Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LNGTHKzKOTLqgWMZBMHDVGHv9Yw.roa
File: LNGTHKzKOTLqgWMZBMHDVGHv9Yw.roa (raw, json)
Hash identifier: CcU0O/TH1sbHLREibWileYJiNX2H6RiWnxOgfiWYhRI=
Subject key identifier: 2C:D1:93:1C:AC:CA:39:32:EA:81:63:19:04:C1:C3:54:61:EF:F5:8C
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195BF3449BC69B5E4D5CF3550F74560344D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LNGTHKzKOTLqgWMZBMHDVGHv9Yw.roa
Signing time: Sat 22 Mar 2025 18:53:49 +0000
ROA not before: Sat 22 Mar 2025 18:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133944
IP address blocks: 160.19.92.0/23 maxlen: 23
2a10:b40::/29 maxlen: 29
2a14:1106::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bf:34:49:bc:69:b5:e4:d5:cf:35:50:f7:45:60:34:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 22 18:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cd1931cacca3932ea81631904c1c35461eff58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:1f:a5:e6:d9:4b:ae:9c:7e:f7:79:cb:71:
e3:16:08:85:f6:58:30:8b:68:9b:6c:b2:97:24:c1:
b1:ab:58:ec:97:f5:62:98:d8:66:9c:c0:d4:1c:b6:
19:45:e5:bb:80:ab:e2:13:03:f5:5a:9b:fd:d1:f3:
bb:47:d5:4f:5c:89:a3:4a:a4:85:71:6a:a5:e9:aa:
21:13:ac:7e:0b:d6:ee:20:a2:ec:1f:3a:5d:3f:56:
51:e6:04:1b:bd:c9:d9:c6:5a:57:7b:80:f0:61:7d:
b0:a7:5a:b7:47:ee:a2:4b:f7:89:fa:8a:29:b3:06:
e2:95:7d:3e:94:ef:b8:14:23:8e:e1:78:55:d5:58:
6e:ff:ea:7c:82:a0:9b:5c:5b:99:f6:95:45:50:43:
53:3a:a3:1d:84:4a:bd:60:3a:02:b3:8c:e3:6c:2e:
38:c1:77:98:6d:eb:bc:07:9e:db:85:d2:2d:a6:26:
1e:7e:84:a1:18:29:2d:43:e2:c0:f4:71:ee:e3:3a:
bf:7f:24:4b:f1:11:5e:47:7f:b0:de:fd:eb:f5:a4:
a6:21:d9:b2:23:cb:84:47:d4:7a:16:e6:c3:8f:03:
b2:a2:fb:6e:d6:2e:fe:dc:83:76:aa:67:c7:9e:c4:
4f:78:7f:2b:78:d3:b5:df:b9:1d:46:2a:85:40:83:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D1:93:1C:AC:CA:39:32:EA:81:63:19:04:C1:C3:54:61:EF:F5:8C
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LNGTHKzKOTLqgWMZBMHDVGHv9Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.92.0/23
IPv6:
2a10:b40::/29
2a14:1106::/33
Signature Algorithm: sha256WithRSAEncryption
85:7b:2c:f4:57:e2:8f:73:8a:f3:c3:22:6d:2e:ad:a6:fb:43:
4e:fd:17:f0:fa:58:7a:9a:ab:cc:3c:22:1b:b0:8a:63:16:78:
48:08:18:3f:ce:6e:27:61:c8:c5:49:2e:fc:c5:08:b4:6b:da:
98:92:b0:a5:d3:56:1a:81:f7:e6:30:52:08:be:ba:9c:36:cb:
bd:a1:fd:7c:74:c9:4f:b8:31:ea:cb:47:e2:72:7f:80:b0:a3:
78:1e:92:13:ea:23:20:a0:00:62:ab:d7:b5:47:e0:7b:2d:7b:
30:50:14:98:97:55:75:49:bf:27:54:e6:21:58:cc:37:61:14:
76:c3:89:8b:8f:84:9b:0b:12:5b:15:50:20:1b:2f:1c:c7:f3:
37:e8:ac:05:f6:04:ea:4b:3d:58:b6:13:28:65:4e:c3:23:cd:
29:51:e0:f6:e7:57:cd:26:16:75:1b:69:a8:d9:36:56:1b:c2:
90:b1:69:b5:dd:d7:b2:b2:15:fc:77:99:36:2e:b9:89:83:04:
1d:54:71:7b:63:2f:60:b9:2a:fb:4a:34:eb:6c:71:0e:74:4a:
ca:4b:0c:5b:3c:35:9b:39:67:7c:21:fc:ea:e0:82:c7:41:67:
5d:81:14:2d:5a:ec:14:36:18:98:99:ed:09:6c:3b:35:fc:a8:
73:a5:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:27:37 2025 by rpki-client