Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Lpli3kAj25bb_xZB9zuGIl_Ga0U.roa
File: Lpli3kAj25bb_xZB9zuGIl_Ga0U.roa (raw, json)
Hash identifier: Owi2xVLVrSiJiFC4P2tj1RPAYTL7fNDtMY5F7tNvt3k=
Subject key identifier: 2E:99:62:DE:40:23:DB:96:DB:FF:16:41:F7:3B:86:22:5F:C6:6B:45
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA48C10785382C8376C21C9C09E718
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Lpli3kAj25bb_xZB9zuGIl_Ga0U.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 93.127.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:48:c1:07:85:38:2c:83:76:c2:1c:9c:09:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e9962de4023db96dbff1641f73b86225fc66b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:6a:7c:3a:a9:ef:7d:68:13:c3:a9:87:b3:
f7:39:c4:32:92:23:99:3a:2d:7e:d5:73:90:41:d2:
ce:54:2c:87:9e:df:a9:ef:07:7e:e4:b4:7c:60:e5:
b1:8e:3e:75:4e:35:22:ad:ea:83:2f:64:9e:bd:a9:
cb:aa:ae:4d:da:e6:d0:70:52:10:ce:7f:f7:f5:cc:
d0:2e:97:3b:2d:f2:15:04:58:95:88:e2:3c:48:de:
48:ac:15:ca:d8:ed:18:59:54:61:ea:d9:b7:c6:3b:
41:5e:d7:4a:7d:f1:0b:66:d6:3b:8a:41:59:db:e7:
b9:92:0e:85:5a:5d:d4:cf:a2:20:78:24:4e:05:71:
16:a0:23:c6:1b:ff:c3:f4:bb:5a:93:82:1a:9e:34:
b6:df:67:df:29:ba:b9:53:09:f9:3b:71:f5:32:29:
71:30:22:4b:6c:ba:28:8c:73:19:01:c9:3b:72:51:
4a:58:d0:ac:ff:a4:37:f3:b4:b9:c5:ea:ed:5c:e8:
5c:6f:a0:06:2b:c1:34:dc:0f:76:34:3d:28:be:0b:
ac:3b:9e:32:be:c4:86:b5:30:70:7c:aa:8e:1f:fa:
8a:2e:d0:2c:81:a4:b0:bc:5f:ee:9f:98:85:10:7a:
2f:65:0f:ea:07:29:29:ef:20:2c:62:57:60:2f:e9:
08:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:99:62:DE:40:23:DB:96:DB:FF:16:41:F7:3B:86:22:5F:C6:6B:45
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Lpli3kAj25bb_xZB9zuGIl_Ga0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.160.0/24
Signature Algorithm: sha256WithRSAEncryption
94:19:c1:16:fb:69:33:ef:d2:6e:d4:b6:84:5a:05:1d:da:6e:
1d:e5:48:54:32:4d:ef:fe:89:40:4d:ba:65:a4:b7:77:51:75:
1b:bb:47:24:1b:8b:f7:d9:21:73:38:91:76:53:52:b4:6b:04:
a8:4e:c9:3e:cf:d2:69:f9:95:23:21:91:8b:45:9b:43:bb:65:
75:4f:a9:43:c1:1a:b8:af:b5:7a:50:64:9a:1c:ef:d6:6a:2f:
f2:6e:ed:52:e8:40:22:1c:5a:a9:d3:48:3a:5d:13:eb:3e:54:
3e:0b:16:f9:61:f1:eb:3f:12:9c:99:cf:98:51:dd:e4:3a:cf:
0f:6e:05:84:3c:11:c5:44:2c:90:ef:91:b2:27:79:12:e8:3b:
cf:f3:d9:88:09:76:40:75:a6:80:36:03:82:e5:2e:62:5f:01:
dd:c9:5b:08:30:61:3b:3b:0e:13:77:2d:aa:f5:23:d2:64:be:
5e:f0:c1:f5:94:18:e6:c7:43:19:b6:b3:6e:70:18:b2:41:2d:
dc:6c:6e:4a:ec:c4:07:e8:87:23:f8:e9:45:81:b1:fe:f4:bc:
a2:3e:e6:f0:fc:15:e3:02:70:b4:a6:6c:cc:a6:35:29:30:2e:
d3:1b:c0:1f:33:84:8d:36:4b:85:fa:42:e5:4a:b7:37:62:bc:
d0:37:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:24 2025 by rpki-client