Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa
File: LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa (raw, json)
Hash identifier: ijCon2p1g8yWQ5glLczywg0vICoOxaxCrjmV9KKJaoI=
Subject key identifier: 2C:6F:F0:C4:70:CD:A1:2D:44:6F:43:9F:6C:ED:DB:4A:1F:D6:48:F8
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 0194258E71DD5D9C28B8BDB42296E853C04F
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa
Signing time: Thu 02 Jan 2025 05:47:59 +0000
ROA not before: Thu 02 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34687
IP address blocks: 89.248.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:71:dd:5d:9c:28:b8:bd:b4:22:96:e8:53:c0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Jan 2 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c6ff0c470cda12d446f439f6ceddb4a1fd648f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6e:66:e6:1f:64:72:c3:9f:48:1e:ad:08:b7:
c6:9c:9f:bd:e1:d7:b4:34:46:a6:3b:60:bb:59:55:
aa:56:45:56:54:ac:1e:e9:6b:ec:98:8e:0a:bc:8e:
6b:de:52:f3:4b:86:bd:82:a1:ed:be:3c:f9:a6:4d:
d9:65:0e:11:93:b3:62:ab:02:bd:18:5a:02:84:f9:
0f:39:20:3f:e8:89:84:82:64:29:49:a2:74:74:7f:
65:9f:d5:70:99:95:a9:82:e9:74:5f:4c:93:f2:9f:
78:ea:2b:d7:9c:63:d5:93:3d:c7:93:a4:99:c4:8f:
a0:59:d5:04:28:f5:c2:8d:ab:56:d5:3b:38:1a:43:
7c:4a:6c:87:c0:5a:29:d8:d4:af:34:2c:fe:ee:a5:
88:b2:c0:94:eb:0b:d4:14:37:fc:fd:ad:14:93:fe:
db:55:40:37:ee:a2:29:ec:fc:65:d7:ba:2e:e9:15:
3b:94:8e:83:15:04:12:45:26:4e:28:c6:d3:fe:89:
81:82:41:9d:fc:69:cc:a5:a5:d2:77:75:34:fb:fa:
df:ab:b2:d7:c9:6c:b3:4c:21:a6:37:76:1f:fb:29:
9b:6a:38:66:78:e6:2c:d4:33:45:4c:85:c7:dd:c8:
54:f5:85:f4:66:18:90:d5:86:b0:09:05:70:e9:87:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6F:F0:C4:70:CD:A1:2D:44:6F:43:9F:6C:ED:DB:4A:1F:D6:48:F8
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.176.0/20
Signature Algorithm: sha256WithRSAEncryption
70:54:28:b0:1e:50:9a:aa:15:eb:ac:6e:aa:ab:87:a7:7c:f5:
6f:8f:67:b0:ad:2b:26:c0:c6:87:ea:d7:dc:fd:93:65:99:d0:
6c:2f:ff:96:c1:aa:92:9b:22:4a:2f:03:5e:d0:cb:17:2a:8a:
6b:d0:8b:53:7b:fd:18:4f:59:2a:14:e8:38:ea:76:e5:1c:a9:
8d:bf:6c:fd:04:5b:a5:ba:50:99:b5:10:58:44:f6:52:19:38:
26:40:75:17:f3:e5:3e:a5:85:1f:ff:46:03:1a:a2:98:b1:98:
db:e1:46:31:37:a4:9f:9e:87:61:26:4a:51:f7:c3:cd:dd:50:
9d:7f:9b:19:74:31:9b:32:89:ab:c7:e1:ee:19:4e:c8:64:de:
96:85:38:07:86:3f:1c:af:48:21:c1:23:44:28:0f:5c:ef:66:
e1:49:22:0b:97:63:76:d7:2f:94:d4:1e:0d:1a:d7:4a:5a:8a:
fa:da:0b:61:68:94:de:e6:12:93:29:ff:a9:ef:c1:18:83:0f:
72:7b:bc:65:ca:3a:67:af:47:59:7d:81:9c:1d:b1:1b:4b:ea:
a9:58:71:a8:f1:85:17:ca:69:35:56:94:51:cf:93:d0:39:02:
76:45:ae:7c:66:2a:0b:0b:62:00:b6:97:ce:dc:c5:65:bd:ed:
2d:93:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:56 2025 by rpki-client