Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/LnuT6eEdb88-TghvQ_FZnRefVyk.roa
File: LnuT6eEdb88-TghvQ_FZnRefVyk.roa (raw, json)
Hash identifier: XQk1e8dAGrgYT1azOGp5hpmR57maWf6UhLO79IbQj1k=
Subject key identifier: 2E:7B:93:E9:E1:1D:6F:CF:3E:4E:08:6F:43:F1:59:9D:17:9F:57:29
Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial: 019425FC571C44F24AF3FE835E92516E94DC
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/LnuT6eEdb88-TghvQ_FZnRefVyk.roa
Signing time: Thu 02 Jan 2025 07:48:01 +0000
ROA not before: Thu 02 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44329
IP address blocks: 193.109.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:57:1c:44:f2:4a:f3:fe:83:5e:92:51:6e:94:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Validity
Not Before: Jan 2 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e7b93e9e11d6fcf3e4e086f43f1599d179f5729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:c0:f5:7b:36:c0:b9:a0:8c:63:f6:a5:18:
fa:b7:28:bc:77:9a:e0:64:43:5b:d9:df:6b:ba:5c:
2b:60:67:b9:17:c8:a2:97:41:98:78:da:08:41:4b:
c4:aa:b0:85:4f:72:8f:b3:26:7f:c1:29:de:4a:01:
ac:ea:87:5c:57:dd:a7:6f:d9:a8:53:a8:cc:ab:fa:
97:74:ec:a8:67:a4:e7:e9:32:a1:c1:50:15:9b:1c:
3e:a9:23:b9:34:ec:25:ae:0e:18:31:dd:db:70:f2:
af:c3:17:dc:36:c2:dd:85:97:bc:11:f0:4f:ef:b7:
16:4d:48:0e:44:3c:29:62:77:ea:94:2c:ed:88:1e:
f8:59:90:54:c8:07:6a:97:d9:87:59:fe:e5:b3:4c:
0a:7b:7f:20:60:ef:f5:04:6f:95:6e:8e:3c:b2:42:
99:fd:36:8b:1e:81:46:07:e5:7c:29:26:88:58:98:
84:fa:5b:94:65:8d:41:05:08:3e:0a:28:5c:bf:14:
87:86:e2:27:32:63:fd:7d:21:f5:69:d1:48:53:e0:
22:37:1f:9c:df:7a:cd:45:01:b3:2a:e9:e4:ae:c6:
9b:71:00:23:42:6b:74:30:d3:a6:ce:32:0e:78:5a:
15:20:11:1e:fd:92:31:86:c0:4c:d0:8c:de:07:a5:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:93:E9:E1:1D:6F:CF:3E:4E:08:6F:43:F1:59:9D:17:9F:57:29
X509v3 Authority Key Identifier:
keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/LnuT6eEdb88-TghvQ_FZnRefVyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.88.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c0:71:4c:e9:96:95:24:aa:23:0b:2d:ec:27:90:d6:9c:18:
09:bb:a3:3d:61:f6:f1:97:08:aa:2f:d1:1d:4d:a4:06:80:47:
7f:12:53:dc:77:f7:c7:b3:77:3a:35:0a:28:4c:ef:25:7a:7b:
b9:a1:18:8b:a6:a1:f8:87:a3:d0:ab:bb:4b:02:ee:80:ea:2b:
7c:c7:83:66:01:2d:68:53:1d:cc:1e:c1:cb:44:aa:22:0d:58:
b4:d7:4f:41:6d:da:80:79:05:2c:c8:28:92:19:32:aa:d7:93:
0a:ee:13:e2:80:98:e1:2f:b2:a1:de:97:d6:34:03:5e:7c:95:
7c:7d:e3:5b:25:6f:16:72:23:51:73:41:95:4d:cf:90:99:b1:
8e:28:dc:6b:44:e1:a8:05:b0:62:ab:23:17:9c:a1:04:c9:0c:
60:55:31:cf:fa:45:28:94:7c:5f:8e:bd:17:0b:bf:04:3a:bb:
cc:b7:51:c8:b2:62:9d:7c:63:a1:37:41:4f:0a:a7:09:cf:ab:
c4:c8:59:e1:f1:cf:90:e0:92:78:54:7b:fb:a8:a2:43:85:f6:
91:23:e2:48:83:1e:2b:31:b1:4d:8f:27:56:68:f8:a0:1b:7f:
20:b7:4e:c9:81:d8:02:67:ab:f8:b0:f4:6e:53:27:08:a5:cc:
92:a0:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net