Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/LRsJ3OIL5SDCGgKIq2UymmA-lfw.roa
File: LRsJ3OIL5SDCGgKIq2UymmA-lfw.roa (raw, json)
Hash identifier: yNq6xEsemb7eMfPMLfzojBK2hL7B5M17Cpb+AN3QSjc=
Subject key identifier: 2D:1B:09:DC:E2:0B:E5:20:C2:1A:02:88:AB:65:32:9A:60:3E:95:FC
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 01945F924EBB08F60CA00BEA5BDF509B5FFB
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/LRsJ3OIL5SDCGgKIq2UymmA-lfw.roa
Signing time: Mon 13 Jan 2025 12:10:11 +0000
ROA not before: Mon 13 Jan 2025 12:10:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 192.109.139.0/24 maxlen: 24
192.109.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:92:4e:bb:08:f6:0c:a0:0b:ea:5b:df:50:9b:5f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 13 12:10:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d1b09dce20be520c21a0288ab65329a603e95fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:c3:f5:46:fe:9c:5a:09:83:07:16:35:1a:
69:e5:85:e3:78:b4:f3:ab:4c:e5:14:02:8b:81:89:
fb:d0:8a:04:d4:2f:d0:d1:e7:d5:8c:f9:d2:d6:b6:
3b:31:15:27:16:b0:40:4d:ad:ff:71:73:02:c0:05:
3f:9f:ba:d8:40:a7:30:b1:5e:d1:d2:4b:3c:56:ab:
a8:c7:ef:07:d0:7e:b2:11:17:be:44:91:f8:59:b8:
e6:a7:1d:9a:b8:71:39:ac:76:25:b9:ff:a8:13:c2:
fa:94:fe:82:de:7a:b9:f7:a4:35:df:52:d9:78:04:
e0:f0:9c:3c:98:5b:0f:dd:be:24:e4:52:5e:60:58:
ca:0e:cd:1f:7f:29:7e:20:d9:f5:1a:7f:a1:41:5a:
fe:97:29:3b:42:6c:f9:34:b0:18:7d:6c:ca:1c:0c:
71:e0:2f:d1:39:4c:2f:47:dc:74:c5:eb:0f:d3:6e:
1e:75:e3:3c:1b:7f:61:06:7b:54:88:d8:63:d1:14:
0a:18:92:48:a6:1b:93:d9:99:35:51:9f:8e:9e:7a:
9b:c0:65:55:82:60:b0:d2:0f:2e:27:db:d8:2c:d3:
eb:2b:9a:01:d4:11:61:ad:de:2c:92:73:06:c9:5c:
29:ef:33:3a:16:22:7d:2d:b5:b1:5e:7d:a9:68:ba:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1B:09:DC:E2:0B:E5:20:C2:1A:02:88:AB:65:32:9A:60:3E:95:FC
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/LRsJ3OIL5SDCGgKIq2UymmA-lfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.139.0/24
192.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5c:ba:99:00:7d:4d:e5:d7:72:a3:76:6c:31:c3:d2:46:08:
0b:23:3e:51:11:87:31:ea:95:7f:69:5f:d0:4f:95:b7:60:e1:
e1:00:0a:4c:6e:72:06:5a:40:67:d7:64:cb:a2:b9:58:d6:da:
a8:23:00:5f:12:5d:96:67:79:d9:50:a2:c0:a5:5c:5e:e3:ee:
ee:35:db:48:91:2b:00:89:57:6f:44:4f:3c:26:9d:4c:ba:4a:
cb:43:41:88:e5:25:5d:e4:05:a9:fe:2d:c6:5e:0a:9c:4f:3f:
ed:82:f6:a1:d8:83:63:a3:4f:fe:be:a0:82:22:49:e0:c5:1d:
4c:fd:07:3b:27:38:bb:00:b0:e4:38:af:7f:27:a3:86:2b:62:
6f:16:c9:25:85:b6:0d:2b:6b:ab:27:36:d8:6c:1f:59:a6:8b:
2c:5f:7d:90:9c:4c:d8:e3:cc:16:9e:b1:80:fd:05:99:33:6d:
6d:2b:f4:03:82:59:08:57:3d:2e:62:68:d5:68:82:48:83:8f:
26:5e:d3:20:08:5f:6a:8d:13:82:e9:60:ce:24:02:05:5e:41:
34:e2:4d:36:c5:d5:f1:b7:42:a8:20:43:91:67:11:31:4b:59:
7a:56:04:a1:69:3e:06:52:64:42:22:54:00:db:ef:b4:39:95:
54:10:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:28 2025 by rpki-client