Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/LOXDeYMWSoSqHKGpdBJSbPBhAM4.roa
File: LOXDeYMWSoSqHKGpdBJSbPBhAM4.roa (raw, json)
Hash identifier: qhHw+2YmH34b7VZrJfMxpamNK37LBwdu9TF5rYvLpBM=
Subject key identifier: 2C:E5:C3:79:83:16:4A:84:AA:1C:A1:A9:74:12:52:6C:F0:61:00:CE
Certificate issuer: /CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Certificate serial: 019422202FE601549C7CCE4414AC2E35EC07
Authority key identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/LOXDeYMWSoSqHKGpdBJSbPBhAM4.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43259
IP address blocks: 89.145.170.0/24 maxlen: 24
89.145.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2f:e6:01:54:9c:7c:ce:44:14:ac:2e:35:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ce5c37983164a84aa1ca1a97412526cf06100ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:06:7b:8b:43:31:05:73:6f:06:28:e9:8c:
72:67:30:50:ab:97:89:22:34:da:72:27:d2:e5:ec:
1b:ef:e9:17:f1:9c:69:75:78:28:4f:8a:d5:5a:dc:
7e:01:da:eb:12:08:a2:1b:81:a1:06:f9:93:e7:b3:
52:10:94:d2:68:0b:27:84:76:60:87:5a:8c:32:ba:
92:38:44:f2:31:ec:33:3b:97:f8:2a:fa:f0:30:cc:
72:4d:88:b9:83:d4:69:9e:19:6b:ab:dc:4b:a5:a6:
48:b0:e5:78:3a:d5:43:30:bf:95:59:fa:4e:0c:8a:
06:e7:71:28:81:76:92:8b:eb:87:e2:d5:99:7c:0f:
52:47:83:30:18:00:85:a8:b5:2a:16:c6:fc:91:bd:
d8:c4:96:f4:fa:93:06:70:ab:28:7f:85:4f:e8:9a:
8f:0c:64:01:bf:4b:00:82:19:24:55:4c:a0:e2:15:
35:62:7a:85:2c:c4:9a:b7:e4:6c:27:97:eb:f9:da:
2b:3e:0f:6d:6a:53:68:a0:05:24:a1:45:26:94:f2:
1b:3f:40:e2:8e:52:44:99:ab:3d:5e:86:51:35:f6:
55:05:31:d6:36:26:eb:35:43:cd:5f:86:5e:35:00:
4f:b3:9b:0b:2d:c4:5a:a0:c4:7e:20:39:1b:a9:10:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E5:C3:79:83:16:4A:84:AA:1C:A1:A9:74:12:52:6C:F0:61:00:CE
X509v3 Authority Key Identifier:
keyid:C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/LOXDeYMWSoSqHKGpdBJSbPBhAM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.145.170.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:49:24:3f:d8:ad:ff:ed:ff:a3:ed:a5:55:57:1f:ea:e3:9c:
68:34:c9:cf:5c:aa:9f:7d:4b:e1:86:6b:6d:f8:6f:43:2e:ab:
94:03:35:56:f9:5b:60:62:3d:28:c8:b0:45:a5:1f:15:84:ce:
44:3f:2e:cd:5a:53:e3:62:fe:58:06:25:0a:a2:34:a9:ad:ad:
1c:f1:15:58:ba:43:ee:87:73:83:51:e3:8e:db:cd:fc:87:63:
64:e9:5c:09:8f:d4:48:67:a5:0a:b9:ec:ee:a1:8f:a1:36:5a:
07:20:5e:db:a4:66:f5:4d:1d:c5:51:29:0e:73:19:0b:c7:3b:
22:0e:de:36:4d:05:e2:3a:44:c1:7f:dc:8a:ae:2c:b7:e8:04:
0e:ec:cf:ba:0f:c3:2f:12:0a:41:b7:be:19:36:42:97:95:15:
95:8a:26:ca:98:7b:fe:fd:87:84:5f:c1:41:96:35:c6:b8:77:
4a:58:3a:a3:95:36:e7:f4:97:53:1e:46:88:d5:1c:e5:67:e4:
e8:39:ed:03:0d:55:41:ff:d2:f3:f5:51:32:96:0c:f6:95:a6:
c9:f4:47:d0:9c:5f:1b:40:3b:0d:b1:3e:d3:3d:9d:56:28:4a:
a2:e0:98:27:80:f8:a2:22:6c:09:3e:d3:8c:fd:b8:d9:86:4f:
b8:ba:7b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:03 2025 by rpki-client