Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/LjTHS4WiiLbIvDv29J3ieyKf9N4.roa
File: LjTHS4WiiLbIvDv29J3ieyKf9N4.roa (raw, json)
Hash identifier: 0M1gHDPS8KhOTlzfhUcKPBiuX1DLKJxKwDXRimBbw2c=
Subject key identifier: 2E:34:C7:4B:85:A2:88:B6:C8:BC:3B:F6:F4:9D:E2:7B:22:9F:F4:DE
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 019427B5063A2C85D1B06E02B4C63A91CA3E
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/LjTHS4WiiLbIvDv29J3ieyKf9N4.roa
Signing time: Thu 02 Jan 2025 15:49:22 +0000
ROA not before: Thu 02 Jan 2025 15:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8839
IP address blocks: 212.95.64.0/19 maxlen: 19
213.225.160.0/19 maxlen: 19
2001:810::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:06:3a:2c:85:d1:b0:6e:02:b4:c6:3a:91:ca:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Jan 2 15:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e34c74b85a288b6c8bc3bf6f49de27b229ff4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:c7:34:b3:1b:29:73:a8:81:ae:5d:33:3a:
3e:9b:3a:16:cc:17:89:32:a7:42:75:5d:df:90:9e:
19:79:4a:a0:c2:4e:9f:94:88:77:2b:3d:9d:a3:cc:
c3:a2:f9:78:97:50:7c:10:13:1b:84:42:57:09:6e:
3f:80:a5:71:95:e0:36:d4:28:c9:ec:91:e4:cb:21:
b0:03:e0:36:f7:fb:8e:40:41:83:be:f2:7d:88:b2:
c8:10:e7:41:6c:ad:c1:d8:5c:10:a6:60:e8:e9:4b:
09:fc:a8:7b:47:18:0a:cb:e3:32:5b:c8:e5:d3:e6:
ea:c2:15:b6:bc:58:e0:56:10:54:4d:03:ef:40:d1:
5f:d5:7c:38:e1:ba:ba:27:ab:d9:89:57:ec:0e:c1:
bf:31:f5:1f:b3:b9:c4:9a:fd:56:b1:5e:18:63:18:
6a:6d:26:39:2a:69:54:96:0e:89:c6:ee:4f:67:de:
17:f8:9b:42:53:11:44:02:a4:83:a0:8c:f6:7a:0d:
99:7b:d6:03:74:b6:45:f9:5b:fd:70:ea:8e:84:d2:
a7:93:06:6e:c3:c6:36:ed:7a:4c:10:e8:c1:f4:cb:
a7:10:59:e4:8e:4a:7c:a8:d7:88:61:9e:0b:48:7e:
cb:58:00:41:67:42:5c:38:d8:41:9b:d3:55:64:d3:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:34:C7:4B:85:A2:88:B6:C8:BC:3B:F6:F4:9D:E2:7B:22:9F:F4:DE
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/LjTHS4WiiLbIvDv29J3ieyKf9N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.95.64.0/19
213.225.160.0/19
IPv6:
2001:810::/32
Signature Algorithm: sha256WithRSAEncryption
9e:53:1b:ae:dd:60:93:ac:76:a2:61:aa:4e:ac:bc:b8:66:ca:
fd:71:98:20:bd:04:14:35:1a:b2:d8:53:4d:ad:03:33:0a:57:
30:f5:9d:9e:fd:ce:a0:33:bd:0d:82:b9:7e:a7:e0:a6:7e:1f:
63:9d:81:b8:59:4a:d9:82:55:a6:10:40:c5:ff:83:1c:4b:91:
27:0c:55:2c:1b:7a:2c:58:90:87:76:a0:e1:9e:3e:80:bd:1e:
05:b0:b2:fe:b8:db:e8:5d:79:22:a3:55:ee:6a:c8:4f:be:23:
e5:fb:37:d2:b4:ce:f6:8e:5d:8c:76:71:bc:2c:64:da:01:7b:
9c:11:aa:d6:3f:d9:ce:54:3c:79:08:75:c9:82:a3:f8:7f:d9:
84:5c:d2:ab:3c:fc:80:fb:d7:6f:6e:58:7b:96:e4:5c:f3:80:
e2:e5:ea:47:00:52:a3:0e:17:d4:41:56:1d:80:e1:65:41:dd:
9f:71:aa:eb:ff:0d:8e:16:c1:28:4c:d7:fa:2d:e1:9b:47:53:
c9:1a:f0:00:03:60:5e:fc:28:85:17:9f:72:14:49:b6:7e:de:
46:f4:c5:36:95:f5:65:91:e7:54:e5:e4:c1:bf:a5:97:9c:27:
29:8a:85:ee:5b:a9:94:3f:d3:46:18:7d:01:1c:37:b1:0c:ef:
de:b7:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:21 2025 by rpki-client