Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Lq169VYweJJ8T4YAF-1uJqodzHM.roa
File: Lq169VYweJJ8T4YAF-1uJqodzHM.roa (raw, json)
Hash identifier: PPjIqm2BEvKi7+ZdZsMfmsNbhGbQc5RYLMmdJ67+dEE=
Subject key identifier: 2E:AD:7A:F5:56:30:78:92:7C:4F:86:00:17:ED:6E:26:AA:1D:CC:73
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3F77349612D8AC450255AC71900F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Lq169VYweJJ8T4YAF-1uJqodzHM.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212491
IP address blocks: 185.196.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3f:77:34:96:12:d8:ac:45:02:55:ac:71:90:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ead7af5563078927c4f860017ed6e26aa1dcc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:b2:c8:c2:18:b8:4c:7b:e4:9b:aa:48:11:
36:f3:80:e6:bf:7b:65:dd:6b:a4:fa:ef:40:c0:f4:
c2:f2:8f:f3:46:df:97:81:6f:92:bc:f4:5c:50:c2:
07:17:f2:e1:bb:c3:a7:7e:f4:1b:83:02:5a:32:90:
fa:01:09:62:2a:0b:16:ee:65:01:d1:89:97:3e:bc:
be:5a:ca:d6:b8:cc:48:6b:78:94:42:bb:5e:31:66:
bd:7f:a4:b7:48:7e:8a:c1:fd:e9:62:19:d5:3b:74:
75:c7:4a:6a:ed:30:66:f1:cf:99:36:42:11:29:c0:
7f:6e:13:20:ee:db:a4:04:fa:a9:40:57:d0:2e:f0:
76:8b:1a:fc:45:db:7a:e0:9b:ad:d0:0a:4d:2c:2c:
53:38:8c:53:9b:ff:6f:9b:4b:77:f9:44:95:75:ea:
e1:24:6a:23:8a:be:ab:ea:b7:52:bd:92:30:75:05:
c6:cd:37:09:bd:e5:2c:17:08:b9:04:71:29:c4:8c:
be:ed:49:0d:af:08:43:c7:2a:da:20:0f:7d:5f:5b:
59:d8:0b:56:c2:82:0d:a5:27:1a:1c:85:17:da:53:
8c:cd:69:1c:05:21:4e:44:3e:12:22:d2:ef:5f:34:
59:72:31:36:17:26:fa:f6:72:84:0b:bb:ea:86:f5:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AD:7A:F5:56:30:78:92:7C:4F:86:00:17:ED:6E:26:AA:1D:CC:73
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Lq169VYweJJ8T4YAF-1uJqodzHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.244.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1f:c0:74:76:96:6a:6e:06:85:d3:00:35:96:8c:07:89:8f:
7a:9b:5e:79:b5:5a:fc:a1:bf:f2:40:f4:59:d3:2e:e0:70:62:
c7:7d:bc:e1:17:d8:d3:5e:c1:33:0d:7d:5d:2d:e9:75:f1:e2:
1c:0a:90:0d:65:32:52:b8:86:34:43:23:d4:b9:cc:56:93:22:
80:2d:e8:71:70:38:e1:94:1d:0b:b2:d4:35:25:12:82:84:10:
04:f1:ff:3f:df:0d:5a:b7:0b:d0:b1:bd:17:ab:f1:db:45:c5:
a9:9d:de:8e:98:b4:62:e7:5a:e0:05:93:02:77:19:d6:b6:13:
00:bb:02:ff:f0:ad:21:18:1b:38:9b:46:d1:86:b1:00:21:ae:
c0:15:c3:40:b4:9a:cb:8b:80:90:13:8c:a5:97:dc:01:31:98:
b6:e7:c4:4c:87:e0:cf:26:fc:0d:35:a1:0b:03:47:b8:49:ea:
25:0a:ad:38:e7:62:ea:1b:1f:c3:e3:ea:91:37:d3:0e:c2:ce:
de:e0:4f:02:1b:6d:ff:5f:2e:c7:4f:10:ef:32:d2:36:5c:28:
43:6c:a9:94:84:f2:02:eb:49:78:90:ef:0a:01:f4:3c:2d:6b:
0a:26:57:20:c4:a9:75:ac:cf:73:03:ef:bd:d1:1a:e4:77:a3:
60:ee:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:55 2025 by rpki-client