Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/luug-CwXmvS54qQ88cgMGt-f5zU.roa
File: luug-CwXmvS54qQ88cgMGt-f5zU.roa (raw, json)
Hash identifier: HAfj14rHhfvfAv/i1MqUIJYZwmFczeoc01ZA/poLVk8=
Subject key identifier: 96:EB:A0:F8:2C:17:9A:F4:B9:E2:A4:3C:F1:C8:0C:1A:DF:9F:E7:35
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0194258F9F6B1EDBFD9B4F1EAC5DB176ADA8
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/luug-CwXmvS54qQ88cgMGt-f5zU.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50330
IP address blocks: 213.244.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9f:6b:1e:db:fd:9b:4f:1e:ac:5d:b1:76:ad:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96eba0f82c179af4b9e2a43cf1c80c1adf9fe735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:7a:84:5a:e3:db:f7:f4:2f:c0:54:a2:67:
6d:78:9d:30:87:95:07:ae:af:db:9f:16:06:8d:7b:
15:e9:83:99:29:ac:7f:3b:f2:ea:83:57:69:49:e7:
a1:f7:b5:c5:cb:ea:f0:34:35:fb:b2:aa:0e:22:47:
26:09:6d:af:79:f3:02:a3:aa:ff:29:9e:da:b0:f7:
ab:3e:6e:41:74:90:fb:32:b8:48:b4:57:da:2c:e8:
4d:a1:f3:60:12:43:ac:75:83:49:bd:f6:79:15:98:
5d:61:48:d4:57:3b:3f:19:82:0e:41:80:fd:2f:56:
14:50:77:e8:27:ab:5f:08:20:09:85:d7:1d:e7:29:
d9:6b:37:c4:82:3f:df:23:32:18:cb:3d:77:54:83:
b4:cd:ec:92:a6:dc:53:9d:0d:d2:31:45:5f:a6:b5:
ab:eb:24:4f:57:a0:fe:f8:5e:73:71:d2:8a:78:58:
33:2e:c9:56:c8:2b:ab:f6:bd:7d:95:f3:87:a7:97:
57:34:eb:59:30:1b:d8:fa:1b:49:bc:91:cc:0e:c3:
1e:cf:ec:37:0e:fc:db:b7:56:47:af:09:ba:c3:20:
46:df:d1:16:62:c6:8e:f5:0b:ce:f7:67:43:3d:c1:
b6:8d:b3:a7:62:60:16:ab:93:46:86:2b:b4:ec:20:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EB:A0:F8:2C:17:9A:F4:B9:E2:A4:3C:F1:C8:0C:1A:DF:9F:E7:35
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/luug-CwXmvS54qQ88cgMGt-f5zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.244.121.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0c:36:7d:e0:ff:cd:a9:66:e0:c4:90:15:51:8a:8d:a6:95:
af:ed:42:69:02:3e:87:9e:e1:90:ec:ad:06:34:fb:09:09:1a:
fa:4b:7a:c3:ee:20:0f:73:2c:be:4c:e8:92:7e:e3:12:ad:fc:
0e:37:b9:09:3e:14:66:8f:37:49:90:9b:95:a3:58:d9:e7:d5:
c8:c6:b5:7d:3a:37:f1:e9:8d:e6:6b:24:f2:a0:98:86:83:6b:
c9:f0:06:bc:92:ae:55:8c:79:e0:a5:30:02:26:b5:c1:a3:e9:
41:9c:02:29:9f:2e:bf:8d:7c:8d:af:d3:d6:ab:5b:2c:16:a9:
6c:a3:a8:19:fc:24:53:ab:6c:c1:70:92:06:c1:70:ce:09:3b:
50:7e:b9:03:e1:e4:bf:f0:a8:61:9d:83:84:cd:5d:0d:5a:36:
45:51:7c:cb:94:96:e8:25:a0:f8:d1:52:85:ee:aa:a2:3d:98:
29:78:77:b5:8d:3d:01:3e:82:29:4a:f7:89:2a:54:d9:08:0a:
68:c9:25:aa:9d:c0:e5:b7:65:48:c7:9b:44:a4:46:5d:55:50:
8b:99:c2:b9:9e:18:60:8f:9e:32:81:ac:69:a3:f5:30:b6:34:
b9:2b:1d:03:dd:34:20:16:50:00:1d:68:66:99:9f:07:4c:78:
11:43:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:42:20 2025 by rpki-client