Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/lwcaxHGxZGYqPpFywMXAQis0_48.roa
File: lwcaxHGxZGYqPpFywMXAQis0_48.roa (raw, json)
Hash identifier: bvDYr9v7hEAaIJ3YVNoznlJECQRudV3izaNo7DTPlvE=
Subject key identifier: 97:07:1A:C4:71:B1:64:66:2A:3E:91:72:C0:C5:C0:42:2B:34:FF:8F
Certificate issuer: /CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Certificate serial: 01942444F887FB6BB0050B67771109469A8E
Authority key identifier: 7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/lwcaxHGxZGYqPpFywMXAQis0_48.roa
Signing time: Wed 01 Jan 2025 23:48:07 +0000
ROA not before: Wed 01 Jan 2025 23:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 185.161.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f8:87:fb:6b:b0:05:0b:67:77:11:09:46:9a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Validity
Not Before: Jan 1 23:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97071ac471b164662a3e9172c0c5c0422b34ff8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:57:af:53:88:d7:f8:bb:60:f3:b7:b0:d4:
c3:c1:2c:5e:b8:12:57:90:8a:f6:f8:2a:5f:0d:a5:
95:d4:c9:c9:dc:5d:85:73:2e:c2:1b:9f:c8:fb:68:
f6:4e:29:fb:8f:45:62:5b:76:25:91:16:91:2b:ec:
b6:2d:ea:2b:9d:9a:1a:a4:7c:b6:51:4b:70:56:24:
5b:ce:90:a8:7c:37:82:cc:e5:d2:31:46:b5:1a:27:
69:72:43:96:cb:f7:e5:76:c3:ae:8f:09:52:78:dd:
2c:bb:ea:9f:71:bb:4f:cd:d9:88:55:3d:94:34:fc:
2c:a7:1f:cb:67:13:74:fe:63:6c:7a:c0:3b:e3:9d:
9e:cd:6a:e3:e5:b8:3a:d0:a4:76:2f:e7:12:fe:ab:
be:a0:8a:84:61:ac:92:20:51:98:0f:16:6b:42:a4:
ef:c1:5e:5e:38:86:f8:50:0d:60:ca:fa:52:01:4c:
e1:92:9f:5d:10:82:43:28:8d:57:87:8a:49:f3:35:
47:63:3c:de:ef:13:4a:a0:96:7e:0e:4c:86:a0:2e:
23:5b:57:6b:ce:bd:f4:5b:17:7b:60:24:fa:bd:b1:
17:b4:bf:57:7e:43:35:f1:d3:8b:3f:67:39:a9:c2:
8b:38:68:79:1e:6d:88:22:9e:83:a0:35:cb:c7:6e:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:1A:C4:71:B1:64:66:2A:3E:91:72:C0:C5:C0:42:2B:34:FF:8F
X509v3 Authority Key Identifier:
keyid:7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/lwcaxHGxZGYqPpFywMXAQis0_48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a9:62:ca:78:15:a1:27:36:aa:d6:cd:ba:50:0a:b2:64:f6:
94:06:5d:33:3d:22:eb:20:39:ef:ee:0f:fe:79:ea:f8:00:aa:
eb:5a:e4:a8:fe:47:12:a1:13:3e:b5:45:97:8c:ee:a3:9c:f2:
4d:fb:c8:6c:60:4a:1c:8f:cf:9c:b4:b7:8d:35:7c:e3:20:3a:
73:2e:23:a4:b4:21:80:29:a5:cb:83:20:0c:a2:84:b2:a8:fa:
9a:9d:c8:ac:f2:d9:8e:ef:12:ec:aa:55:b8:7d:9f:d0:4d:bf:
7c:16:3b:04:a2:e2:ad:5f:6c:99:02:50:97:2d:71:4d:34:c4:
f5:1f:6d:45:da:49:dd:d7:e4:05:27:b1:a9:7c:bf:31:8b:39:
5d:3c:6d:91:6a:56:9e:f8:ad:1a:08:b3:96:78:88:82:a5:fd:
10:0a:69:f5:66:8f:4c:9f:a4:41:5f:e8:1f:66:8a:c1:07:12:
f2:15:8d:d6:e9:64:39:e3:c4:0f:5b:7c:8a:ba:5d:e2:b4:a4:
7a:1c:2f:d5:1f:ad:d9:94:b5:2b:21:c0:a0:9f:92:65:23:16:
5b:36:ff:45:3e:95:f7:e1:25:71:c6:e2:c6:8c:cb:1f:5e:cd:
f1:06:4e:b3:5b:98:f4:58:10:1e:2a:5f:d6:39:5f:89:4d:35:
52:0d:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:41 2025 by rpki-client