Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lenDc_qgWidf1SooU3ABdawZph8.roa
File: lenDc_qgWidf1SooU3ABdawZph8.roa (raw, json)
Hash identifier: 3296pTNgxA/1NMdkolIW2rRTHNp4XeihKeFvU82WO2E=
Subject key identifier: 95:E9:C3:73:FA:A0:5A:27:5F:D5:2A:28:53:70:01:75:AC:19:A6:1F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427484FB308A9D6939433215EEFB41D6E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lenDc_qgWidf1SooU3ABdawZph8.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34950
IP address blocks: 192.165.101.0/24 maxlen: 24
192.176.2.0/24 maxlen: 24
194.68.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4f:b3:08:a9:d6:93:94:33:21:5e:ef:b4:1d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95e9c373faa05a275fd52a2853700175ac19a61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:43:ad:d9:4a:95:78:ec:ed:f1:a9:f7:c3:
da:09:06:c5:93:5a:e3:c6:cd:f1:57:0b:92:69:d6:
2f:f0:bb:d6:5d:9a:45:18:06:04:98:f1:1f:ac:b3:
ae:a3:a4:1a:2f:42:f8:b8:30:97:2a:2e:a2:7b:ea:
da:d2:f0:70:0d:89:74:92:e8:b2:82:9c:e4:c4:96:
6e:7b:49:71:95:23:ac:90:3c:ff:c1:0e:7d:f2:ba:
53:f2:90:b0:c5:00:63:ec:04:25:e3:30:6b:fd:c6:
bc:97:44:d8:54:9b:84:06:78:a8:0a:9c:6d:b8:d1:
1f:bb:b3:66:4e:68:bf:1d:cf:3c:b9:0c:e3:5b:65:
88:12:f5:dc:24:27:4f:b1:9c:cb:94:c3:0f:65:2e:
74:ca:4e:bc:f8:54:66:2e:de:5d:54:4a:e2:80:30:
33:2d:dd:e5:82:28:fa:ad:75:44:12:4d:fb:a2:80:
ee:aa:aa:3b:a4:a6:25:15:08:17:c9:7a:f2:ed:f9:
38:58:f7:66:08:8e:a1:83:2d:31:03:d6:22:1c:a3:
20:ef:32:db:30:53:48:9f:c1:a7:26:01:b2:8f:74:
68:2b:43:47:13:cd:7e:af:26:b2:dc:0a:5d:87:c9:
34:8b:5d:50:95:96:07:74:fa:35:a7:f1:82:42:85:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:C3:73:FA:A0:5A:27:5F:D5:2A:28:53:70:01:75:AC:19:A6:1F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lenDc_qgWidf1SooU3ABdawZph8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.101.0/24
192.176.2.0/24
194.68.50.0/24
Signature Algorithm: sha256WithRSAEncryption
06:46:15:29:89:d6:11:6e:ed:a0:b7:3c:32:71:15:a2:5d:3c:
33:56:0e:70:86:96:46:8b:f9:8a:d8:01:08:e0:42:a3:2a:73:
73:02:0e:87:5e:2a:bb:e9:4d:1e:42:19:31:e5:c9:d6:bd:23:
4f:17:66:a0:05:fc:2e:77:80:3e:41:04:cc:44:0f:97:80:ea:
3b:de:d3:11:19:32:9a:50:00:7a:49:67:b7:da:2f:70:05:c0:
59:c9:5a:b0:23:c6:b3:63:95:b8:10:86:9f:a8:6b:91:7e:43:
8f:a5:69:b8:33:80:f7:7f:8a:80:9d:97:8e:f4:7e:7d:8c:71:
ba:82:82:9e:66:22:99:7b:36:0f:db:cf:a9:44:52:a4:24:dc:
47:83:4f:f5:18:46:b3:9b:da:03:e3:1a:27:09:46:20:1d:09:
7f:f7:71:76:53:67:cd:9f:36:aa:1a:fe:5c:88:57:64:30:73:
61:7d:cf:12:82:da:f9:12:24:ef:5a:fe:af:83:4b:c3:1a:ee:
d3:0b:d6:ed:6d:f0:66:fe:03:dc:63:48:ff:fe:3a:b1:bd:b9:
a5:de:e7:b9:0f:37:7b:54:4b:2d:0f:37:45:ed:80:bb:b1:49:
8c:5c:3e:95:94:27:40:76:a0:b7:af:f6:ba:37:af:20:da:d4:
53:d1:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:41 2025 by rpki-client