Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/LKntu7OdIVDRUeVXjemgx5JdRkc.roa
File: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (raw, json)
Hash identifier: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=
Subject key identifier: 2C:A9:ED:BB:B3:9D:21:50:D1:51:E5:57:8D:E9:A0:C7:92:5D:46:47
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 0194258F4725E2B3751EC403D22956B8C7DF
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/LKntu7OdIVDRUeVXjemgx5JdRkc.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200780
IP address blocks: 217.18.220.0/24 maxlen: 24
217.18.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:47:25:e2:b3:75:1e:c4:03:d2:29:56:b8:c7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ca9edbbb39d2150d151e5578de9a0c7925d4647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:f3:57:70:b3:87:e1:ae:9f:13:a9:92:07:
20:4f:12:29:d6:58:c4:42:d4:72:70:e1:1c:2b:9e:
ff:4d:3f:de:4b:d7:bd:a8:69:7b:a6:cc:80:1d:7e:
dc:44:b8:3d:0b:2b:23:1c:24:4a:63:bb:ce:1b:74:
08:8f:19:f0:cd:36:6a:08:a1:d1:d1:f2:89:14:93:
ab:96:0a:ff:bd:f5:cb:16:c7:11:fe:a3:18:81:9d:
51:de:c6:f1:09:b7:12:e2:86:c3:69:96:3b:1b:78:
f5:50:6b:19:46:28:10:c8:b6:eb:51:f3:b0:76:6d:
99:78:63:e0:d3:e9:cf:69:50:9e:72:e7:93:33:60:
8f:f5:55:17:18:e9:dd:bd:e8:9c:e2:77:f1:cc:8f:
35:4f:e6:54:72:27:a8:22:00:de:f3:38:d8:ca:92:
b2:54:35:ba:0d:e7:89:c0:99:bc:7b:7f:d8:97:5c:
b6:bf:22:bf:c0:d5:f8:a5:39:9e:12:a8:62:67:8d:
8d:29:c7:6c:9e:f0:00:65:2a:25:ef:e9:ff:4f:e8:
14:c3:b2:21:1e:30:a2:b7:35:7f:f0:b7:12:80:66:
90:b9:86:88:ae:47:33:70:e0:65:ef:c8:27:bb:6b:
f2:f6:6a:c4:81:7d:09:ae:d7:a8:00:02:43:e4:e4:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A9:ED:BB:B3:9D:21:50:D1:51:E5:57:8D:E9:A0:C7:92:5D:46:47
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/LKntu7OdIVDRUeVXjemgx5JdRkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.220.0/23
Signature Algorithm: sha256WithRSAEncryption
09:d2:1c:0e:a5:19:27:84:8b:a5:3f:2c:e8:af:cb:5e:b1:e3:
42:68:3c:ae:dd:1e:c7:3f:b2:fe:ab:db:0b:24:aa:12:56:61:
82:60:14:d7:20:24:37:f5:97:8e:5b:9a:3a:cc:5b:bc:f4:e8:
3a:64:13:99:1f:34:02:b2:c6:67:b7:a8:2f:e8:1a:45:9e:6c:
80:f8:ce:65:6e:ff:1f:95:68:88:57:aa:13:20:03:d7:91:6f:
c6:cd:58:9f:c1:2c:d1:3f:34:c9:d9:5f:f8:2c:dd:09:0f:77:
ad:50:a1:4f:19:27:9d:47:9f:6a:c4:a6:82:78:4d:8d:c4:15:
a2:c3:f3:99:52:c5:0b:f5:b9:de:3d:65:f9:1f:ad:23:36:a8:
d0:87:7c:3f:5c:9e:ef:61:0e:ed:de:99:83:b1:17:e7:0d:d5:
ee:b8:f2:f1:10:61:2b:84:e5:7a:c8:d3:8f:f8:0b:20:67:40:
2e:03:fe:59:2d:37:d6:d5:e5:6e:6b:4e:0b:85:85:c0:13:c4:
74:18:17:ef:73:e6:06:70:cc:a5:81:7f:9f:ef:96:6b:39:50:
f3:98:87:b5:eb:6e:89:de:cc:09:b1:fe:e1:ba:74:9a:ae:af:
4b:09:0f:ce:8d:5f:d2:07:bd:30:5d:39:74:a3:fb:7c:46:e9:
fb:3f:86:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net