Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LnxAgTS7aHjuUZKSaus2dBwxE0E.roa
File: LnxAgTS7aHjuUZKSaus2dBwxE0E.roa (raw, json)
Hash identifier: Xe+kRt/KrEYIHS1VRQovSbkEwXrXMdbPlLXUuzLPASc=
Subject key identifier: 2E:7C:40:81:34:BB:68:78:EE:51:92:92:6A:EB:36:74:1C:31:13:41
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FE833353D21ABEA0AAECD901F7A8A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LnxAgTS7aHjuUZKSaus2dBwxE0E.roa
Signing time: Thu 02 Jan 2025 05:49:35 +0000
ROA not before: Thu 02 Jan 2025 05:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200218
IP address blocks: 93.170.212.0/22 maxlen: 24
93.171.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:e8:33:35:3d:21:ab:ea:0a:ae:cd:90:1f:7a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e7c408134bb6878ee5192926aeb36741c311341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:92:71:6f:1a:37:9a:04:19:75:e7:c7:cc:14:
e5:db:fa:6b:41:4e:ea:b2:66:4d:3c:d4:09:0a:fe:
aa:eb:65:9d:b3:1d:2d:4d:ab:e7:82:4e:d7:e7:8e:
9b:9a:94:e1:34:d4:57:1a:fd:ef:3c:14:a7:22:b2:
13:60:7e:c8:35:66:6f:19:f0:a9:ca:ef:ed:ee:c2:
a5:d7:36:83:35:76:6a:2c:b8:7e:73:60:c6:83:60:
b6:29:85:0b:ac:91:bf:dc:e8:d0:cf:91:b8:c5:be:
11:5a:06:4c:1b:00:25:a0:89:42:34:89:9f:df:aa:
a2:bd:a0:7d:7b:e8:a2:92:a6:e5:ac:b4:34:de:34:
02:7c:ec:7e:2a:24:11:f1:b2:96:ad:55:4d:ca:3f:
8f:35:4c:36:7a:8f:d1:68:d0:58:69:5e:07:2f:1a:
3c:da:29:3e:5f:76:2b:37:fa:a5:71:9b:76:4c:f6:
6b:85:69:c1:36:e8:9c:f8:54:71:04:b1:ce:0f:3c:
f2:43:c9:6c:d2:1b:81:a4:6e:55:f1:34:43:22:f1:
7b:55:d3:3d:96:76:4a:93:51:f9:e0:69:ba:08:a2:
bd:06:5d:0b:9d:34:46:1b:d4:c1:fb:71:44:fb:cf:
68:0a:d8:6c:1e:18:c8:30:7d:48:40:e8:3f:26:17:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7C:40:81:34:BB:68:78:EE:51:92:92:6A:EB:36:74:1C:31:13:41
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LnxAgTS7aHjuUZKSaus2dBwxE0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.212.0/22
93.171.0.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:ae:f5:5f:ac:e0:5b:fb:8a:dc:e8:7c:ac:b6:1d:aa:aa:c1:
d9:ce:80:59:fe:f9:4e:7d:d2:48:df:61:41:be:c2:90:a4:ff:
bb:8f:72:ae:57:82:cd:93:7e:a3:45:96:18:2d:b1:78:bd:0c:
0f:63:be:25:c2:31:0f:70:c7:ae:36:33:a5:c3:cc:18:ce:fc:
1a:55:14:52:e6:f5:1a:d6:21:20:66:ec:00:e2:71:6d:b2:24:
b3:76:72:31:95:b7:ae:7b:51:53:50:52:c5:89:d4:88:c8:d7:
b2:62:14:fe:99:95:50:24:e0:f1:c9:8c:7e:ac:0c:c0:9c:a0:
42:77:1f:3f:fb:c4:94:f7:cd:62:bd:ae:9f:3a:f2:73:20:f3:
ba:46:c7:3d:17:94:75:4c:7d:39:fc:72:0b:f8:e1:ec:27:79:
56:0c:5d:34:ee:8d:55:d5:e6:29:53:ed:00:14:e4:f1:14:4a:
eb:32:27:99:f0:0f:46:5a:19:06:e7:d7:c3:4d:de:6b:3f:bd:
b2:da:40:c5:c8:29:24:29:7d:06:66:95:94:3d:8c:9e:84:c7:
37:e1:a8:cc:f2:16:4f:6f:d3:0c:83:1f:3a:09:69:64:39:a0:
6e:ba:cd:ed:1c:b2:b7:f4:56:3f:69:a1:dd:f4:27:33:3f:83:
46:a7:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:25:55 2025 by rpki-client