Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LP68Kq65Cd2QPwdLWi-vEUwNhC0.roa
File: LP68Kq65Cd2QPwdLWi-vEUwNhC0.roa (raw, json)
Hash identifier: Cu6pbI6yjqQKY3v+YFFPEB+jxtb0vEHuTREqK6Sh3oo=
Subject key identifier: 2C:FE:BC:2A:AE:B9:09:DD:90:3F:07:4B:5A:2F:AF:11:4C:0D:84:2D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194282501EC07AD076149D6A0D4A69BE69D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LP68Kq65Cd2QPwdLWi-vEUwNhC0.roa
Signing time: Thu 02 Jan 2025 17:51:41 +0000
ROA not before: Thu 02 Jan 2025 17:51:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206216
IP address blocks: 212.193.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:01:ec:07:ad:07:61:49:d6:a0:d4:a6:9b:e6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cfebc2aaeb909dd903f074b5a2faf114c0d842d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:44:98:70:79:26:20:8b:44:f7:87:86:fb:1a:
56:dd:49:51:87:03:70:73:12:3d:fc:bc:5b:3b:69:
cd:4e:08:2b:62:3a:cf:f1:d9:dc:fa:3d:83:84:c7:
9d:04:db:4c:d1:76:5f:68:89:6a:aa:fd:2e:44:ee:
fe:da:a6:57:f2:12:c3:a8:b4:cd:9a:73:eb:1a:27:
73:d9:0f:5c:05:c7:29:d3:1f:ea:1d:6f:e2:90:14:
2b:5f:2e:3c:f6:87:8b:ec:31:54:5b:4d:c4:8f:e6:
4b:21:5b:51:7d:d8:c3:8c:44:83:46:57:5c:5f:f0:
cd:15:9f:5e:ab:c0:d5:27:ad:f7:06:6b:83:ee:b4:
80:62:30:0b:c1:83:30:e0:67:b7:f6:e3:f1:d9:e0:
70:6c:3f:05:41:89:05:df:42:5b:a6:e7:80:17:0e:
fa:5c:d4:d1:67:8c:0d:a9:9f:79:67:59:b3:21:ea:
d8:be:77:e3:4f:85:c9:1b:5c:4d:4b:c3:46:06:cb:
44:3d:35:8e:95:bf:c3:a2:67:03:d6:4d:f5:d2:c2:
93:c5:0d:07:ed:0f:00:9c:dd:3a:f0:44:c6:29:01:
9b:a7:69:92:cc:b2:81:e6:0b:68:3b:83:26:09:f1:
55:1b:29:d9:8a:31:80:b4:a6:8d:ff:01:67:29:c9:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FE:BC:2A:AE:B9:09:DD:90:3F:07:4B:5A:2F:AF:11:4C:0D:84:2D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LP68Kq65Cd2QPwdLWi-vEUwNhC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:77:f5:e5:dd:84:b4:0c:83:35:c3:b4:f1:52:d9:a8:ce:98:
69:06:b9:17:17:68:e5:35:3c:15:c6:7f:02:7d:e6:e8:e8:5e:
01:13:ae:8c:4f:6c:0a:21:4d:fa:1a:1a:63:4c:e8:9d:31:63:
9f:a9:fb:aa:53:33:a5:57:3e:ae:43:de:4b:ae:ce:76:b9:21:
9a:e1:d9:6e:7a:4e:f3:a1:be:00:74:f9:b7:13:79:ca:4a:9b:
18:30:e0:a5:be:15:16:63:96:a7:a0:78:f8:73:c0:36:48:92:
d4:bd:5e:83:c1:ed:ca:fd:22:d5:76:e8:85:fd:df:b2:81:a2:
56:af:17:52:78:20:39:dc:ea:af:b8:09:d5:55:24:6c:7a:94:
98:d7:d5:44:09:f4:b6:c1:1c:8b:f9:67:a1:51:4c:a5:f1:52:
d1:aa:05:6a:88:e1:e7:9d:61:21:54:4a:99:f7:67:07:b6:b5:
eb:cb:ff:b0:e7:02:37:ec:62:44:40:74:44:e3:e0:87:3a:9a:
32:f2:9c:f1:ce:f6:d9:79:7c:49:07:6c:de:2f:6b:93:05:07:
f3:3d:77:ee:f5:eb:41:a6:2e:06:95:bf:1a:7c:ee:e4:30:a8:
51:aa:4b:5a:16:90:ac:87:9e:e4:2d:7c:73:60:74:64:2a:76:
30:3b:c8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:38 2025 by rpki-client