Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LJ0n9-Tdb_aD7jQ7UG3aDFca1uo.roa
File: LJ0n9-Tdb_aD7jQ7UG3aDFca1uo.roa (raw, json)
Hash identifier: iE/xGA9rS2srclNSrtEOSBE/JH5oymzmAFdBi0kSCms=
Subject key identifier: 2C:9D:27:F7:E4:DD:6F:F6:83:EE:34:3B:50:6D:DA:0C:57:1A:D6:EA
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C8D4C2D6E906C168563037ED67271
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LJ0n9-Tdb_aD7jQ7UG3aDFca1uo.roa
Signing time: Thu 02 Jan 2025 09:50:35 +0000
ROA not before: Thu 02 Jan 2025 09:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215983
IP address blocks: 90.188.19.0/24 maxlen: 24
178.34.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:8d:4c:2d:6e:90:6c:16:85:63:03:7e:d6:72:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c9d27f7e4dd6ff683ee343b506dda0c571ad6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e4:98:5d:0d:f2:8f:d6:33:29:ec:46:6c:2e:
d9:0d:e3:a9:de:7b:2b:64:fa:32:b2:33:a0:57:2d:
50:ea:d2:65:53:b2:7e:5d:1a:cc:71:c4:99:90:b9:
89:12:5f:a6:c0:f9:c4:c9:0f:d4:8d:e2:df:d4:64:
9a:1e:a6:07:84:06:88:cd:59:c8:27:b7:d9:0f:f0:
d2:c0:f2:86:60:ef:c2:37:45:41:46:e6:78:72:ad:
71:57:aa:28:e1:11:54:48:47:97:be:24:c5:18:bb:
60:7e:cb:77:cd:6e:3d:81:3c:55:4f:51:fe:db:bf:
bc:77:76:4b:3d:5c:63:6e:a8:4d:d3:d0:82:9b:8c:
dd:5b:94:20:c8:e8:a7:b8:ca:2e:bd:71:59:c3:af:
74:2e:d3:7c:70:0d:fb:bb:8a:96:77:d7:84:4c:c0:
35:ef:da:e8:0c:3b:3d:88:8f:2f:39:3e:72:de:8f:
da:38:f2:cb:bd:24:11:e3:6a:4a:6f:4c:dc:c7:5b:
c4:18:b7:af:8c:ef:4d:e9:61:79:ad:43:78:72:27:
e6:ba:28:39:17:f8:f8:9f:33:6b:ea:8e:26:37:ac:
03:70:43:a0:39:ff:0a:0d:fa:73:c2:b4:12:db:31:
0b:91:ae:c6:a1:a5:6b:8d:da:8f:e5:2c:9a:f8:4d:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:27:F7:E4:DD:6F:F6:83:EE:34:3B:50:6D:DA:0C:57:1A:D6:EA
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LJ0n9-Tdb_aD7jQ7UG3aDFca1uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.188.19.0/24
178.34.79.0/24
Signature Algorithm: sha256WithRSAEncryption
86:0a:ff:31:04:fa:d5:cb:49:7f:43:77:c2:3a:79:7f:39:84:
4b:9b:ab:f3:86:76:e8:36:d8:50:59:f6:e6:7b:92:06:a2:84:
43:87:27:12:da:e7:96:57:05:9b:97:90:d1:4c:d7:76:58:e2:
c2:cd:57:f4:47:9c:6e:e8:0d:ca:d7:af:9a:84:36:a6:5a:94:
34:2e:38:31:fd:98:53:88:ab:88:d6:0f:96:67:5a:9c:36:db:
79:26:ee:73:85:c1:90:95:4e:94:b3:54:bd:14:da:0b:38:98:
f0:76:01:9c:b6:61:ce:3f:5f:e1:fb:88:5b:8c:2b:a3:39:a2:
4f:14:be:2f:6d:b1:ae:56:b2:1b:83:b6:f7:aa:2b:c4:fd:0c:
6d:66:7d:d8:1d:8b:18:ae:60:ab:1d:c0:b5:83:fc:a5:97:5c:
65:15:60:65:80:8e:06:a1:a0:25:8b:d3:a2:71:6d:d1:bf:c0:
42:7f:30:c3:7a:08:d4:52:14:65:23:6b:a1:28:1c:bc:4b:5a:
88:ff:2b:ba:0f:bf:ff:7c:a9:df:45:83:22:f4:20:3b:4f:c7:
bd:7e:bc:b6:af:00:b4:26:79:21:9c:54:c7:38:ff:ba:9e:7c:
75:5d:bd:89:39:0c:a2:2d:1b:1d:03:ea:46:e4:40:af:5e:45:
6e:da:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:21 2025 by rpki-client