Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/LzvNqjZjSXd-VoA3XyxYbK3-ROk.roa
File: LzvNqjZjSXd-VoA3XyxYbK3-ROk.roa (raw, json)
Hash identifier: IXlBtSHgll3EWlIRCHI/7XXmqvwCKUDds5SRDvZb09g=
Subject key identifier: 2F:3B:CD:AA:36:63:49:77:7E:56:80:37:5F:2C:58:6C:AD:FE:44:E9
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0195A8348911518208AB7F64B88274F04391
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/LzvNqjZjSXd-VoA3XyxYbK3-ROk.roa
Signing time: Tue 18 Mar 2025 07:42:49 +0000
ROA not before: Tue 18 Mar 2025 07:42:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139880
IP address blocks: 45.135.237.0/24 maxlen: 24
202.71.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:34:89:11:51:82:08:ab:7f:64:b8:82:74:f0:43:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 18 07:42:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f3bcdaa366349777e5680375f2c586cadfe44e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:1b:0f:d7:91:8f:85:b4:db:3c:1b:0f:31:
77:03:69:77:7b:89:5f:89:01:d4:44:15:3f:ce:26:
96:10:52:44:00:31:17:21:69:cb:c0:fd:f5:fd:f6:
d5:78:1c:fa:b3:2e:7a:93:6e:ff:c6:49:1f:bb:88:
f4:a6:95:75:c4:e2:a8:e8:11:bd:b8:b6:9b:d8:a5:
25:3f:be:d2:68:8d:4b:88:21:9c:d0:70:c2:cc:24:
d4:82:b1:11:47:ef:07:0d:02:fa:42:1b:ff:8a:4d:
7f:b3:6a:af:ff:06:81:f8:22:44:aa:aa:7d:78:e2:
e8:9b:47:72:4c:05:69:6b:55:35:e3:92:ef:bf:51:
c9:d6:b4:c6:a1:1e:45:06:6f:ca:7d:af:6d:ce:b0:
72:01:2f:af:d8:2b:7c:65:a4:b0:74:62:46:35:db:
56:92:ad:0d:47:c0:ff:5b:b0:84:55:47:54:0e:64:
1d:d2:79:fd:81:b4:28:b3:f3:9c:63:2f:98:36:39:
4a:0d:cf:98:05:ca:46:df:63:51:ef:96:77:96:eb:
6f:92:41:f1:02:c6:11:57:80:26:03:78:49:ec:e7:
81:e2:2f:7d:3b:63:fd:33:01:51:45:3a:cc:88:f7:
e3:cd:4d:db:10:17:2f:4b:b0:8d:42:1c:d7:a7:05:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3B:CD:AA:36:63:49:77:7E:56:80:37:5F:2C:58:6C:AD:FE:44:E9
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/LzvNqjZjSXd-VoA3XyxYbK3-ROk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.237.0/24
202.71.4.0/24
Signature Algorithm: sha256WithRSAEncryption
af:42:c9:ea:50:c0:72:16:c2:1a:38:53:5e:35:3e:fb:3e:ac:
85:52:5d:02:d7:5d:4f:a6:1e:9e:ea:50:13:67:63:cd:d1:59:
73:b6:4d:b9:7e:bc:6d:d0:c7:e2:b3:0d:b8:79:ae:67:68:b6:
12:f5:9c:51:7c:bc:c7:da:34:90:fb:0c:25:29:c0:b8:b9:56:
26:54:3d:c6:86:f5:f8:55:0c:fa:45:d9:5d:f5:10:ef:8c:f3:
1c:05:66:3d:55:d1:56:4a:b9:55:79:a5:52:b2:cc:24:96:43:
4f:ef:5c:66:1c:cf:a5:d1:ba:60:98:18:7e:bb:73:50:90:d2:
51:22:b1:c3:da:54:18:34:c3:1d:7d:b6:03:59:bc:61:00:52:
76:2e:e6:4a:8e:1a:cf:95:cf:c7:3c:e6:0c:35:52:53:05:97:
1a:ba:30:df:73:21:8f:08:70:3f:e1:ed:3a:83:61:a0:7e:7a:
6e:ff:18:11:21:2d:11:29:26:13:56:20:5b:17:f9:62:05:48:
0f:09:46:28:52:25:96:46:7a:89:37:c3:c3:12:db:9f:78:f6:
c3:06:bd:3a:1b:e8:f4:51:92:ce:fc:91:0d:9e:37:65:55:0d:
70:9b:ee:ad:6c:7f:a0:52:2b:7c:c2:47:1f:80:71:fd:47:af:
ac:f8:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:38:12 2025 by rpki-client