Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/lx-I99Rz7UE_i9h7mI7tDYnV2-Y.roa
File: lx-I99Rz7UE_i9h7mI7tDYnV2-Y.roa (raw, json)
Hash identifier: F42LmZoHNcE33lqnHRPsH2ID11JlTB7ve7cZ1cVQPlU=
Subject key identifier: 97:1F:88:F7:D4:73:ED:41:3F:8B:D8:7B:98:8E:ED:0D:89:D5:DB:E6
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01941F8C39E3C04407A5AF2B06145FF1216A
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/lx-I99Rz7UE_i9h7mI7tDYnV2-Y.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 193.106.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:39:e3:c0:44:07:a5:af:2b:06:14:5f:f1:21:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=971f88f7d473ed413f8bd87b988eed0d89d5dbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:63:cb:4e:51:ce:8a:25:cf:e0:5c:fa:62:
93:f4:98:9a:a3:f8:49:34:7a:a3:51:64:8c:c1:23:
de:14:72:55:f2:f1:a7:50:c8:bf:49:9c:66:d6:37:
a3:82:47:59:80:01:82:43:01:10:32:dc:2b:b3:37:
af:42:52:e0:64:37:68:9d:6c:99:89:5b:90:05:7d:
cd:d6:09:02:e8:b8:90:7e:88:d2:39:fd:21:53:be:
9a:ef:0f:9b:f7:7c:08:86:b0:2e:8f:4d:87:cb:96:
ad:e0:39:a5:d0:a6:76:97:84:85:ad:8d:94:17:8c:
16:7e:0a:c4:91:29:41:d7:ca:6a:87:c5:a6:05:3d:
25:a5:7a:38:cb:25:0d:ee:7f:a0:98:be:80:b0:a7:
b8:30:e5:39:20:19:61:02:9f:d9:c0:15:52:a3:46:
2b:a6:fb:56:fa:88:42:20:a4:9d:0a:66:a9:8b:43:
f8:a5:e1:b8:82:f9:4f:4a:0f:83:a6:26:4c:7d:97:
43:70:bc:6d:f3:e6:db:92:2d:41:22:7f:a7:69:46:
c8:73:d5:43:8f:e0:42:45:d4:d8:31:02:1c:a2:24:
ee:0b:b5:7b:6a:00:d0:3c:78:de:b2:bb:53:c1:17:
dc:9d:4c:bc:cc:0d:34:eb:46:b4:d7:2f:4a:55:3b:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:88:F7:D4:73:ED:41:3F:8B:D8:7B:98:8E:ED:0D:89:D5:DB:E6
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/lx-I99Rz7UE_i9h7mI7tDYnV2-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e6:a1:b8:20:17:9b:51:16:0b:9e:53:15:d2:fb:b4:66:20:
85:77:f9:67:35:83:3e:e2:e1:da:d2:2e:8b:d1:fc:33:49:1e:
c1:a4:6c:9f:63:07:6b:91:fe:d1:61:c8:5b:f5:6a:80:6e:a5:
66:9a:2f:69:ec:86:99:8d:d3:59:eb:83:e4:7f:8e:b7:8a:80:
75:de:c0:d3:53:36:39:63:d9:39:88:6b:b5:a7:04:21:33:3d:
c6:f6:62:33:e7:c5:31:e2:47:b9:8f:a2:f7:63:17:9f:e2:9a:
51:e7:5f:f0:e4:79:93:e3:99:22:b2:98:e8:d8:2c:0b:f3:8a:
8b:8c:d2:1d:4d:8f:c0:ba:fc:0e:e9:f7:63:73:70:84:39:ee:
e5:8f:4e:0c:2d:65:4f:ac:bd:6f:c7:01:a1:ed:2c:c9:73:dc:
a4:55:af:49:a4:67:83:ef:c5:14:37:8f:6c:00:ba:41:1a:ee:
bf:f9:c1:c6:86:e3:0c:87:2f:94:d7:dd:4f:c0:29:b1:74:db:
6a:d8:36:47:cd:d9:07:56:c3:af:32:11:73:85:f5:ca:7b:a5:
04:bb:66:09:3b:74:ff:14:88:70:0a:ac:ba:71:0d:e2:9d:92:
fc:29:9a:ab:40:97:8b:64:b2:6c:48:81:82:79:bc:6c:33:dc:
28:b2:c7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:54 2025 by rpki-client