Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/Lsu4SS6ThyYeppRYu6PmZ-042nc.roa
File: Lsu4SS6ThyYeppRYu6PmZ-042nc.roa (raw, json)
Hash identifier: uXqaykBNjJacbWPSq8V/QHVwNjfPRIGaAOgab5oa/hs=
Subject key identifier: 2E:CB:B8:49:2E:93:87:26:1E:A6:94:58:BB:A3:E6:67:ED:38:DA:77
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 019547C974BB74356F2FCCB2D4B31950AF53
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/Lsu4SS6ThyYeppRYu6PmZ-042nc.roa
Signing time: Thu 27 Feb 2025 14:22:19 +0000
ROA not before: Thu 27 Feb 2025 14:22:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213489
IP address blocks: 188.124.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:c9:74:bb:74:35:6f:2f:cc:b2:d4:b3:19:50:af:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Feb 27 14:22:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ecbb8492e9387261ea69458bba3e667ed38da77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:23:4e:0e:de:61:20:29:41:45:19:ba:bb:
c4:81:4a:0e:c0:d6:68:81:8e:4c:ec:b2:1b:d4:05:
79:7b:a9:22:24:ff:34:a2:5d:6c:e7:77:a5:8e:26:
1d:95:46:62:74:89:10:6a:3b:09:58:62:d1:d4:ca:
ed:8a:c8:98:d1:43:ea:67:81:1b:5b:a0:aa:92:53:
03:b9:69:7a:a4:13:7d:5b:1c:11:d9:47:db:a0:c7:
3f:fb:e0:95:41:05:8d:84:6a:77:ba:7a:fd:12:be:
8e:b0:93:b6:4a:53:bc:16:61:71:0e:63:3d:4b:31:
4a:7a:6b:20:bf:de:dd:89:44:d2:27:69:f5:ee:34:
d9:b4:da:21:0e:9d:f8:55:20:bd:ac:ff:2b:bc:ca:
a0:d1:f5:38:18:50:c2:94:e8:46:fa:46:31:db:98:
f7:7f:2f:e1:65:36:c0:c3:53:a2:97:44:c2:9d:3d:
dc:9c:e4:6f:43:ac:d3:aa:04:07:b5:9e:a6:c1:a9:
40:db:3f:1e:e7:59:87:5a:3b:d1:bc:b9:a3:97:fb:
42:ca:aa:42:67:20:17:c8:7a:fd:9e:73:f3:a4:09:
e1:05:4a:16:2e:db:7f:42:7d:c7:dc:e8:d3:25:0f:
f1:f9:58:a6:ef:34:5e:2f:ec:d8:d6:a6:9c:9b:06:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CB:B8:49:2E:93:87:26:1E:A6:94:58:BB:A3:E6:67:ED:38:DA:77
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/Lsu4SS6ThyYeppRYu6PmZ-042nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.124.22.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ea:99:98:9b:e1:d0:5e:3d:47:f0:f7:4d:3d:b5:59:66:6d:
01:80:3a:1f:26:a2:67:1c:da:ce:57:bf:a8:c8:4e:0e:33:bf:
88:5b:32:c2:87:3e:55:ca:12:0a:02:2d:94:52:8d:24:b3:aa:
fe:b7:61:ed:26:f2:58:6b:96:81:46:2a:40:15:f9:b9:67:2d:
d7:9b:0d:94:24:f4:16:45:5a:b0:04:30:af:1a:93:27:d2:ad:
1e:2e:d7:47:c5:03:a6:8c:df:25:d5:39:e4:cf:52:8c:e7:a4:
f8:3a:a2:dd:64:60:83:76:a8:d9:6d:18:66:a9:c5:89:f3:03:
70:b6:e5:82:95:04:35:c0:bd:7a:21:b5:c4:44:a3:95:93:dd:
42:f1:2a:de:de:8d:0b:be:a9:a3:97:67:77:39:25:0d:56:7c:
f5:c8:31:ef:b4:a6:35:bf:08:76:cb:12:cb:ee:87:00:6c:2b:
de:ef:80:fb:08:41:4b:c8:a4:d4:46:be:78:d0:fd:00:5c:f8:
25:48:15:8c:97:a3:ca:f7:b0:74:09:4d:a9:18:77:5d:1a:26:
e4:12:26:e0:a3:3c:8c:cb:fe:3c:88:42:c0:35:d1:80:c0:34:
5b:9c:f3:8b:70:13:28:05:cf:46:d7:5c:4b:66:fe:53:c2:20:
4f:80:73:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net