Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa
File: CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa (raw, json)
Hash identifier: fnDAooAgubqCaqW4AjdSJ+J1ErpgOuY9lVFJ+sN2CYg=
Subject key identifier: 09:6F:CB:9F:25:F5:CE:E8:24:CC:D3:88:51:DF:17:CE:90:4D:E4:1C
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 0194228D9F70DF5B7FE6F1FBAE0AE98AB1F4
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa
Signing time: Wed 01 Jan 2025 15:48:14 +0000
ROA not before: Wed 01 Jan 2025 15:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13250
IP address blocks: 212.117.192.0/19 maxlen: 29
2a03:380::/32 maxlen: 117
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9f:70:df:5b:7f:e6:f1:fb:ae:0a:e9:8a:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Jan 1 15:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=096fcb9f25f5cee824ccd38851df17ce904de41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:6f:a1:3c:d6:f2:e5:da:1b:23:44:08:8d:
53:41:f8:e7:fc:d6:6c:8a:2a:7c:18:26:e8:ee:12:
3f:75:f8:9e:ab:c5:4d:b1:19:e8:01:c3:19:84:44:
37:cb:55:a3:8a:06:52:3e:ec:95:b8:57:75:8e:13:
aa:12:40:6d:59:16:54:72:94:5d:7d:72:bc:dc:36:
0d:94:86:87:f4:fb:bd:df:5f:10:db:03:30:65:ed:
ce:64:15:70:62:23:5d:22:57:d8:8f:89:6e:fe:62:
19:82:3f:8c:8d:3c:bd:46:f4:23:e0:5d:bb:4a:39:
78:ba:0b:d5:51:7d:6e:d5:3b:47:e3:c1:34:6b:c2:
92:ff:4a:64:72:96:13:99:b8:30:a5:0a:09:a5:65:
0c:90:61:d1:86:a4:f9:2d:db:33:db:2c:b9:00:e6:
53:9d:ff:00:3b:a1:35:a0:39:ec:ec:3d:5c:04:11:
35:da:bd:3f:2b:e5:ae:f2:ae:4e:f6:ef:20:a2:eb:
0e:f3:8a:99:e0:be:92:e5:c1:38:e1:9a:9f:c8:a6:
e7:0b:05:a5:cb:ca:bb:a6:e3:40:f6:e1:5f:db:80:
3f:ae:54:7d:8c:4a:f3:36:3f:47:af:5a:64:29:3d:
8a:12:70:fb:1b:26:b6:b4:c9:3d:73:30:c1:93:0a:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:CB:9F:25:F5:CE:E8:24:CC:D3:88:51:DF:17:CE:90:4D:E4:1C
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.117.192.0/19
IPv6:
2a03:380::/32
Signature Algorithm: sha256WithRSAEncryption
53:26:7a:35:96:8b:dc:c6:c0:c7:df:8a:24:a9:dd:95:aa:93:
6f:0b:ba:52:b5:68:3d:34:62:5a:52:61:90:b8:e7:f5:7e:1e:
4b:89:93:1a:15:cb:83:d8:8b:42:16:69:af:b2:00:02:65:bf:
08:d8:a7:40:e9:37:86:98:8f:39:71:a8:9c:67:08:92:3d:c6:
c1:c4:79:e1:25:35:98:08:f9:45:02:1e:38:87:20:6c:35:fa:
5e:23:c8:3e:41:53:3c:ab:bb:48:33:bf:52:78:dc:3a:67:df:
d8:fe:51:6c:15:92:07:d8:ea:18:49:b9:06:ba:2d:bb:c4:5e:
15:32:e8:dd:47:e9:6b:70:fe:26:ca:b2:a7:a3:68:c6:1d:90:
60:07:86:52:ed:96:b9:e3:8e:ea:c5:7c:b7:c8:5a:7a:4d:5f:
2f:09:02:ab:e5:56:3d:dc:35:44:b9:6a:83:20:bf:b7:c1:6e:
e7:fb:f2:59:4c:87:b6:13:80:38:19:24:48:3a:9c:95:74:db:
98:16:a4:58:ad:23:68:8c:5c:5a:64:60:b3:9b:f8:43:2d:1c:
eb:2e:c5:61:de:89:20:aa:5d:6d:9f:3f:94:b7:1f:c2:7b:16:
a4:a9:af:63:72:2e:b3:7e:b2:d2:eb:63:36:cc:4c:f8:1a:39:
04:e0:bd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:19 2025 by rpki-client