Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lIMeXXnZuZaMcJ_xfAKpegLglN0.roa
File: lIMeXXnZuZaMcJ_xfAKpegLglN0.roa (raw, json)
Hash identifier: FtQR/0t5zhErnR+XiFhg1Id8ikJIr5AazHh1zVbuCck=
Subject key identifier: 94:83:1E:5D:79:D9:B9:96:8C:70:9F:F1:7C:02:A9:7A:02:E0:94:DD
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019500A67081FB11E2107B11C2B70E1286CA
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lIMeXXnZuZaMcJ_xfAKpegLglN0.roa
Signing time: Thu 13 Feb 2025 18:51:02 +0000
ROA not before: Thu 13 Feb 2025 18:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.247.59.0/24 maxlen: 24
188.241.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:a6:70:81:fb:11:e2:10:7b:11:c2:b7:0e:12:86:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Feb 13 18:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94831e5d79d9b9968c709ff17c02a97a02e094dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:6f:28:5a:13:0a:b5:14:f5:4b:00:c4:9a:
22:41:ef:a9:b2:30:ec:15:93:64:29:0d:ee:8f:4b:
94:b4:6c:fe:56:d7:0c:98:f2:17:94:68:59:70:83:
78:1c:f0:b8:a0:9a:fb:f8:56:09:a4:c2:02:fb:a8:
7b:5f:aa:fb:e5:44:d3:f7:e7:4f:77:9b:22:83:b7:
19:4f:2f:89:07:b9:f5:98:e3:d5:dd:95:d0:d4:7f:
51:20:2d:11:2e:72:3b:05:68:74:1f:52:f7:6b:25:
cc:09:93:aa:f6:4d:68:bb:4e:08:68:c9:b1:11:bb:
bb:dc:eb:5d:ba:b1:bf:e8:69:5b:f9:dc:d1:65:78:
bc:f7:ad:85:c2:7b:98:b7:44:67:9c:46:ac:20:43:
65:3f:5e:f2:cd:19:af:0d:b3:f0:92:3a:77:2a:c4:
e8:49:50:bf:73:5e:52:36:0e:71:10:48:e7:c4:ce:
df:7f:64:45:e4:e0:0d:d5:8c:ff:5d:42:d4:c0:9c:
72:18:73:b4:be:fd:16:c3:9c:2b:3f:9a:00:91:2f:
1f:c3:ff:bb:92:8e:b2:cb:06:ad:b6:b8:dc:56:c6:
a7:6c:22:53:11:59:01:f7:19:ae:cf:1f:96:97:51:
2b:79:54:6e:12:04:48:2c:01:4f:6a:df:65:3f:a2:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:83:1E:5D:79:D9:B9:96:8C:70:9F:F1:7C:02:A9:7A:02:E0:94:DD
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/lIMeXXnZuZaMcJ_xfAKpegLglN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
188.241.192.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:71:05:ce:28:d0:28:6b:ea:34:c5:16:37:8f:af:47:4d:4a:
10:8c:65:0c:81:20:b8:11:b5:c1:2a:8d:dc:ac:cf:a7:fb:24:
26:eb:6d:78:1a:b6:39:9b:fa:9b:f4:78:23:77:ea:5e:f5:c3:
76:be:61:66:ea:44:71:a1:a9:70:5b:47:7f:26:5a:6a:21:b3:
3d:46:2a:85:c7:35:65:21:9c:04:36:2c:cc:41:d7:06:83:b7:
9d:2a:45:fe:f9:1f:a2:ed:f7:46:cd:2b:37:d3:28:21:db:d1:
fd:37:de:0a:a8:fa:b8:aa:bc:21:2c:dc:e6:66:e0:0c:05:64:
88:a7:1e:dd:63:c7:ac:40:4c:63:04:48:61:f1:d8:8e:37:2f:
08:f4:38:71:65:a5:43:1e:10:fd:17:4a:69:16:63:7c:79:45:
1c:2e:db:de:f5:b2:b3:52:59:1a:f2:a0:26:a8:e8:4d:bf:7f:
08:c4:d4:9c:7d:d7:64:68:59:31:b9:86:46:b7:73:e8:b3:65:
b5:7c:ac:6d:10:dd:27:4d:fe:3f:1a:e3:ff:23:3a:1b:31:1b:
d7:39:2c:37:be:a9:d2:69:01:63:9a:76:8e:eb:42:89:39:e0:
df:30:b1:12:46:72:de:05:9a:03:df:ad:c7:94:ee:d2:04:2c:
f8:aa:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:32 2025 by rpki-client