Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Lgwdok-1ENtHjVBIQF-pAptCF0w.roa
File: Lgwdok-1ENtHjVBIQF-pAptCF0w.roa (raw, json)
Hash identifier: 6OsDAogte1xO9x5sL1r+Bk7F8UUpoYBryq/iJnsFwAE=
Subject key identifier: 2E:0C:1D:A2:4F:B5:10:DB:47:8D:50:48:40:5F:A9:02:9B:42:17:4C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195D7C50CD860A30AF99BC41FCA007F1A70
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Lgwdok-1ENtHjVBIQF-pAptCF0w.roa
Signing time: Thu 27 Mar 2025 13:22:50 +0000
ROA not before: Thu 27 Mar 2025 13:22:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212025
IP address blocks: 193.124.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:c5:0c:d8:60:a3:0a:f9:9b:c4:1f:ca:00:7f:1a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 27 13:22:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e0c1da24fb510db478d5048405fa9029b42174c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:97:0f:04:ca:45:46:e1:87:85:1c:3f:78:
54:8f:15:4b:13:e8:5f:ca:e5:93:37:cb:e3:51:53:
f6:d9:7d:23:15:4e:76:71:3b:02:71:c6:03:02:e0:
d9:58:41:04:c4:0a:7b:ee:3c:98:e2:93:b2:93:b9:
69:ec:a2:cf:83:e0:a9:df:47:ef:04:b7:96:de:a6:
a2:26:16:98:b4:2a:79:a0:58:b6:da:55:a5:16:41:
57:f5:eb:72:d3:22:50:e6:eb:99:da:ef:24:e5:cf:
a6:bf:10:22:7d:e8:75:98:23:ed:e3:02:29:ce:d9:
65:d5:20:dc:11:56:55:23:81:f7:0b:e4:63:54:2a:
08:73:82:e0:9a:68:d2:20:48:92:b8:73:5c:20:96:
e8:bb:85:01:d5:65:dd:03:37:35:36:f0:3b:35:db:
60:bc:9d:9d:d2:37:67:18:a2:bb:9a:b4:1c:c2:51:
ea:a3:a7:f3:40:14:36:20:07:14:d0:0c:86:fd:eb:
cd:89:3d:e2:34:61:c6:6f:32:04:27:93:8f:26:ce:
8c:06:1b:d9:9a:dd:31:10:10:3c:70:e3:a8:4c:8b:
51:7a:60:70:16:4b:5c:70:f1:3e:0d:cb:ca:a3:31:
68:a5:d5:3f:75:fe:60:6e:c2:ed:a5:77:ec:c4:ac:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:1D:A2:4F:B5:10:DB:47:8D:50:48:40:5F:A9:02:9B:42:17:4C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Lgwdok-1ENtHjVBIQF-pAptCF0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.207.0/24
Signature Algorithm: sha256WithRSAEncryption
66:18:47:e0:f1:09:49:26:f8:59:2c:ff:f4:5c:d0:6b:b5:00:
4c:4d:ea:4e:94:6b:17:2c:1f:08:ea:56:9f:61:44:bc:ff:ff:
3b:c8:54:44:4c:15:07:ab:3d:5f:49:7c:ad:f5:6d:20:63:16:
49:f7:58:b7:1d:5a:9b:e9:cb:13:f8:86:76:dd:fe:5c:7b:3b:
8f:03:52:43:8a:0d:b4:70:a1:9d:91:80:87:9a:83:23:4b:be:
3a:bf:f5:25:71:d1:ee:fe:08:22:16:25:79:c5:62:70:b6:b1:
b7:41:74:0a:16:c9:86:65:99:9f:7c:9f:ea:22:fb:29:54:7d:
73:36:a6:2b:2a:99:3b:49:a6:1d:f8:ec:14:5a:23:97:29:c4:
cb:1b:03:1a:1d:a0:77:c6:d4:68:a3:c9:54:39:67:f7:24:7a:
02:e6:82:f6:1e:7f:db:bb:6f:63:ce:37:93:c3:5b:cc:55:73:
cc:24:2e:74:a9:bc:8d:70:f3:72:90:3b:cf:ec:c3:de:7c:b4:
4d:ce:9f:6c:19:63:6f:a0:99:bd:8a:52:bd:f5:b5:15:27:5c:
a9:d0:da:56:11:5b:03:73:64:1a:1b:d9:63:c5:9c:3a:40:aa:
a2:ae:53:ae:fe:e6:4b:d4:a8:7f:bb:be:18:06:6c:19:86:57:
05:09:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:35:33 2025 by rpki-client