Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/lgOapuL_7EbGPh0vvxP468rGEbg.roa
File: lgOapuL_7EbGPh0vvxP468rGEbg.roa (raw, json)
Hash identifier: lE3QsF1vh14GOUfJI4gTv7cwcmoRbKzoN9tDRBFhj40=
Subject key identifier: 96:03:9A:A6:E2:FF:EC:46:C6:3E:1D:2F:BF:13:F8:EB:CA:C6:11:B8
Certificate issuer: /CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Certificate serial: 0194258E80A66E3F0146914A785316630AF6
Authority key identifier: 9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/lgOapuL_7EbGPh0vvxP468rGEbg.roa
Signing time: Thu 02 Jan 2025 05:48:03 +0000
ROA not before: Thu 02 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213796
IP address blocks: 185.163.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:80:a6:6e:3f:01:46:91:4a:78:53:16:63:0a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Validity
Not Before: Jan 2 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96039aa6e2ffec46c63e1d2fbf13f8ebcac611b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:1c:b2:13:6a:76:e2:82:47:a3:9d:f9:56:
59:46:e3:aa:cc:6c:d8:5a:02:d8:9e:64:d3:36:b6:
ea:61:8e:c1:5e:76:55:f2:36:61:15:dd:63:cb:53:
8d:ab:28:bd:1c:2f:46:64:48:ec:72:c1:0f:28:5b:
7a:8e:c3:23:82:b1:e8:69:95:52:48:5d:47:e1:65:
ff:52:92:f8:9a:55:66:30:20:ae:f0:81:ad:9d:85:
be:a6:33:58:61:3f:f0:85:6a:8d:28:3d:f1:ca:db:
8c:7e:26:16:6c:44:bd:61:70:4b:67:51:ef:bd:61:
52:1e:0e:55:cc:2e:3d:f3:94:69:ca:d4:d4:2b:fd:
25:57:3f:e2:27:ab:45:84:18:fe:3e:41:8a:49:c2:
91:e9:c4:ef:0a:cd:af:ed:b4:9f:9d:95:4a:3e:4f:
6f:4f:05:7b:be:b5:eb:b7:31:cd:2c:1c:7f:a6:c6:
17:56:d1:b2:8a:67:9f:ee:a5:2a:f2:06:a7:c1:87:
80:e1:ad:81:46:9e:8c:eb:99:d5:5c:66:c4:bf:fb:
e4:4e:2b:28:36:68:13:77:00:2c:20:01:d3:c3:39:
6e:bb:ff:21:65:90:6c:57:8f:1d:55:53:a7:14:d7:
a8:10:8c:68:3b:a5:8a:d6:b4:cc:34:48:e3:da:63:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:03:9A:A6:E2:FF:EC:46:C6:3E:1D:2F:BF:13:F8:EB:CA:C6:11:B8
X509v3 Authority Key Identifier:
keyid:9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/lgOapuL_7EbGPh0vvxP468rGEbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.128.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:56:f6:47:c2:c1:69:2b:e3:d7:56:36:a9:87:96:a3:78:82:
a4:d1:83:2b:23:41:68:b3:a5:79:ba:a0:ab:74:c6:a0:90:22:
18:2d:0b:b2:78:07:5b:57:5a:82:55:b5:b8:17:5a:5d:01:66:
64:d3:a4:1d:75:50:0c:3f:49:93:0a:e8:eb:aa:a0:17:29:b2:
cc:dd:66:f0:b9:5f:4f:7e:eb:9f:83:11:09:db:67:e5:38:a0:
c5:12:b7:b7:d9:8c:73:fb:ec:27:23:26:50:e9:0e:be:11:65:
e8:54:d3:35:a3:db:12:9c:0a:b1:6d:50:06:9b:28:30:5d:1c:
91:da:93:18:68:5e:30:09:5a:45:53:89:9b:ea:bf:64:2b:ac:
90:42:a0:21:6f:e9:95:8f:0b:d6:ad:52:36:7d:fd:0c:c7:f8:
28:37:58:21:b3:d1:a0:4d:13:ed:44:11:d2:f1:21:d1:be:b7:
ee:9e:90:10:1d:fb:e4:f0:ed:c0:fa:d3:fd:12:08:6f:b5:be:
b6:1c:ad:a3:30:43:eb:db:55:76:aa:9a:8d:e5:99:92:96:a9:
4a:f4:ae:81:43:3b:b3:3c:70:2c:b5:19:1b:b0:df:b1:45:c1:
10:cf:5e:0b:fe:4e:d3:a5:31:e2:8e:9c:50:f5:ca:c5:af:9d:
18:0f:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:06 2025 by rpki-client