Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lMajzcJDPzB_F-VCGZzdwhSfpg0.roa
File: lMajzcJDPzB_F-VCGZzdwhSfpg0.roa (raw, json)
Hash identifier: buzJFfwDBVqbVE8oCgmcIkz9LpTiGy+dRrAKG1LrA7k=
Subject key identifier: 94:C6:A3:CD:C2:43:3F:30:7F:17:E5:42:19:9C:DD:C2:14:9F:A6:0D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01954CB70DE8221A1A86722ED048FA61C7FF
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lMajzcJDPzB_F-VCGZzdwhSfpg0.roa
Signing time: Fri 28 Feb 2025 13:20:19 +0000
ROA not before: Fri 28 Feb 2025 13:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39351
IP address blocks: 155.2.208.0/24 maxlen: 24
155.2.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:b7:0d:e8:22:1a:1a:86:72:2e:d0:48:fa:61:c7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 28 13:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94c6a3cdc2433f307f17e542199cddc2149fa60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:9f:81:da:63:3d:74:1e:90:b3:d8:74:38:
ff:8e:88:ac:72:74:77:74:a9:41:0a:58:fb:e0:27:
e9:ce:9d:b4:b4:dd:9d:af:52:35:92:08:b0:3e:6a:
86:3a:fa:7f:b5:18:9d:97:69:6b:13:13:ee:fa:b7:
1a:59:ea:b4:7e:7a:6e:ea:8c:1b:b4:db:53:c6:f9:
16:6b:81:c3:d7:ad:46:bf:1b:bd:f3:5e:ce:be:f6:
8a:61:85:6b:6f:41:b3:4b:d2:1c:46:7f:67:28:2a:
27:b4:a3:d7:8d:1c:f0:00:1c:74:c4:e2:71:b0:ba:
24:fc:5f:82:51:77:59:c9:b9:65:33:d1:7b:3c:73:
67:b4:13:ca:48:4e:70:c1:5c:7b:05:97:0b:b5:f2:
23:6a:81:ae:75:72:5f:e1:79:11:32:8e:b5:9f:05:
8d:33:22:10:15:3f:91:12:43:54:67:62:f1:02:cd:
7f:bf:04:70:71:ab:1a:58:a7:f8:8b:31:36:8b:c5:
ba:79:6c:c4:bc:0d:e8:35:9b:cf:65:68:54:c6:93:
93:81:6f:33:54:0c:3b:1f:94:85:b7:37:ec:65:b1:
58:92:91:b9:66:45:19:ec:8f:f5:15:35:a2:3c:06:
46:70:82:46:a0:46:38:c6:68:c1:cd:53:2e:1f:80:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C6:A3:CD:C2:43:3F:30:7F:17:E5:42:19:9C:DD:C2:14:9F:A6:0D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lMajzcJDPzB_F-VCGZzdwhSfpg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.2.208.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:74:b9:fe:b9:da:39:cc:fe:8e:31:0e:77:3e:18:e9:d7:db:
f4:ff:a9:18:b6:88:d8:c4:ea:7f:de:3a:14:04:88:d1:1a:30:
9f:9a:a4:dc:b9:1e:ee:94:8a:62:4b:a5:c4:a2:26:ca:11:0b:
c7:3a:cf:dc:8a:b2:20:23:39:32:1d:c0:74:90:28:63:0a:e5:
fe:a4:a6:26:6d:fe:65:16:d3:99:61:3d:48:93:e6:d8:f8:8d:
0d:5a:0d:34:aa:98:b0:aa:e3:cd:2f:cc:57:f5:4b:f1:2e:07:
81:e5:f1:d7:9a:19:46:0a:5e:e5:70:89:31:47:c7:fd:ce:cb:
97:22:cd:12:41:3e:9d:d1:db:40:f7:4a:6d:9e:52:89:71:40:
c4:40:9f:42:fa:c3:dd:8a:45:dd:21:92:8a:31:f6:0c:8d:a3:
80:e3:ec:50:a9:ae:7d:f9:d9:9a:f9:34:1f:87:db:33:6c:b6:
72:a3:96:5d:55:cc:8b:ae:89:ae:b2:f5:3e:3c:4a:4a:8e:37:
94:6a:ba:fa:a1:e5:86:96:53:f3:2b:b8:69:c4:09:a5:16:a2:
b6:de:ab:b4:1f:35:2d:c0:21:94:3d:51:b0:b3:c5:f2:12:05:
54:99:35:8b:33:32:d3:f4:0a:1a:d8:4d:a5:1d:19:92:b7:18:
96:7e:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:56:23 2025 by rpki-client