Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/LPe44qePmYsjs5JCImQ3j4HtZEE.roa
File: LPe44qePmYsjs5JCImQ3j4HtZEE.roa (raw, json)
Hash identifier: b4/slVwf/rvlON641EuwhybFggcU7zD7yd4v22+CS2w=
Subject key identifier: 2C:F7:B8:E2:A7:8F:99:8B:23:B3:92:42:22:64:37:8F:81:ED:64:41
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067CC24D6FC72AF7CF4F7B048FE59EF
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/LPe44qePmYsjs5JCImQ3j4HtZEE.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47803
IP address blocks: 217.192.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cc:24:d6:fc:72:af:7c:f4:f7:b0:48:fe:59:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cf7b8e2a78f998b23b392422264378f81ed6441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:2c:fe:33:45:e9:28:63:57:63:8a:c5:8f:
0b:2e:62:a6:3d:cd:4f:40:1a:b7:2c:da:3a:09:5b:
63:4f:71:65:2e:ac:3b:d7:5c:f5:27:ce:49:6a:ff:
2b:b1:b2:22:7c:ca:e3:35:85:5b:99:17:e1:60:23:
82:c5:70:dc:4a:ce:e1:81:5b:33:b1:dc:1c:4e:06:
ff:d6:d5:67:4c:35:45:f7:9e:cf:7f:9b:4b:eb:c7:
59:ec:17:50:11:2c:9e:d3:d0:5b:f1:a0:e0:87:cf:
93:e7:69:0b:5f:10:35:13:a1:65:61:9b:e6:8d:ea:
79:0d:96:d3:5d:02:cb:f5:d8:62:f9:80:86:d6:07:
3d:7c:dd:30:42:dc:97:14:be:56:46:fa:aa:43:9f:
cb:87:72:b4:65:8a:3a:66:1b:5b:88:40:62:a9:37:
11:64:c5:09:45:cd:f9:bb:33:cb:51:7f:a3:08:88:
a5:d8:5a:18:1d:31:23:9f:c8:84:ed:bd:be:31:bf:
f1:04:e4:7f:76:c3:a3:c3:ed:64:a4:50:9c:64:5f:
0d:8b:e9:95:9c:6f:cc:a3:be:22:24:e3:db:69:dc:
c1:e7:44:41:7c:c3:f2:2d:99:a9:b9:95:eb:3e:f9:
4b:db:50:84:b0:6e:d5:77:cf:f6:ee:b8:f1:d3:18:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F7:B8:E2:A7:8F:99:8B:23:B3:92:42:22:64:37:8F:81:ED:64:41
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/LPe44qePmYsjs5JCImQ3j4HtZEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.192.92.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b5:33:79:90:98:a9:d5:06:a4:6c:3e:4b:b2:61:7d:06:34:
9c:40:59:b7:0f:cb:17:9c:c2:31:1b:03:47:40:99:d1:e3:ac:
fb:7c:46:15:b0:21:f2:1b:a8:93:fd:46:92:55:6a:1d:d0:ed:
f3:d7:07:86:62:92:51:e4:88:87:5b:be:fa:14:73:76:da:db:
ab:a7:0f:17:f9:d9:60:31:48:ca:ff:bd:15:48:59:6f:ee:8b:
fd:fe:d5:57:ba:15:bc:11:1d:ce:de:d3:00:37:04:48:9b:09:
f4:09:7e:66:e9:93:cf:a3:c0:02:32:cb:b7:19:d1:05:6a:d7:
c6:cf:83:2f:e3:0e:a5:a8:c3:61:cf:41:be:f8:19:c2:4e:a1:
15:24:fe:9c:b9:dd:fa:94:d1:3c:23:91:58:ab:ce:bd:70:29:
74:fd:b8:82:a0:9a:07:79:d3:09:b3:a8:f8:8b:25:9a:1e:0e:
01:ae:3a:fb:bf:c9:1d:0c:7a:e7:8f:61:04:25:89:00:00:a6:
8c:e1:3e:58:3f:d0:fe:1f:83:2f:a8:2a:d1:1c:2b:1c:e2:dc:
7b:da:66:35:40:0f:bd:16:95:3f:32:6b:8f:47:11:8a:09:bb:
9c:72:44:90:73:2b:b6:36:87:e9:79:89:ea:c4:cf:0f:87:10:
a2:4f:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:31:58 2025 by rpki-client