Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/_Lwar98mX_HPuZ6I_iBOIoPweAU.roa
File: _Lwar98mX_HPuZ6I_iBOIoPweAU.roa (raw, json)
Hash identifier: Q4wLDgz1BPTM2gYviJRrmaBtuFqzTEu5NxXR8pya5BA=
Subject key identifier: FC:BC:1A:AF:DF:26:5F:F1:CF:B9:9E:88:FE:20:4E:22:83:F0:78:05
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 019547C137AD9CAA032E451BD4C96DBD18CB
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/_Lwar98mX_HPuZ6I_iBOIoPweAU.roa
Signing time: Thu 27 Feb 2025 14:13:19 +0000
ROA not before: Thu 27 Feb 2025 14:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 149.232.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:c1:37:ad:9c:aa:03:2e:45:1b:d4:c9:6d:bd:18:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Feb 27 14:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcbc1aafdf265ff1cfb99e88fe204e2283f07805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:b1:d9:04:80:45:84:1d:c7:e0:81:c0:d5:
13:1b:3f:ce:a2:e5:5f:07:da:cf:60:b7:f3:00:72:
74:15:7f:44:88:ca:0d:23:2c:f7:15:e2:ce:5d:5b:
a1:f6:1a:ed:73:a9:92:0b:92:c7:46:b4:f4:ad:e1:
3f:df:f7:ab:30:3d:7f:31:50:6e:9a:61:c4:c3:23:
0b:0d:77:32:9a:3b:01:ba:84:2a:4b:ad:5e:fa:ed:
be:c1:84:06:9a:72:9b:f9:96:a9:d3:30:be:d5:2d:
a6:b0:ac:d1:61:41:9c:58:75:31:7b:fc:f3:58:09:
05:69:97:63:b8:1d:cd:71:ba:22:7f:32:28:f4:54:
2e:35:8d:b5:61:8b:99:2f:68:31:8a:04:45:01:af:
be:e0:6c:89:3f:e6:f4:cc:fe:1a:7b:c6:61:89:60:
2b:3a:e8:7c:02:fd:6d:3b:b0:a6:9a:d4:41:18:c3:
58:8d:91:d5:74:cb:5a:65:9a:64:eb:a2:90:34:af:
28:5f:51:de:9b:f0:84:9b:36:65:7c:9f:88:56:6b:
42:c7:77:c7:5e:ed:e4:3c:d7:cb:67:6a:1a:9c:d4:
55:be:cf:3d:23:72:eb:ae:a9:00:39:1c:f4:bd:eb:
65:11:87:2a:f0:6e:19:34:6c:93:ad:84:38:de:ad:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BC:1A:AF:DF:26:5F:F1:CF:B9:9E:88:FE:20:4E:22:83:F0:78:05
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/_Lwar98mX_HPuZ6I_iBOIoPweAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.232.240.0/24
Signature Algorithm: sha256WithRSAEncryption
51:87:c6:52:62:d2:13:60:fb:22:3b:27:f5:cc:c2:52:bd:21:
d0:c1:49:aa:36:e8:62:2e:e5:40:01:0c:e4:23:01:41:d8:48:
b5:b1:d9:ac:cc:36:47:01:ef:68:38:81:39:f1:4c:34:a8:86:
e7:cb:09:32:04:3e:4e:96:5e:78:24:fc:d7:3c:1e:83:17:1d:
b0:dd:57:d3:84:83:df:ae:f2:ee:99:71:7d:28:be:96:f5:79:
03:26:88:3e:e7:35:c5:10:0e:18:87:f6:cc:a9:00:7d:b1:29:
6a:e3:19:48:4f:60:b6:6d:c4:8c:d2:fb:f9:e7:13:bb:40:be:
79:61:b2:18:ba:b7:6e:99:d4:b0:9d:26:bd:80:c1:47:40:bb:
85:68:8a:71:7d:fd:7e:0f:06:b6:f8:21:c0:67:a1:cb:57:5f:
e1:61:c2:73:93:ca:7f:2e:0a:53:a7:b5:ec:30:83:5f:d6:b0:
5e:64:e0:c4:d9:f7:6b:c1:fd:15:9f:7d:5d:2b:ba:8f:0d:70:
8b:51:c7:54:62:cc:e2:22:df:14:2b:ff:da:5e:e9:33:cf:8c:
3c:e4:50:4b:ee:98:54:2b:c4:ec:46:09:a3:94:13:e8:89:5e:
56:b9:b3:00:be:09:cb:82:bf:5b:85:91:d4:75:d0:d9:23:58:
6d:db:d2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:25:17 2025 by rpki-client