Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa
File: LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa (raw, json)
Hash identifier: dGCLqqCykyXwmqrTu57eC+iNpUcOeyFsBoySlkBpsAY=
Subject key identifier: 2C:6A:08:54:27:F2:7A:0F:84:64:7F:DC:3A:0A:DD:8B:2D:93:3F:09
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 0194236A0A98ED3AC62131709AE0E4253CC7
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 46.28.236.0/24 maxlen: 24
185.228.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0a:98:ed:3a:c6:21:31:70:9a:e0:e4:25:3c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c6a085427f27a0f84647fdc3a0add8b2d933f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:f3:20:32:97:d1:83:76:fd:fc:c6:88:61:
9d:89:35:6a:97:92:c1:f2:b4:79:98:01:80:c8:4a:
7f:ab:c2:2b:d8:f7:52:17:01:99:e8:80:76:ff:21:
70:ba:a3:9c:52:79:70:f3:90:96:86:50:53:8f:e0:
bc:1e:3c:f5:9b:df:a9:0b:d5:47:f5:95:ee:ed:85:
e2:93:92:79:9a:cd:26:04:dc:a3:55:44:84:11:5d:
7a:58:f9:a8:b6:66:d6:2f:0a:90:e3:b5:e2:e1:81:
0a:d5:4d:77:4a:82:e7:cc:0c:fa:9b:b0:92:81:db:
6c:00:d5:3b:5d:c3:87:55:b2:7b:0c:1e:28:fd:fd:
79:9e:34:96:64:66:b0:ec:96:dd:90:82:eb:ee:95:
8d:a1:f5:55:d0:d5:19:fb:2f:6a:58:1e:89:a2:a3:
18:86:67:40:f8:f0:c5:74:0c:98:81:70:9c:b8:fe:
bb:76:cb:d9:68:3a:04:d6:c5:d3:d5:69:41:57:40:
f1:27:43:cc:c4:58:b7:16:25:5f:3b:a3:32:d2:55:
e8:3e:e4:bf:a6:be:3b:05:45:90:91:1b:ce:1c:29:
54:a6:3f:0b:2d:b6:99:f8:8e:22:85:34:a2:74:94:
f8:97:15:87:ca:63:56:98:74:a9:16:e6:0a:76:62:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6A:08:54:27:F2:7A:0F:84:64:7F:DC:3A:0A:DD:8B:2D:93:3F:09
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.236.0/24
185.228.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d3:57:fb:7b:41:48:8f:f7:7c:fb:9b:ea:de:f0:20:cc:aa:
6f:b7:bd:09:c0:05:f9:15:17:13:6a:6f:49:9d:dd:61:75:b3:
2d:9e:2f:bf:24:7e:ac:f9:d4:3e:0e:f4:2a:8a:56:55:1a:3c:
c9:7e:7e:05:b8:7d:f1:61:1b:53:c9:23:54:33:dc:05:a8:78:
d1:7d:f7:3f:26:2c:3e:01:ec:8e:2c:d1:2f:af:fa:b5:e9:bc:
4a:a6:76:74:af:f1:4a:96:bc:b2:ea:06:98:0e:2f:2f:c7:c5:
b9:e5:bb:33:52:cb:93:f0:11:8a:56:af:7d:91:a7:14:68:67:
4e:79:2f:7b:86:f5:fa:f9:92:76:ea:78:df:b4:e5:c4:2a:eb:
7e:26:79:dc:04:7b:9c:dc:8c:df:82:f0:e0:84:9a:a4:99:db:
6f:da:f5:b7:6a:40:17:af:df:28:90:41:0d:44:dd:95:d7:3b:
8e:10:59:80:bc:79:ac:59:7a:81:d5:70:fc:c2:b0:ea:9f:a2:
35:1f:61:70:ea:74:74:74:39:09:e9:71:f0:6c:3a:63:09:5f:
e8:ae:27:ac:fe:d3:eb:01:26:dd:cf:79:4c:36:4d:90:2b:eb:
67:ff:67:84:75:ec:ac:ba:2b:47:74:b5:19:7e:e7:30:e3:df:
7a:5e:bd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:04 2025 by rpki-client