Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/LXHGZAjXqV3BVckN7vOFelHq2Tc.roa
File: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (raw, json)
Hash identifier: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=
Subject key identifier: 2D:71:C6:64:08:D7:A9:5D:C1:55:C9:0D:EE:F3:85:7A:51:EA:D9:37
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 019425FC0159277188E1F296F65993F4B30F
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/LXHGZAjXqV3BVckN7vOFelHq2Tc.roa
Signing time: Thu 02 Jan 2025 07:47:39 +0000
ROA not before: Thu 02 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210755
IP address blocks: 193.200.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:01:59:27:71:88:e1:f2:96:f6:59:93:f4:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Jan 2 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d71c66408d7a95dc155c90deef3857a51ead937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:ef:ee:7b:1e:47:32:4b:b1:c4:9c:97:2d:
cb:0e:ff:4b:4d:a3:38:3b:3f:55:f3:42:a6:84:15:
65:3b:e7:00:bf:84:83:0e:c7:e2:4a:03:f2:64:06:
87:2d:90:60:29:2b:ba:fb:d8:f7:8e:34:17:1d:e9:
ea:3f:15:2e:d9:a4:e1:06:98:4b:dd:d3:40:00:9f:
f0:1d:de:9e:db:03:4c:b7:f5:31:7e:02:eb:9c:12:
73:cb:3e:1c:9f:d8:f7:6f:f5:86:86:94:50:d5:da:
aa:e2:06:fd:72:eb:fa:21:a1:d8:c2:79:b8:ff:1f:
2b:fb:d4:97:5c:1c:57:23:ff:e8:7c:ab:fa:47:88:
7d:62:d7:25:08:e0:87:cf:c6:72:fd:6a:72:20:31:
2e:3d:cf:16:ae:6a:d6:ec:b4:56:76:7d:01:9c:1f:
67:89:4f:c2:8b:80:2b:02:8a:56:8b:c0:21:70:b0:
b7:74:b0:10:4f:9c:19:e1:0e:8a:9b:cc:71:78:f4:
dd:f7:56:43:73:c3:03:87:72:03:61:a8:7e:a8:44:
23:0d:af:5f:31:7b:e6:23:cc:1c:34:06:b9:bf:34:
57:58:9f:be:04:5b:28:35:0d:41:23:5d:ef:e1:98:
07:a7:bb:9f:f2:ae:47:4b:55:af:e4:f4:f1:aa:18:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:C6:64:08:D7:A9:5D:C1:55:C9:0D:EE:F3:85:7A:51:EA:D9:37
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/LXHGZAjXqV3BVckN7vOFelHq2Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.32.0/24
Signature Algorithm: sha256WithRSAEncryption
13:62:e6:c4:7b:88:08:20:11:fd:77:8c:41:93:ff:ae:03:9c:
bd:9a:5a:77:8b:3c:e3:6c:fd:cf:cd:8d:6e:44:bf:de:89:73:
d9:a4:25:48:7d:e4:56:cc:dc:b8:d5:d2:9e:25:7a:bd:d3:fc:
c9:9e:ec:b6:8f:25:61:18:1d:29:87:fa:c9:ab:c6:1f:dc:42:
08:ef:56:8d:83:ba:5c:f1:cd:88:dd:b7:9f:21:53:9d:21:ce:
2c:6c:c6:e7:31:96:cf:79:06:b9:4e:11:08:0c:f2:48:34:ec:
03:06:e4:c7:15:a4:eb:f5:a8:96:1f:41:0b:46:d5:ca:18:7b:
ee:ef:e1:1f:70:65:26:e2:c5:87:a3:a3:ac:a2:58:79:6a:95:
44:3c:8c:f2:44:0d:8b:5c:83:6d:be:4d:6c:c1:1f:35:e2:8e:
1f:ff:26:49:fe:ec:62:52:97:5d:9e:a3:a2:bb:e0:49:52:5b:
3e:c2:fd:3c:6a:7c:b0:a7:53:1a:36:98:f7:3b:99:8a:44:c2:
69:00:a6:3f:01:6a:d6:8f:48:33:3d:e2:2c:bf:b6:7a:84:b0:
9a:1c:db:f3:d5:b2:71:41:da:6f:0b:0e:6f:cf:c2:59:5c:be:
7e:6b:2a:b9:51:7f:32:8d:f4:26:42:11:cf:06:b2:c5:4b:47:
58:da:25:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net