Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/lchTEZvN-6afhfJLiZL0vloeA9I.roa
File: lchTEZvN-6afhfJLiZL0vloeA9I.roa (raw, json)
Hash identifier: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=
Subject key identifier: 95:C8:53:11:9B:CD:FB:A6:9F:85:F2:4B:89:92:F4:BE:5A:1E:03:D2
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 01942748269C90CF160ABF6B0189A6C5EC40
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/lchTEZvN-6afhfJLiZL0vloeA9I.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57866
IP address blocks: 176.61.131.0/24 maxlen: 24
176.61.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:26:9c:90:cf:16:0a:bf:6b:01:89:a6:c5:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95c853119bcdfba69f85f24b8992f4be5a1e03d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d8:3a:22:c5:c2:68:13:19:43:4c:99:9b:8d:
05:bf:73:e6:56:ad:3c:28:0c:9c:5a:a5:8e:84:d0:
4f:e1:fc:e7:35:86:89:86:4f:92:e7:96:80:33:52:
10:29:7d:e9:b8:21:7a:90:39:63:b0:f0:de:3e:fd:
77:31:13:da:41:cb:4a:5f:57:02:5b:f8:b6:43:4d:
9f:23:6a:c2:2f:1c:48:fa:24:a2:e1:76:9d:45:ec:
48:69:bb:76:9a:37:95:88:54:cc:d5:95:88:17:bf:
db:a3:26:91:a2:31:43:ce:3c:29:5a:e4:8e:3d:26:
ce:81:34:5d:44:cd:65:33:0f:36:a4:08:08:8b:ad:
d0:d3:69:f8:83:7c:ae:54:f6:e6:47:18:3e:83:03:
ee:55:26:c2:17:23:30:8b:fd:1e:c7:a1:b7:22:8f:
59:a1:3d:77:87:8e:b7:6e:01:10:7a:75:b6:05:a7:
26:d2:88:74:75:5e:75:c3:b5:01:b2:8c:73:3a:4e:
21:fe:74:5e:66:5b:2d:29:76:02:92:a7:c8:cb:a7:
66:99:d4:41:25:0f:53:7f:87:8b:5a:a9:fb:9f:bd:
dc:ad:3f:d1:9c:c7:21:03:f5:a3:4c:4d:74:28:2f:
35:6c:40:5c:db:d5:f2:82:03:3d:a5:16:af:4f:51:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C8:53:11:9B:CD:FB:A6:9F:85:F2:4B:89:92:F4:BE:5A:1E:03:D2
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/lchTEZvN-6afhfJLiZL0vloeA9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.61.131.0-176.61.132.255
Signature Algorithm: sha256WithRSAEncryption
87:90:8b:1a:05:10:1d:42:72:2e:14:64:ca:56:26:58:ec:97:
1e:86:be:0a:73:54:1a:2d:70:39:c3:a0:33:03:0c:db:da:7b:
f7:35:71:87:38:4b:57:9f:73:d5:88:38:6c:2f:44:8d:ce:16:
17:82:be:88:f7:e6:d4:42:f5:ee:75:4b:18:23:d2:0e:27:09:
88:65:34:11:b6:64:f2:31:34:e5:2c:d9:4e:12:ee:f7:73:f9:
4a:d8:1c:22:d8:1e:c7:26:07:b9:cc:f1:d2:f3:5f:9f:1e:f3:
0f:f2:11:8a:cd:2e:18:5f:24:d7:1c:41:16:99:48:80:8f:b5:
6f:69:2a:b3:2e:90:8b:ea:81:21:e1:77:e9:bf:a7:89:55:4d:
2b:e8:e9:45:38:db:59:6c:f9:65:ed:29:2b:0b:cd:10:a0:cb:
43:f4:2a:ad:33:0a:f4:94:d4:70:f8:be:99:2b:7a:e2:e7:da:
96:5b:02:64:5b:60:b5:09:7f:77:4e:92:1f:c7:e0:d2:c7:52:
f5:7f:eb:76:d8:c2:a4:5c:37:85:44:35:98:01:23:57:6a:67:
8d:f8:e0:0b:c1:43:ad:6f:05:a5:3f:2a:13:b8:7f:d4:f7:b1:
5b:7a:91:77:6e:d1:69:20:83:3e:b0:0c:db:24:e6:b7:04:c0:
fc:7e:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:19 2025 by rpki-client