Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LknrUTtAEec3_ePoSrQI9a24pv0.roa
File: LknrUTtAEec3_ePoSrQI9a24pv0.roa (raw, json)
Hash identifier: 5LCDVstZXT07n5MXzWJORGDSXvB8tmWgOiCs8Dsf9ig=
Subject key identifier: 2E:49:EB:51:3B:40:11:E7:37:FD:E3:E8:4A:B4:08:F5:AD:B8:A6:FD
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0195FB54227859781C9318FCDBD735C31CD3
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LknrUTtAEec3_ePoSrQI9a24pv0.roa
Signing time: Thu 03 Apr 2025 11:05:49 +0000
ROA not before: Thu 03 Apr 2025 11:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213454
IP address blocks: 62.169.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:54:22:78:59:78:1c:93:18:fc:db:d7:35:c3:1c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 3 11:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e49eb513b4011e737fde3e84ab408f5adb8a6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:6b:60:a4:70:b6:98:9f:f9:f2:33:c6:11:
7b:e1:d0:fe:a9:03:e7:75:37:b6:20:8e:33:b4:ae:
1a:0d:05:c3:c1:be:36:5c:bb:e3:b3:88:9c:7d:8a:
e2:94:b4:46:df:72:23:82:2d:24:7c:03:ff:89:88:
98:2b:40:f5:e6:b8:8a:63:1b:cf:18:69:bd:4d:27:
07:82:61:94:ce:7a:63:10:57:8e:8a:5f:d7:8d:04:
c4:f8:71:26:cc:39:00:46:96:78:f6:97:de:91:e4:
b7:57:21:99:ae:68:a8:ef:b1:83:41:42:17:6e:97:
14:f0:b9:69:6d:57:da:3a:da:09:cd:80:bc:4c:09:
04:90:37:ce:54:32:95:56:b4:09:ca:fc:bb:0d:92:
fe:19:e0:34:84:e4:38:26:27:63:ff:aa:bf:5d:36:
c4:19:f6:bd:3b:26:8c:be:6f:4a:b0:87:b7:8e:5c:
b7:8f:00:cc:af:38:fd:e5:e4:e9:4d:6e:33:b9:ec:
ca:b6:03:df:3f:f4:dd:31:56:0f:be:f0:97:ad:e4:
a8:a8:d3:6c:cb:f1:bc:0b:9e:66:ae:ea:2e:52:8b:
7b:39:f1:bc:89:a7:b1:87:59:52:8e:bd:1f:6f:06:
7f:19:38:a8:96:10:ce:99:57:5a:02:36:f9:e6:bb:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:EB:51:3B:40:11:E7:37:FD:E3:E8:4A:B4:08:F5:AD:B8:A6:FD
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LknrUTtAEec3_ePoSrQI9a24pv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.153.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a9:52:5c:26:95:ed:87:be:ea:5a:22:4b:ba:a0:45:b4:4f:
c6:98:40:b9:6d:52:26:9d:9a:b8:2a:ea:af:89:51:80:15:7e:
e1:1b:ac:3e:cd:d0:1c:3d:4f:4e:8f:d9:e0:52:f2:02:df:fb:
2e:d8:db:bb:80:0d:c4:ca:6e:ed:03:a5:6d:5b:f6:3c:eb:a3:
e3:30:b2:1c:64:24:c0:b7:5f:03:72:49:9a:4f:cb:d5:ad:4a:
86:eb:40:d4:e9:52:7b:c7:cd:e8:4c:bc:25:08:72:00:ea:41:
c0:be:dc:18:27:8f:c8:ac:fd:59:54:e8:8e:f8:ff:09:d7:0e:
ab:4e:09:07:2b:b2:2a:b8:33:a9:24:dd:9d:fa:bc:b0:5b:ef:
a2:36:df:0e:96:87:0f:e9:d1:bb:e9:43:2e:39:65:bd:80:77:
03:fd:18:4b:6c:f9:a8:ba:af:08:e0:77:a2:60:ff:ba:da:e4:
79:dc:a3:d3:06:d3:23:54:a1:87:52:2a:42:67:8c:27:c5:88:
10:ff:45:91:e2:1d:80:75:26:59:be:50:e6:c1:2f:bd:68:5e:
c0:35:b9:89:62:dd:82:4d:81:28:c6:b1:4d:6a:fd:02:50:84:
46:e4:98:ce:1b:fe:24:2b:2c:3b:b0:ee:35:0e:7e:9d:92:b4:
b1:a7:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:10 2025 by rpki-client on console.sobornost.net