Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/LpnDXu3JDFLVkqdaS_J_mqz_IRA.roa
File: LpnDXu3JDFLVkqdaS_J_mqz_IRA.roa (raw, json)
Hash identifier: rZ4d4CAV2di4e3eFZ315ntn8Ch6bIgV7U8l1SlWqnhA=
Subject key identifier: 2E:99:C3:5E:ED:C9:0C:52:D5:92:A7:5A:4B:F2:7F:9A:AC:FF:21:10
Certificate issuer: /CN=94b50928a96cb9e9120ff3cb635b3f7d70c97ce0
Certificate serial: 019427B604110B2536D15EA063D17705CAAD
Authority key identifier: 94:B5:09:28:A9:6C:B9:E9:12:0F:F3:CB:63:5B:3F:7D:70:C9:7C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLUJKKlsuekSD_PLY1s_fXDJfOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/LpnDXu3JDFLVkqdaS_J_mqz_IRA.roa
Signing time: Thu 02 Jan 2025 15:50:27 +0000
ROA not before: Thu 02 Jan 2025 15:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20668
IP address blocks: 185.16.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:04:11:0b:25:36:d1:5e:a0:63:d1:77:05:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b50928a96cb9e9120ff3cb635b3f7d70c97ce0
Validity
Not Before: Jan 2 15:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e99c35eedc90c52d592a75a4bf27f9aacff2110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:18:63:ac:71:d4:48:21:30:fc:36:93:5f:
88:f0:19:37:d0:5d:f4:90:a1:36:42:52:70:73:96:
fb:95:5d:57:72:46:9b:2e:ae:15:b9:dc:a6:5b:4a:
69:b9:42:55:21:21:43:28:eb:ef:3b:61:ea:36:11:
76:75:9c:ca:d4:51:04:5f:7e:cd:d5:16:b5:89:86:
2d:34:7e:b9:fa:ff:c3:13:d4:df:1f:c9:2f:a7:fe:
b1:f0:72:f2:71:69:4b:3c:ff:37:54:2d:cf:ae:f3:
cf:1b:10:6e:34:68:94:03:4b:7a:a7:ac:2f:f2:3a:
14:5f:ea:a2:fa:c8:51:bf:9d:35:c9:57:33:83:d7:
5f:17:98:87:8c:0b:be:d6:85:70:19:13:db:a0:b8:
c1:f4:33:3e:3c:82:50:f5:28:08:29:78:d8:13:41:
17:f4:6a:d2:0d:04:65:22:38:65:b9:48:c3:2f:56:
9f:ec:72:c6:73:0b:ef:dc:e2:f5:97:1d:05:6c:86:
46:12:a6:72:37:0f:ab:79:25:1f:a5:1b:52:d9:0a:
a3:2e:33:47:9e:2b:59:09:49:f9:ce:6e:6c:5a:59:
91:24:c7:cb:13:2d:bc:a1:56:bf:c0:8d:f2:89:11:
95:1a:47:9c:1b:0e:c4:cb:ec:87:eb:42:40:02:b1:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:99:C3:5E:ED:C9:0C:52:D5:92:A7:5A:4B:F2:7F:9A:AC:FF:21:10
X509v3 Authority Key Identifier:
keyid:94:B5:09:28:A9:6C:B9:E9:12:0F:F3:CB:63:5B:3F:7D:70:C9:7C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLUJKKlsuekSD_PLY1s_fXDJfOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/LpnDXu3JDFLVkqdaS_J_mqz_IRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:3e:17:7f:01:55:3d:3d:3e:5d:05:a8:2d:17:08:3e:8e:7f:
23:1e:33:32:33:43:2b:6e:7a:60:1b:02:8d:95:48:5d:00:93:
cf:46:d2:64:ed:d3:57:e3:4e:eb:bc:be:e6:a9:21:55:08:51:
d4:93:47:c8:82:cd:55:18:3c:cf:02:d3:65:c2:b0:7f:7f:a1:
8a:fa:ca:7c:6b:5f:90:c2:ad:28:da:41:d6:bd:f8:41:39:aa:
f0:7b:b6:76:3d:61:bb:3f:43:66:68:5f:cb:51:8b:6b:9a:3a:
99:67:61:ec:b4:3e:cf:96:7d:d5:b6:2f:24:61:cc:83:94:bd:
fb:d2:4b:3b:42:5f:54:a7:e5:a8:3f:63:a6:1e:a8:13:8e:fb:
e3:0e:47:8c:c3:65:88:a6:b1:27:ab:ef:ef:96:41:e4:eb:3d:
3c:7f:57:fe:75:6d:4a:f7:41:8c:2f:b0:01:ed:72:2e:60:1d:
f8:d7:45:d9:9d:5e:df:f5:49:fd:e4:6c:6c:e8:22:fd:f2:60:
f1:fb:f8:26:bd:c1:00:ac:5b:2e:b3:66:fe:2d:e0:eb:ad:a8:
2c:f6:a5:74:3c:f6:a0:3d:67:ef:f2:2f:17:04:ac:70:e1:f3:
19:81:ac:7e:fc:b3:b2:c9:72:86:28:94:9e:08:f8:60:4d:f9:
e9:52:fc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:00 2025 by rpki-client