Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/LBY01Gl8ixw3Mc66QRLQiVSPmYw.roa
File: LBY01Gl8ixw3Mc66QRLQiVSPmYw.roa (raw, json)
Hash identifier: bBw+LS6dyRFzpJYYVzcltT4Vy+zE4L69kQ3Fs5WizCo=
Subject key identifier: 2C:16:34:D4:69:7C:8B:1C:37:31:CE:BA:41:12:D0:89:54:8F:99:8C
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 0194B7068B19DDE4D04351F6799C5A29F0DB
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/LBY01Gl8ixw3Mc66QRLQiVSPmYw.roa
Signing time: Thu 30 Jan 2025 11:44:06 +0000
ROA not before: Thu 30 Jan 2025 11:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214300
IP address blocks: 217.9.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:06:8b:19:dd:e4:d0:43:51:f6:79:9c:5a:29:f0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 30 11:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c1634d4697c8b1c3731ceba4112d089548f998c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:4a:dd:a0:a3:81:76:b1:4a:fb:68:1f:b6:
26:c1:b2:7c:5f:f9:5d:9c:2f:46:ac:20:95:4d:52:
a0:f5:cb:41:fd:6c:af:75:43:62:de:88:db:b8:74:
85:e3:b4:ae:ee:0d:59:07:4d:78:30:1c:b4:bd:5e:
5a:90:11:cb:68:5a:ac:f6:8c:12:c3:83:c6:48:5e:
b4:e4:64:22:be:03:05:16:15:24:9b:20:c7:f1:e2:
30:f9:e0:44:94:f9:e8:dc:a3:51:cd:d6:03:c5:33:
46:7e:76:43:1b:1b:18:c5:07:00:ab:aa:6f:6c:17:
e2:c2:54:94:c7:9c:ee:dd:12:50:d6:f2:98:b5:06:
e5:62:42:74:f2:d8:b0:b5:76:05:d4:37:f6:2e:ec:
79:68:78:94:de:1e:b9:23:dc:e6:e5:bc:d3:e1:1f:
16:aa:85:0b:7a:35:e9:ae:9f:d8:8c:50:90:69:9b:
5f:58:fe:41:d6:66:12:73:35:b8:e6:82:a7:45:43:
7d:b3:73:67:b6:2b:42:10:e8:f0:3a:fc:67:3a:d4:
04:e3:26:f1:c0:3e:43:fb:93:2c:d4:04:d9:42:d9:
3a:4e:7d:73:90:0c:92:ee:e7:d0:57:d6:f1:31:88:
26:e6:ae:23:0c:d6:24:16:2a:04:ea:cf:6c:75:8d:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:16:34:D4:69:7C:8B:1C:37:31:CE:BA:41:12:D0:89:54:8F:99:8C
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/LBY01Gl8ixw3Mc66QRLQiVSPmYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f5:b1:3d:9b:f9:e7:b0:2a:1b:13:2c:d5:f3:83:9c:81:d3:
27:04:8a:58:5d:e3:93:95:9f:3f:92:33:33:3d:2b:0b:72:14:
1b:7e:98:77:6f:ba:69:d2:a3:ac:03:1a:6f:30:53:ee:c8:d8:
ca:52:b0:0c:10:93:36:6f:36:24:17:d9:78:a5:f6:30:93:bc:
e4:a9:6e:6a:fa:66:09:90:2d:c7:7c:e7:47:31:79:15:9d:39:
15:98:b4:1f:7d:79:1a:a3:5a:0a:30:ec:95:1e:af:bf:c9:77:
8a:75:52:29:e9:23:57:80:ad:71:96:3c:19:a3:e3:64:aa:03:
66:7d:2f:29:5a:67:08:51:2a:f1:67:e4:dc:47:11:8e:b6:c7:
34:6f:fe:f1:45:59:45:af:11:18:50:3e:bc:77:8e:19:50:ac:
33:60:9f:61:d9:28:da:df:17:c9:0d:94:fd:b9:73:1e:9a:35:
ee:3a:3a:5f:32:d6:fe:c1:5d:e6:73:3b:b7:47:e8:01:10:1e:
d0:8f:ee:d5:93:1f:fc:3a:b8:f4:ec:7a:15:c1:67:79:35:8d:
46:24:bb:56:65:cd:0a:f1:3e:5e:27:1c:a7:ab:82:18:75:89:
8b:8a:74:71:95:45:e7:69:41:26:41:d2:9a:da:e3:c2:7a:15:
a0:74:07:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:38 2025 by rpki-client