Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/Ljv2UgPaOFE3ERmB4rgUv6okXUM.roa
File: Ljv2UgPaOFE3ERmB4rgUv6okXUM.roa (raw, json)
Hash identifier: 4NqznF8HQ3h3IuTIewXo/Zoj/y7IiGwjWIy/bmyiBBY=
Subject key identifier: 2E:3B:F6:52:03:DA:38:51:37:11:19:81:E2:B8:14:BF:AA:24:5D:43
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 0194266C17C51A972EA70627CF03317F0F0E
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/Ljv2UgPaOFE3ERmB4rgUv6okXUM.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199334
IP address blocks: 159.255.146.0/24 maxlen: 24
185.176.132.0/24 maxlen: 24
2a13:c680::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:17:c5:1a:97:2e:a7:06:27:cf:03:31:7f:0f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e3bf65203da385137111981e2b814bfaa245d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:29:8d:94:17:30:37:41:7a:4f:24:f2:a4:
03:d5:b3:0f:02:35:32:86:78:aa:5d:be:ee:02:4e:
47:be:79:a8:29:44:d1:aa:01:61:ee:51:33:5e:99:
78:a4:67:21:97:3d:7e:52:0f:ec:61:9d:1b:73:d7:
65:42:f5:ad:7c:ec:70:f8:68:26:08:b6:5b:cd:cb:
db:79:45:2f:0e:95:ad:88:2d:36:8b:e0:b2:2a:3d:
bd:7f:0d:9c:b2:da:2e:11:0f:c7:18:8a:0b:18:dc:
2a:09:85:05:5d:08:3a:61:51:8f:fc:54:37:e1:ae:
81:84:fe:6b:cb:79:e9:06:9c:75:c5:bd:17:76:da:
a0:5b:fc:f9:77:f6:d6:09:35:11:87:05:61:57:39:
a6:af:18:09:27:8c:51:53:65:27:52:13:15:65:5a:
33:6f:a6:62:af:40:66:96:cb:79:18:62:ad:80:45:
d5:c8:cd:0c:4a:76:69:73:5a:9c:49:da:ce:89:82:
46:08:c6:4b:d6:ae:54:72:fd:94:45:e9:62:0f:d4:
e9:8a:b8:46:cd:4f:02:6b:c8:41:ed:d4:1f:cd:56:
27:5d:45:73:19:55:64:35:da:42:eb:e0:5e:6c:70:
42:01:32:78:37:f7:d5:99:ec:47:7f:05:f1:56:89:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3B:F6:52:03:DA:38:51:37:11:19:81:E2:B8:14:BF:AA:24:5D:43
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/Ljv2UgPaOFE3ERmB4rgUv6okXUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.146.0/24
185.176.132.0/24
IPv6:
2a13:c680::/48
Signature Algorithm: sha256WithRSAEncryption
23:51:af:68:a6:89:fc:29:6e:f3:0d:68:ff:b1:ed:5f:55:21:
ca:9c:85:54:37:1b:70:aa:6d:f8:20:b9:8f:52:05:3d:d5:40:
0c:8d:ee:51:f5:94:4d:b7:9d:2e:dd:99:8d:69:21:bc:73:99:
b8:6c:31:d5:65:81:63:f0:10:ae:f3:0a:02:46:7f:72:99:03:
19:cb:38:a8:78:69:6f:2b:d4:b6:3c:d7:b1:6e:ba:cb:5d:92:
13:54:4b:98:07:07:84:ce:9c:7d:a5:e0:3a:0d:ee:80:6e:59:
20:67:da:bb:f5:6b:41:ae:51:3e:8a:d4:0a:bb:c3:3c:4f:9d:
65:60:37:55:d1:0b:dc:9c:3d:32:85:12:87:8e:19:58:67:9d:
54:e2:3c:16:fc:ea:05:f6:23:c9:52:fb:71:98:b0:66:ca:d6:
09:02:23:34:54:1b:91:fe:eb:7c:d0:d9:2d:db:ad:8c:91:83:
fe:c0:fe:b7:f2:a5:04:a7:26:1e:c3:ff:42:68:59:c8:79:73:
93:da:0c:59:75:18:b4:5b:ec:81:36:5b:e9:a2:4f:b6:09:51:
d2:ba:0e:72:00:30:f0:55:c8:ce:de:0f:dd:60:76:75:83:78:
a0:5c:3b:5d:b5:9f:d5:7c:6b:6e:dc:2a:b7:aa:9e:be:a8:59:
10:45:95:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:52:07 2025 by rpki-client