Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/LhxanwDwKlG6zoEuEOnKOcdaMck.roa
File: LhxanwDwKlG6zoEuEOnKOcdaMck.roa (raw, json)
Hash identifier: AvDgjRUhd1R4VQCxCjbxRhUGEMJOlNxy0UvvUYNGmUw=
Subject key identifier: 2E:1C:5A:9F:00:F0:2A:51:BA:CE:81:2E:10:E9:CA:39:C7:5A:31:C9
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 01938632B46D2E54C77AFBCAF499C8F027FD
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/LhxanwDwKlG6zoEuEOnKOcdaMck.roa
Signing time: Mon 02 Dec 2024 07:08:10 +0000
ROA not before: Mon 02 Dec 2024 07:08:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.43.138.0/24 maxlen: 24
193.43.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:32:b4:6d:2e:54:c7:7a:fb:ca:f4:99:c8:f0:27:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Dec 2 07:08:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e1c5a9f00f02a51bace812e10e9ca39c75a31c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:90:b5:31:e1:4c:6d:1f:d2:a1:dc:bc:33:
0f:8f:c0:50:a2:f1:38:fa:cf:9b:0d:42:98:a8:cd:
8e:4d:33:30:b0:37:29:d6:94:12:c0:dd:4f:b5:a6:
09:76:c6:d9:34:ad:d8:fd:f6:ee:7e:43:9b:a5:17:
24:18:5b:9d:52:9a:ec:75:45:b0:2d:f2:5c:25:6e:
3a:1b:45:fd:06:7e:d1:ad:52:e3:f3:81:bd:cc:3e:
70:fd:2d:e4:ba:3e:84:44:36:dd:eb:42:73:e6:23:
27:e6:c2:7c:fd:1e:d9:c3:e1:16:6d:13:b7:26:c0:
6f:e6:31:2f:4b:f2:2f:8d:ce:51:b6:aa:ec:49:49:
7b:28:a6:29:36:41:31:a8:52:72:75:25:78:fd:7a:
4b:15:b4:bf:91:d1:1d:8e:4f:2b:aa:d5:85:d8:46:
41:43:2f:69:ab:3d:0d:51:4a:5d:a4:9b:d4:f0:1b:
ae:3f:ad:23:ae:7d:1a:7a:b2:3d:6a:f4:f8:5b:20:
90:85:8d:e5:cc:34:ab:1b:73:51:93:53:b7:fe:3b:
72:9b:f5:76:17:04:79:e8:3f:25:7c:fb:ca:90:ee:
72:a2:71:12:4f:5f:ca:fc:d1:1d:d7:aa:71:d5:13:
16:63:93:57:8f:91:73:57:3b:66:a5:63:43:4e:38:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1C:5A:9F:00:F0:2A:51:BA:CE:81:2E:10:E9:CA:39:C7:5A:31:C9
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/LhxanwDwKlG6zoEuEOnKOcdaMck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.138.0/24
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:e4:94:3d:ef:a8:09:23:9a:56:2f:11:15:79:62:20:f3:c8:
69:9b:1d:d2:dc:ca:cd:e1:9f:e4:89:65:d3:fa:91:e6:a4:89:
52:e0:c0:62:0f:28:36:98:ff:de:08:d0:dc:e2:a5:0a:43:8f:
82:30:59:07:a5:2c:2a:8e:e7:7d:ca:a8:23:81:7c:cb:94:82:
f7:b1:08:39:c8:79:2b:cc:f0:3f:a8:a9:71:29:12:1e:1f:23:
f3:d3:93:c4:37:3a:47:68:08:07:da:13:45:74:da:b7:a3:d6:
55:b0:ad:52:a5:98:d3:35:9f:dc:1c:d7:23:4d:fe:df:b1:78:
5e:3b:39:b3:54:d7:93:f8:ce:14:3f:0b:d5:98:3d:00:fe:96:
c5:e8:9e:af:00:76:a7:6c:46:61:13:7e:c5:f9:78:13:3f:9f:
11:a6:10:71:39:8f:59:dc:ba:4a:4d:22:c9:f0:e4:ae:94:9a:
78:d5:9f:4d:7a:48:d4:69:de:b1:36:4d:19:af:39:6c:f7:a3:
a6:2c:3b:8a:e2:f7:f4:f4:d7:25:49:42:2b:83:3b:dc:69:65:
67:aa:b5:dd:e9:03:a9:61:d6:a9:2c:88:83:07:13:a8:f5:42:
23:50:5b:04:8c:1e:8c:a5:de:1e:7d:a9:d1:b7:1a:02:a2:c4:
fc:22:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:47 2025 by rpki-client