Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa
File: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (raw, json)
Hash identifier: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=
Subject key identifier: 2C:C4:79:1F:C5:F1:43:6D:90:C2:1E:11:AA:4C:F8:B9:B4:A5:A3:9E
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 019422201D274A415F93A54FAFD170F7C45C
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210220
IP address blocks: 194.169.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1d:27:4a:41:5f:93:a5:4f:af:d1:70:f7:c4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cc4791fc5f1436d90c21e11aa4cf8b9b4a5a39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:27:21:6d:50:1e:6f:69:63:5c:6d:02:16:3f:
64:6c:16:be:76:f0:d7:0c:24:94:82:ed:60:de:65:
cf:28:7a:48:9d:52:46:a3:25:44:89:66:f5:10:29:
19:5e:b9:db:25:7d:63:7f:7a:4a:da:31:f6:09:aa:
af:b6:61:9b:6c:90:88:9f:7a:02:c6:1a:16:28:04:
d6:dc:60:f6:49:94:e0:38:d2:c6:af:f7:21:b9:90:
1c:3d:34:4a:5e:8a:2e:10:f0:e2:ff:d1:0c:85:f9:
e7:71:f5:dd:b1:eb:4f:34:57:c1:ec:de:4b:d7:19:
4e:f5:7c:7f:89:0d:ca:42:a9:a8:9d:24:cf:da:ea:
d2:58:b0:55:fa:1f:37:24:8a:5d:62:c4:5e:24:0d:
24:be:9d:ba:61:e6:f9:e6:ef:72:c4:dd:be:6c:72:
6d:a5:b6:78:b9:50:80:be:93:ee:51:63:de:c8:e2:
a1:81:f8:98:df:fa:0e:2f:bf:4f:a5:b3:24:d8:ee:
cf:c1:a9:21:c1:5e:fc:c3:5b:de:d5:95:29:6d:fc:
e5:fb:aa:38:75:81:f0:56:e2:8c:15:3f:d3:18:04:
d2:24:15:08:31:27:49:d2:4a:b1:c1:d6:7d:be:3a:
fc:ac:07:a8:15:71:53:ca:cc:4e:96:13:ef:2b:1e:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C4:79:1F:C5:F1:43:6D:90:C2:1E:11:AA:4C:F8:B9:B4:A5:A3:9E
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.220.0/24
Signature Algorithm: sha256WithRSAEncryption
76:dd:62:36:b3:a4:98:43:af:dd:b4:39:22:17:20:03:78:b3:
20:7b:c7:8d:bb:54:f6:b1:9b:3f:fe:aa:81:a5:f8:64:6d:e5:
57:d3:2f:7f:b5:3f:4d:b6:5d:e6:72:f1:3f:11:74:6e:2f:e6:
55:51:2a:14:99:1d:4a:ee:7c:b7:a4:da:11:93:4d:ff:8c:cd:
26:6d:ef:d4:7e:bc:ac:4b:06:89:46:cf:fe:fe:8c:d9:42:78:
33:87:45:1e:85:26:9c:fc:91:bb:24:3c:80:08:70:78:9b:e0:
6d:d5:88:22:68:1a:0b:48:30:e1:c1:2c:cd:56:11:74:b8:5f:
d0:ed:c6:fe:96:58:fc:c1:b2:d0:e4:62:17:35:47:d8:71:21:
df:2d:cc:f5:8a:87:8c:53:01:00:9e:f7:d3:25:d3:33:7e:a0:
22:7c:d1:67:6d:b4:ac:c6:0e:88:4d:75:52:50:c5:c4:db:1d:
8e:49:79:60:b0:1c:02:4e:4d:18:47:27:31:93:86:4d:11:1c:
fc:9e:86:aa:81:cf:25:b0:8c:f8:78:5e:0b:67:80:a5:a1:d0:
13:c1:35:32:a3:e3:91:2d:b8:ff:95:6c:f0:09:df:ec:15:76:
22:c5:05:7b:40:d3:9a:84:20:87:16:ed:c3:76:0e:03:14:38:
df:d6:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:17 2025 by rpki-client