Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa
File: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (raw, json)
Hash identifier: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=
Subject key identifier: 2C:3B:CC:3A:31:14:C6:35:6B:03:10:41:2B:05:D9:D9:65:AA:D2:27
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 01941FFAB4CAB4EAE9C84E3172B75062BA7B
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209217
IP address blocks: 92.119.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b4:ca:b4:ea:e9:c8:4e:31:72:b7:50:62:ba:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c3bcc3a3114c6356b0310412b05d9d965aad227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:40:6c:66:4e:d2:dd:a4:04:f0:14:90:2d:
9e:95:72:ca:8a:d1:64:09:69:a6:ea:23:30:41:b1:
c2:a4:7a:64:f0:ef:82:56:45:d2:e3:ce:82:41:b3:
86:8f:81:a1:bc:15:8b:d2:2e:a0:3a:ca:e7:bb:54:
5e:5e:d3:aa:5f:63:84:09:5a:cc:8a:47:02:03:7f:
53:43:0b:97:a5:b9:f5:9d:b7:83:2e:c6:b7:8e:42:
14:79:b7:3f:28:79:8f:d6:ac:ea:be:e4:84:e8:51:
1e:76:ae:27:64:60:5f:ff:65:c5:a0:c7:d4:52:7d:
28:55:67:86:ce:cf:e8:ad:2a:c3:10:a9:76:04:76:
c1:22:13:a4:8b:eb:5c:66:65:af:91:14:86:7a:f8:
1e:81:fe:cf:34:4b:34:58:f6:ad:9b:fd:e8:9f:be:
13:34:18:6c:d9:86:19:ec:44:61:be:37:c9:a6:01:
2a:5e:95:1c:c7:7f:06:ba:d0:72:78:84:27:86:17:
e3:07:79:03:ab:5d:e0:43:c9:f0:2f:1e:e7:7f:1e:
c4:40:1d:55:7e:0c:d5:83:d5:ba:9d:1e:2c:ce:ca:
d0:31:aa:44:1f:97:e0:12:d9:60:79:f6:18:89:46:
b1:bd:58:2f:92:ac:72:74:e4:22:fe:30:b0:37:f2:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3B:CC:3A:31:14:C6:35:6B:03:10:41:2B:05:D9:D9:65:AA:D2:27
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.219.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:e1:a8:74:6b:5b:69:79:20:30:ce:6c:c5:4f:2b:56:33:0f:
f8:e5:b6:17:6d:b2:90:ee:50:1f:4f:83:15:7c:44:4c:7e:50:
27:2d:3b:cf:ed:0a:52:3a:cf:1e:ce:e5:97:27:49:ce:23:e9:
35:b5:cc:80:7c:ea:62:5d:fe:97:20:6e:71:23:60:b5:63:e0:
12:bd:af:47:e0:7e:b8:12:34:d5:3b:cf:38:38:89:a0:6b:d9:
56:98:ac:e1:99:09:3c:4e:b8:11:c1:c5:8c:83:dd:3e:c1:11:
2c:7b:1e:bf:9a:da:86:da:a1:3c:e6:39:6e:df:37:32:d0:a4:
cd:5a:92:fe:90:53:37:07:29:40:68:e5:4e:b5:dd:09:d0:26:
0a:b4:a0:98:57:f7:35:9c:76:66:a2:98:85:0f:63:3e:a7:f7:
98:c9:11:fb:90:46:fd:37:0b:6d:bd:31:8d:3c:de:73:29:ea:
8c:3d:82:f1:78:bb:9a:95:fd:d5:ba:48:6d:fc:8e:ca:b8:38:
ff:7b:eb:8e:f4:03:20:d3:af:bd:a9:9f:47:a3:35:14:b3:aa:
71:ec:7b:a1:8c:69:2d:7c:5c:ea:04:9f:ad:d2:7f:a7:20:fc:
35:87:83:f2:57:32:bf:79:13:e1:07:62:1e:98:40:d7:2c:5c:
46:df:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:45:57 2025 by rpki-client