Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa
File: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (raw, json)
Hash identifier: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=
Subject key identifier: 2C:C3:87:20:6D:AE:2D:A6:3A:19:91:D9:1D:9D:8B:BA:FC:6A:CC:A3
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019423D70C8E52F6C851FEA519BD144D80BD
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200343
IP address blocks: 217.175.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0c:8e:52:f6:c8:51:fe:a5:19:bd:14:4d:80:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cc387206dae2da63a1991d91d9d8bbafc6acca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:6a:db:f1:0f:6d:35:a6:93:67:05:3b:27:
87:f8:44:dc:81:fd:b7:69:a8:15:c0:b7:0d:ad:8c:
2c:67:5c:76:6e:02:24:31:86:d3:46:37:cf:d9:3c:
02:f3:c7:bf:17:aa:54:32:3c:b9:f2:f5:ae:59:ec:
09:76:44:cb:5c:d3:ac:14:45:32:dd:16:07:ff:75:
82:eb:21:a4:75:0c:d5:09:d6:c4:5b:4b:1f:b9:c5:
00:e2:a7:fa:18:7a:71:46:c4:93:23:c8:86:33:d2:
12:83:62:5c:85:0f:68:3f:8e:44:b1:41:d1:57:e2:
fc:0f:e2:94:4e:fa:4d:8b:f9:16:98:e5:8d:3c:f4:
98:7e:15:9b:6d:e7:88:1d:6f:d9:26:bb:c4:97:41:
82:0e:cc:48:17:4a:48:cd:8a:f9:90:76:bf:11:80:
98:5e:5a:fc:50:ec:7b:5d:d1:af:a2:4e:2d:6c:33:
a6:6e:b6:53:37:15:45:8b:22:d0:b4:a5:07:61:be:
63:e9:80:35:35:5c:d7:fb:82:ae:9c:41:24:c4:0a:
df:c4:48:44:1f:00:db:83:d4:c7:45:ae:e3:6f:31:
f1:29:fc:0c:40:33:63:c5:b3:bf:26:44:04:99:9d:
1f:3d:63:5b:c1:75:dd:79:82:3b:78:9c:fe:7c:e9:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C3:87:20:6D:AE:2D:A6:3A:19:91:D9:1D:9D:8B:BA:FC:6A:CC:A3
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.175.95.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e9:e5:9a:9a:fc:cb:54:99:3b:8d:c6:fd:9e:70:0a:aa:61:
84:f6:48:c7:ad:71:22:0b:1e:49:fb:12:74:44:ff:59:c3:d8:
1f:0a:5c:c8:ff:bc:f9:5f:b6:21:24:e8:21:2c:fa:82:5b:18:
9d:b4:9e:7d:70:94:f8:21:ca:bd:23:67:fd:50:81:d6:5a:ab:
4f:cc:c2:a0:bc:ad:86:63:be:e7:8a:bd:b7:a0:58:34:1a:dd:
49:d9:26:30:5f:01:04:1a:78:18:2a:9f:ce:19:5c:52:f6:34:
20:af:82:f6:ef:a7:9b:8d:29:9d:ac:41:a2:23:77:7f:19:67:
3f:d0:bf:ff:00:b2:60:20:fa:86:80:63:c7:32:99:c0:ee:10:
2f:be:23:95:17:1c:a1:e0:9a:21:37:3e:5b:b6:45:16:fa:4f:
25:21:85:aa:80:0d:f4:ae:dd:df:df:89:8b:dd:95:24:56:b6:
03:18:01:57:65:33:88:ec:41:42:b8:54:96:ab:63:1f:03:ef:
98:1d:c1:61:20:79:1b:7c:6a:76:7d:3e:53:d5:1f:b1:50:98:
15:18:a1:7b:25:3e:55:91:8c:c5:a5:d9:ef:49:3a:9a:9f:ea:
ad:11:a0:16:45:a7:48:5a:f0:5e:4d:94:e6:ff:19:4d:78:41:
8d:ba:cf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:18 2025 by rpki-client