65:3f:bf:4a:91:7e:f5:d8:17:55:e5:ec:
1a:e3:30:41:e4:e6:91:0a:62:62:62:88:58:1d:02:
7c:36:6e:8e:37:f5:5f:15:2a:dd:c3:1c:7a:aa:50:
ad:c3:c6:84:5a:5e:b4:d4:3b:09:bb:91:0d:1d:84:
fa:b4:86:f7:37:0a:ff:b3:e3:2a:50:85:90:f9:0d:
ab:e3:f4:37:c6:97:6e:c5:29:48:21:99:31:69:be:
3f:aa:7b:e9:43:3b:58:03:9d:4d:54:4d:5c:de:ff:
0a:44:fa:ad:ad:a4:4e:f5:de:ac:29:91:b7:18:d3:
f8:df:5e:ea:92:76:ba:e4:41:ad:53:66:6c:1b:5c:
6c:07:4f:61:60:f1:be:81:57:d0:12:a9:69:72:8e:
d1:16:fb:bd:72:3a:e9:01:d4:4c:44:d4:8e:0f:75:
a5:8b:50:e2:61:9f:38:ed:75:0b:50:6b:05:f3:34:
ba:1d:5c:ee:63:02:25:8b:a0:6e:78:a8:60:e1:ee:
06:1a:75:2d:62:22:b4:11:ee:d4:e7:ba:1e:d5:6e:
66:4d:57:ef:04:d9:0b:75:f4:06:f9:80:eb:19:4f:
0c:49:3e:25:eb:69:1b:65:60:23:91:40:5c:2d:af:
0e:56:90:08:d0:50:2b:1f:3f:bb:8b:d8:92:a2:ee:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FA:48:0C:97:94:43:73:E3:94:15:46:57:C5:B7:BD:7D:B2:26:B0
X509v3 Authority Key Identifier:
keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.68.0.0/15
Signature Algorithm: sha256WithRSAEncryption
39:c6:5c:b7:5e:0a:6d:31:36:76:26:40:f2:ff:1c:6d:d5:96:
26:1d:fc:42:7d:a0:82:ad:ce:ac:7f:8a:9f:a5:31:a9:21:47:
12:e7:5f:a6:fd:7c:f8:18:0e:fd:f1:0d:0a:67:0b:38:7f:f0:
87:40:df:96:3e:81:8c:b4:20:bf:f4:a3:26:33:24:be:7f:75:
76:ec:45:9b:ad:b9:78:c6:3c:76:5e:48:3b:44:48:cc:a7:80:
1c:77:c2:74:05:ce:3e:76:9e:01:bc:d5:17:76:b1:a2:1f:8d:
d1:ad:6c:f1:b9:bb:0b:bd:78:b1:63:97:1e:f9:22:e6:69:70:
cd:79:db:0a:8f:a4:26:a6:42:2c:d3:99:2a:9d:a0:37:11:f0:
65:cd:9f:43:95:6d:db:75:58:ca:76:ec:4e:fc:bb:1b:f4:1b:
08:d0:57:f7:02:52:a5:b8:7c:f3:af:42:62:c1:45:95:b8:90:
4e:75:d5:d8:72:77:7d:5d:e8:81:32:37:b0:4e:22:fc:78:d2:
4b:3b:a2:0b:10:24:13:a6:3a:7b:ec:20:5c:5a:3e:85:34:ca:
ae:fa:ae:03:f1:3a:fa:a1:3c:65:82:eb:c3:e5:a2:df:d7:af:
9c:c5:56:19:15:8a:3d:93:17:c6:5d:9c:87:94:98:c3:54:32:
d7:5e:68:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:52 2025 by rpki-client