Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa
File: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (raw, json)
Hash identifier: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=
Subject key identifier: 94:46:F5:26:CC:3E:0E:DB:B9:C4:B8:D4:69:FB:02:A4:FD:9D:DD:24
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 01942143B30CEAAE3F1C70EB6B7D24B1A45F
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 84.254.134.0/24 maxlen: 24
84.254.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b3:0c:ea:ae:3f:1c:70:eb:6b:7d:24:b1:a4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9446f526cc3e0edbb9c4b8d469fb02a4fd9ddd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:8d:32:a9:ae:94:ed:37:dc:f1:8e:5a:ef:
60:98:d3:a3:38:32:67:18:6f:e7:97:8b:9c:31:1c:
23:1b:7a:84:b9:02:9e:e6:34:56:ba:0b:af:fc:87:
c1:66:f3:1c:13:fb:17:de:e1:cd:bf:cc:c1:c5:6c:
ef:66:fc:0b:e8:d1:87:6c:4b:26:c6:e5:f4:46:f7:
4d:bc:fb:03:ec:3e:25:28:10:cd:50:62:77:03:1b:
60:e9:e5:43:12:93:b0:b3:aa:ab:5d:da:a7:c6:9b:
bb:93:6f:19:2a:b0:3e:75:cd:2a:b7:2d:38:d5:2c:
83:31:0b:68:0f:31:e4:b4:0d:e3:0d:04:df:66:0e:
a9:8d:ee:f6:bb:25:f0:ab:55:e0:f1:94:0f:8e:8c:
e3:7d:c3:ea:4e:ab:81:8c:c6:4c:74:15:01:41:8a:
84:27:6e:d5:4a:0c:7c:a9:82:1f:06:c6:a6:f4:90:
9d:5e:5c:14:05:04:4c:fb:f7:14:87:6b:1f:30:0a:
c5:9c:02:38:6b:37:db:05:45:3b:48:d1:c8:ba:07:
57:4f:51:e7:88:b8:d4:c1:85:fc:8d:56:fc:7b:d4:
e3:43:a3:dc:94:8b:b2:1c:a9:35:ee:74:eb:a0:43:
5c:ed:41:79:f0:5a:61:3d:43:fd:fb:d2:7f:43:42:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:46:F5:26:CC:3E:0E:DB:B9:C4:B8:D4:69:FB:02:A4:FD:9D:DD:24
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.254.134.0/24
84.254.136.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:49:7b:8a:3b:c5:2b:65:88:5a:ea:e7:2a:d6:ce:c5:74:1e:
92:b7:95:e3:fb:a7:e7:f9:ea:33:51:ac:74:3e:84:22:fd:9b:
18:46:2a:42:63:ed:60:c8:0d:64:d3:fd:f9:09:ee:19:9d:4a:
bf:99:a7:73:48:0d:ce:d0:cd:0c:bb:26:4c:0d:e5:cf:f4:15:
1f:c7:50:67:25:18:32:a0:a2:02:ce:36:7e:e7:2e:7a:e4:59:
50:59:4f:a4:f5:43:9c:bf:40:19:d3:f4:02:5b:8c:ff:30:ad:
04:68:38:c1:47:98:d2:7a:53:26:a3:50:0b:12:32:27:e1:08:
01:37:2c:b9:e8:e4:27:86:89:46:15:5e:8a:2f:a5:d5:50:22:
07:37:15:37:24:2b:0d:72:71:08:3d:47:cf:24:57:dc:14:39:
85:66:a2:31:63:ed:46:d3:3e:4b:7b:8c:93:c3:7b:db:88:29:
54:8e:17:ca:2e:55:80:bc:e2:a9:11:6f:54:7a:5c:9a:3f:7f:
41:c9:84:71:90:66:52:8f:a7:0e:23:5a:12:a8:5c:b6:9c:b2:
4d:c6:e5:43:29:cb:e8:ac:41:2f:a3:20:af:1a:7d:08:b2:96:
0d:3d:a9:e2:f9:ca:75:9d:cc:bc:74:2c:32:d2:67:47:92:d4:
9b:5a:66:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:48:22 2025 by rpki-client