Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/LOq11mgZFBK-hn7LapkShT7_1UU.roa
File: LOq11mgZFBK-hn7LapkShT7_1UU.roa (raw, json)
Hash identifier: 5l/RFDsIvL3DcLZxVz11YBnw24k04mQy9SpCW1HGWwA=
Subject key identifier: 2C:EA:B5:D6:68:19:14:12:BE:86:7E:CB:6A:99:12:85:3E:FF:D5:45
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 019425FDEC198144BF4729DF45BCA41F02EC
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/LOq11mgZFBK-hn7LapkShT7_1UU.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13232
IP address blocks: 212.39.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ec:19:81:44:bf:47:29:df:45:bc:a4:1f:02:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ceab5d668191412be867ecb6a9912853effd545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2b:9f:bc:65:9a:1d:89:8f:a0:89:c3:da:f4:
0f:0a:0e:25:b6:bb:3a:aa:eb:53:d0:55:d7:d0:f8:
4f:8a:ab:51:db:f7:c0:f6:b4:a3:33:ba:b3:c4:40:
62:57:5b:ed:22:cd:ea:0a:08:b3:11:c4:6f:da:51:
a0:68:5f:16:0e:6c:45:ec:85:87:b5:88:b8:f0:b9:
82:f1:7e:67:fe:a3:51:dd:ad:49:76:7e:b7:91:90:
e5:40:8b:79:2d:3f:5d:6b:eb:7d:5e:0a:dc:2e:b5:
eb:8d:cd:b8:5b:a2:12:3c:33:3e:2e:cf:be:68:0d:
84:e4:ca:bc:a1:aa:5c:99:55:7f:44:86:4b:7b:db:
a3:23:ce:d2:d3:66:8f:ba:25:9f:bb:c8:d4:1f:e8:
8d:92:c6:84:4f:c5:4f:07:85:b6:9e:60:50:79:09:
59:09:b7:71:b2:8d:42:cc:a3:3a:66:ae:8e:50:82:
7a:a2:09:91:cf:1c:ca:1f:03:b7:2b:dd:73:74:4a:
9e:f5:68:d0:f5:9d:b2:d2:f6:0d:2c:40:4e:48:23:
85:65:b0:53:f0:3c:50:39:66:3d:17:cf:9d:49:ab:
12:5a:b7:81:fe:ea:d0:fa:b6:c4:50:94:00:ee:b9:
fe:25:39:ba:b2:d8:77:60:6d:98:d8:e2:13:cb:01:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EA:B5:D6:68:19:14:12:BE:86:7E:CB:6A:99:12:85:3E:FF:D5:45
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/LOq11mgZFBK-hn7LapkShT7_1UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.228.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ed:0b:5d:37:63:54:64:88:98:38:0d:7e:2d:1d:38:94:c3:
ea:af:58:4b:46:05:60:43:32:5d:71:49:2d:3e:50:0e:4b:42:
7d:0a:2c:49:b4:2c:4b:cd:bd:42:0d:81:60:98:b8:3c:66:fd:
b9:8b:b7:a3:89:8a:2a:c2:40:c4:5e:2b:25:43:30:ee:44:0e:
a6:91:f6:c7:84:ad:1e:2d:88:d8:c1:18:14:32:88:66:9e:2e:
eb:9c:41:f3:b1:f9:97:88:5a:13:66:7f:39:ea:78:0c:d3:d8:
82:6e:76:ec:fc:f0:f6:ae:77:a9:c9:ef:9c:2f:1b:42:2c:8f:
bd:19:65:09:5a:08:58:47:e4:26:7e:dd:4d:d4:20:03:55:13:
08:ad:15:8d:40:fe:91:af:bb:70:58:4e:a3:cd:40:08:dd:5d:
dc:3c:65:91:c5:54:71:cf:15:66:6a:fb:62:42:b3:d8:41:29:
71:2c:64:9c:c2:82:9b:64:bb:0c:e6:33:de:99:0e:6c:7f:3d:
a2:92:5f:b3:e1:26:67:77:de:93:c8:84:98:88:ae:73:7a:79:
2e:e4:f3:8d:6d:70:fc:d3:9e:46:e4:fd:c4:06:45:19:f9:6a:
8b:f6:23:dd:eb:79:92:a9:82:b0:b4:76:14:de:47:39:68:d4:
71:3a:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:01 2025 by rpki-client