Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/LxxlY-veNdEFSuClmgliyHMOZOA.roa
File: LxxlY-veNdEFSuClmgliyHMOZOA.roa (raw, json)
Hash identifier: eyCm9s0PQeZ1TTpko+C38z1BbPAWbfE1nA0PWObj7+Q=
Subject key identifier: 2F:1C:65:63:EB:DE:35:D1:05:4A:E0:A5:9A:09:62:C8:73:0E:64:E0
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 019426D9CD44E6D721F125B5FDC349398E1B
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/LxxlY-veNdEFSuClmgliyHMOZOA.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 212.119.74.0/24 maxlen: 24
213.210.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cd:44:e6:d7:21:f1:25:b5:fd:c3:49:39:8e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f1c6563ebde35d1054ae0a59a0962c8730e64e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:a8:18:62:27:55:2e:71:94:8a:f6:7f:44:
69:69:7a:1d:a8:03:d2:c2:d7:77:a3:ab:a4:c5:d5:
d4:65:c5:aa:29:15:92:9b:79:c6:10:57:93:ea:4f:
0e:7b:07:b0:c2:ea:8d:7d:4d:f8:40:9f:d6:f7:fe:
5b:3a:72:80:f5:11:75:a1:1c:14:e5:ba:3e:8f:07:
67:88:dc:ba:fb:c7:97:be:f1:6e:c5:39:95:e8:43:
90:5c:0d:3d:54:53:4b:82:68:82:f9:cc:1b:01:4d:
1c:13:27:01:4b:92:39:31:5a:f5:c1:16:a5:6c:e7:
bd:ce:0f:05:92:65:0f:57:fc:50:e9:b9:83:e0:27:
95:c3:61:fe:f8:3b:31:e1:90:b4:8a:f7:1c:e7:a7:
31:74:ca:76:76:bf:e4:6f:49:9f:7f:30:9c:0d:95:
fd:45:a4:aa:95:02:1f:6a:1c:3b:ea:80:ec:78:1b:
80:0d:a3:1d:eb:1e:0c:c1:a3:dd:9f:43:b2:25:64:
3e:37:25:9e:c5:7a:df:91:b2:0a:e8:8d:89:8e:8f:
ef:fc:1d:7c:56:45:4f:99:25:85:8f:6c:a0:a3:b7:
6f:7d:f7:31:9b:6c:69:00:b8:3c:84:89:e3:fb:09:
e8:a8:06:4a:85:00:6e:ce:2e:f4:10:37:72:e8:6d:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1C:65:63:EB:DE:35:D1:05:4A:E0:A5:9A:09:62:C8:73:0E:64:E0
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/LxxlY-veNdEFSuClmgliyHMOZOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.74.0/24
213.210.216.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9b:05:48:b6:3c:07:c9:a2:40:46:d9:26:39:23:2d:a2:7b:
d7:0d:ae:4b:20:0b:13:5d:6c:91:d8:f4:d6:38:0a:4f:e8:d8:
13:78:2a:83:8f:d0:10:32:f8:bc:3f:df:59:7d:7e:ef:39:bb:
10:8d:39:05:af:ff:0c:5d:61:8f:f2:b8:ea:e9:94:24:5a:33:
fa:2d:9c:b8:18:e7:16:c8:fc:7c:41:21:90:8b:35:7d:1c:e4:
69:dc:2e:94:7c:dc:12:c5:5d:23:89:84:b2:3b:29:d4:c7:0f:
ac:26:de:c0:a4:c8:44:ca:e9:50:ad:7f:8d:44:a0:d7:48:0e:
26:30:84:f8:3f:0a:92:46:c8:08:23:c0:a5:df:d9:04:79:38:
42:f4:e0:94:86:bb:3f:2d:82:5a:b8:36:31:cc:df:f3:92:24:
9a:b4:03:d8:2d:dc:52:fb:5c:4c:64:68:f3:27:fc:b6:11:62:
4f:2d:c3:3e:fc:78:3c:8a:c3:86:82:3b:05:fe:b4:f2:4a:47:
50:3a:ba:f5:1d:2f:1d:a2:66:63:2b:0c:ff:fb:10:4a:68:6b:
87:4a:ab:5e:38:a4:1e:f5:95:60:d4:d7:fe:92:8c:cb:f5:64:
ba:46:73:ae:19:93:83:79:0b:31:62:c2:fb:e5:12:3e:c6:1b:
84:0e:77:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:28 2025 by rpki-client