Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa
File: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (raw, json)
Hash identifier: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=
Subject key identifier: 97:28:24:4C:7C:60:A8:BA:D7:8B:F3:58:8B:62:C6:4A:6B:89:E5:C7
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 01942220204CC5AE58B78C60FEF2396E18A7
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 195.234.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:20:4c:c5:ae:58:b7:8c:60:fe:f2:39:6e:18:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9728244c7c60a8bad78bf3588b62c64a6b89e5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:91:55:36:47:2b:ca:31:eb:a2:1d:27:68:
16:17:20:74:7d:27:0e:29:b6:bf:8b:31:ba:43:5c:
25:75:a0:12:85:5b:bb:3f:2f:57:dd:69:c9:28:94:
a4:15:f7:03:89:72:99:65:98:9c:01:98:96:5e:6d:
37:a0:b4:d9:c7:b7:c8:d8:a1:f7:06:99:7c:ff:49:
b6:60:03:f7:bd:99:04:46:90:d0:2d:18:a3:4a:6a:
76:a4:28:84:23:78:0d:62:7b:c8:23:d5:82:9a:a9:
34:bb:99:f5:18:5d:da:c8:3a:17:93:fa:51:25:f1:
de:a8:f2:f3:1a:f4:c0:67:0a:df:94:f8:1f:58:62:
39:72:ca:ec:73:d5:ce:6a:2c:a2:f9:76:96:d6:95:
61:bc:b3:0a:b3:49:83:34:40:94:66:f2:5c:44:59:
6b:8e:fe:e9:3d:01:c0:fe:6a:24:e6:37:23:56:a6:
f5:65:e1:02:b3:3d:0c:43:f9:ca:24:05:78:f4:a2:
fe:15:96:8b:52:08:93:16:05:d6:d6:6c:d5:1e:9e:
d3:33:09:dc:68:08:49:b7:95:61:ee:92:de:9d:f7:
23:8a:4b:32:f9:22:db:2f:41:ca:01:09:74:d8:de:
fc:f0:99:06:f7:9c:84:d4:4e:ac:5d:da:9e:18:39:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:28:24:4C:7C:60:A8:BA:D7:8B:F3:58:8B:62:C6:4A:6B:89:E5:C7
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.180.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8a:63:f3:a4:51:7c:bd:70:10:d1:3e:de:74:a6:82:cc:a8:
e7:4f:53:11:93:08:94:14:c5:e7:d6:38:5a:01:89:5c:34:78:
e5:8d:a7:4f:20:ff:a0:25:25:92:66:de:ae:b1:94:06:27:c3:
37:cd:45:29:bf:d8:d3:e5:32:67:3a:5f:49:76:d5:11:a1:fa:
3b:84:2e:3e:70:33:d3:78:bb:9a:31:2c:5d:0f:69:49:b8:78:
e5:69:22:1c:e1:f9:31:14:69:fa:b8:14:a2:e5:37:9e:d6:cb:
17:35:0e:46:fc:39:56:a6:d8:ac:39:4f:97:a4:f2:c3:d9:0e:
e8:d7:76:ee:6b:e5:17:06:a3:a3:18:55:42:d2:52:cb:02:d0:
4d:ab:4d:20:5b:83:df:4f:72:46:da:5a:22:c1:57:c8:25:04:
99:f0:da:5b:13:17:6d:a5:3f:6b:27:47:d8:1a:f5:b6:d3:3c:
2d:63:16:d5:3c:5d:43:7f:ab:57:2a:c7:3c:fb:d9:8b:ab:3a:
de:e6:55:54:a6:2c:85:db:43:71:d6:23:cb:76:ce:55:7b:54:
76:70:22:6b:65:7f:a8:80:26:58:b8:5f:5a:75:5a:d9:9d:46:
11:04:fc:cb:27:4a:06:7f:73:4d:1d:83:46:f2:78:00:b1:b0:
42:18:f4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:28 2025 by rpki-client