Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/LrhxRNeyx_23QLWa5vtG1ZBXoY0.roa
File: LrhxRNeyx_23QLWa5vtG1ZBXoY0.roa (raw, json)
Hash identifier: /kvdZiHdgr3LrYazf+YoZJL5PqLcDvAeE/KjO0/IEmY=
Subject key identifier: 2E:B8:71:44:D7:B2:C7:FD:B7:40:B5:9A:E6:FB:46:D5:90:57:A1:8D
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019425223C6B219D49B6AD565C4613D1F13D
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/LrhxRNeyx_23QLWa5vtG1ZBXoY0.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212460
IP address blocks: 212.126.113.0/24 maxlen: 24
212.126.114.0/24 maxlen: 24
2a04:2dc0:1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3c:6b:21:9d:49:b6:ad:56:5c:46:13:d1:f1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eb87144d7b2c7fdb740b59ae6fb46d59057a18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:e0:26:72:6d:64:ef:22:6a:b4:02:1d:31:
aa:db:0b:df:fa:ad:e5:d0:b7:4d:ba:d0:21:df:62:
60:97:23:46:21:42:a2:0c:1f:05:c0:23:e7:51:7a:
05:49:e1:9e:66:a5:41:de:11:00:78:91:fe:a6:a0:
0f:5a:d6:45:ea:d6:58:63:2b:a6:fb:da:53:ef:53:
a0:eb:fd:bd:58:cf:79:98:7a:d1:5d:28:e6:d8:11:
29:8c:0e:c1:10:30:0c:e0:2f:a5:7d:f9:b2:19:77:
c8:83:66:f6:3c:ed:91:fa:54:e8:08:56:62:bc:90:
47:f7:73:40:60:8a:58:20:ec:b2:35:1c:c3:c7:02:
15:1a:4c:0c:0e:61:a4:10:dd:6a:f0:99:32:c8:bf:
e9:58:18:12:cc:49:02:1b:fa:f9:ab:59:2e:95:f0:
29:8b:aa:59:10:4f:02:35:f4:a6:4c:05:27:f0:13:
82:77:94:ff:36:06:fe:38:a3:78:72:f0:ab:ef:44:
f3:02:bb:4f:66:4f:b0:b2:58:a2:d0:7a:06:a9:e8:
f3:d6:21:83:57:86:41:75:6c:8e:e9:cc:e0:d4:dd:
bb:07:d9:76:ee:1c:27:ad:96:93:3f:47:32:fa:1d:
b7:f2:a0:fd:b4:6e:b2:b4:e0:5a:d3:c4:cd:12:64:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B8:71:44:D7:B2:C7:FD:B7:40:B5:9A:E6:FB:46:D5:90:57:A1:8D
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/LrhxRNeyx_23QLWa5vtG1ZBXoY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.113.0-212.126.114.255
IPv6:
2a04:2dc0:1d::/48
Signature Algorithm: sha256WithRSAEncryption
69:9a:c0:98:66:0a:26:36:19:f2:09:a6:dd:3f:a3:77:c1:e1:
76:e9:e8:75:9c:1e:f2:64:88:c5:42:39:0f:32:1b:f9:c3:52:
61:bd:a2:60:11:fc:76:82:2e:7a:c1:59:b8:02:2c:b2:7f:ab:
7b:58:5d:12:9f:fd:09:50:0c:13:c2:8f:eb:47:d8:a3:15:fb:
26:ce:27:71:36:3c:a4:ce:b2:f5:d5:39:dd:b0:7f:a0:4c:fe:
41:a2:9a:8e:35:a6:79:a4:b6:50:c3:13:e0:b9:3a:2c:4d:ea:
51:f8:85:d2:99:27:44:79:86:67:53:be:73:06:4a:72:ea:17:
52:c6:a0:08:44:73:46:64:51:15:72:96:10:aa:32:c6:01:ef:
52:39:a0:f6:a4:f7:74:d2:bd:16:ca:e1:a4:41:9a:2c:88:62:
17:c5:47:03:44:bb:33:51:08:fd:3e:d4:a5:05:ce:7c:1d:7a:
50:73:02:11:3c:94:45:59:86:a4:6d:f8:86:57:3c:b3:60:38:
00:bd:3e:3c:b8:fb:9f:94:57:9f:8d:d2:91:1a:06:d9:fd:70:
d0:d8:e3:a4:96:de:b9:6c:3c:b4:26:eb:ac:d4:be:4c:62:72:
3c:0a:5b:ce:d1:ca:52:ae:60:2e:16:63:cd:88:8b:cb:29:0f:
0c:c6:cf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:54:03 2025 by rpki-client