Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/LcqA1FyurXZ5e1he7ikoO7JKpHc.roa
File: LcqA1FyurXZ5e1he7ikoO7JKpHc.roa (raw, json)
Hash identifier: 4KKY+sgwBkhvKSEDZDUp/UHDifwj9YW4zI4Vl78eic0=
Subject key identifier: 2D:CA:80:D4:5C:AE:AD:76:79:7B:58:5E:EE:29:28:3B:B2:4A:A4:77
Certificate issuer: /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial: 018CFF6B7261153A85F3FA2D209840AC3B70
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/LcqA1FyurXZ5e1he7ikoO7JKpHc.roa
Signing time: Fri 12 Jan 2024 20:44:40 +0000
ROA not before: Fri 12 Jan 2024 20:44:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 212.46.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ff:6b:72:61:15:3a:85:f3:fa:2d:20:98:40:ac:3b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Validity
Not Before: Jan 12 20:44:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dca80d45caead76797b585eee29283bb24aa477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:57:36:dc:68:01:a8:ea:69:7b:6a:a8:61:
f7:5d:0e:22:d3:88:a6:19:b2:75:b6:bb:2c:08:d3:
1a:a5:03:c7:7e:b2:5a:68:77:34:b7:85:89:32:fd:
74:49:77:7d:22:af:03:0b:ac:d4:fa:fd:47:f5:17:
52:5a:30:3a:8c:71:a6:95:a2:73:de:5b:57:3b:2d:
de:dc:6f:7c:2a:61:1c:3c:01:da:51:c9:f6:e6:54:
be:82:4e:d6:3c:d0:3a:f4:4f:02:8d:39:dc:96:0f:
27:4d:46:f8:98:03:66:c9:5e:b8:4c:b5:97:6d:5c:
f2:be:47:bd:b1:45:17:d3:63:90:79:43:ac:8a:68:
30:cd:be:da:00:a8:ad:2b:d6:61:49:4b:f0:ba:80:
fe:0b:73:2a:19:e1:e2:71:11:73:22:a7:b0:79:5e:
9a:d4:9f:3e:63:e4:19:b6:5a:0d:a6:e0:bd:80:9e:
b4:7d:9c:71:16:ec:71:2f:69:df:a5:5c:bb:8d:d6:
67:72:15:58:3d:0c:95:12:b2:53:be:c5:ff:62:dc:
37:e1:03:bf:52:44:bb:7a:ce:76:84:b9:18:63:cd:
8b:44:b5:d7:a4:85:33:29:9e:3b:1a:07:c4:dc:7a:
42:b6:54:0f:16:08:38:6f:d0:5a:8f:dc:5e:5d:83:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CA:80:D4:5C:AE:AD:76:79:7B:58:5E:EE:29:28:3B:B2:4A:A4:77
X509v3 Authority Key Identifier:
keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/LcqA1FyurXZ5e1he7ikoO7JKpHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.42.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:20:d7:51:48:b9:29:33:32:c7:07:dd:2e:2e:75:e9:97:a6:
11:e3:79:cd:23:8f:bc:c2:94:6e:f8:a4:fc:91:4f:0c:07:cd:
89:56:1a:15:39:0f:59:6b:db:a9:18:4c:f3:53:af:8a:95:ac:
3b:4a:6c:c8:53:80:99:c1:c8:3f:a1:cf:00:bb:4a:d4:dd:93:
45:c2:e6:9e:ce:3a:d6:a8:ed:f1:e5:20:9b:b5:a5:21:b9:e4:
9c:85:48:03:b4:fd:5a:8c:f6:5d:de:44:84:0a:3c:ef:5f:0e:
b5:7b:95:25:6a:4c:0f:b0:b3:c2:06:1f:57:cf:36:be:48:e3:
4b:1f:19:3d:79:ee:f5:6a:7f:9a:04:5e:9f:c2:ce:da:7f:60:
a2:35:6c:1b:5f:f9:0b:01:23:0e:c2:7c:2b:b4:2d:17:1d:39:
1b:81:7b:5e:f4:68:c5:48:80:16:ad:5d:97:29:2f:6a:55:8f:
e0:d0:92:1a:44:50:3a:c9:4c:59:3e:1f:49:4b:44:3b:fe:7f:
b0:6c:c5:e1:3f:30:12:63:f4:8a:90:8e:d6:ee:b7:ee:93:dc:
c0:df:a7:60:ae:38:f1:87:6b:28:85:a5:1e:59:43:d4:76:9d:
29:80:15:43:e6:99:df:77:8f:3e:9f:25:ba:ce:b1:22:30:23:
e0:64:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:46:37 2025 by rpki-client