Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/lOXoXnSoYH-Ze2jDn-kLGtNui38.roa
File: lOXoXnSoYH-Ze2jDn-kLGtNui38.roa (raw, json)
Hash identifier: Pz0iJoXh4tIWOR42AxlitpnyK4ra9wQb5adMKDc9S9o=
Subject key identifier: 94:E5:E8:5E:74:A8:60:7F:99:7B:68:C3:9F:E9:0B:1A:D3:6E:8B:7F
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 0194228D28894C761420B3BB6B9002AA835A
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/lOXoXnSoYH-Ze2jDn-kLGtNui38.roa
Signing time: Wed 01 Jan 2025 15:47:43 +0000
ROA not before: Wed 01 Jan 2025 15:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43623
IP address blocks: 149.219.8.0/23 maxlen: 24
149.219.249.0/24 maxlen: 24
149.219.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:28:89:4c:76:14:20:b3:bb:6b:90:02:aa:83:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Jan 1 15:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94e5e85e74a8607f997b68c39fe90b1ad36e8b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:d0:10:73:f2:d9:58:c5:dc:cd:12:24:ee:
88:ea:5b:fc:3b:96:4b:78:07:75:e9:32:7e:53:d0:
17:f0:23:4a:f5:12:46:9c:23:5a:92:72:2e:23:11:
75:41:3b:09:8b:1b:c9:c1:b0:dd:a6:a6:59:3a:b1:
5d:fc:90:4b:aa:fa:84:29:68:20:55:8d:2a:a1:cd:
a1:46:48:e5:57:c9:da:3d:fe:60:5b:5c:f0:2d:f6:
f6:90:a3:30:37:d8:cd:63:fe:fe:ff:90:36:9c:d1:
24:7a:d1:24:9e:63:ff:8e:ef:16:51:11:70:c2:a4:
e1:be:f3:7c:04:b0:4d:6a:80:ea:d6:7f:37:bf:1b:
84:2f:7a:9a:fb:43:a2:d5:15:c2:8e:7c:ac:77:be:
73:f7:88:ff:49:b4:63:a3:82:15:38:c2:24:42:37:
71:1d:90:68:c6:69:35:fb:4d:50:96:ff:73:d4:21:
ec:94:3f:da:2a:a9:3c:dc:72:d9:0b:ba:b4:9e:f7:
40:54:28:c1:41:38:61:79:ef:7d:e2:e6:03:ce:1c:
a6:b0:75:01:45:31:d8:fb:c0:c4:31:74:8c:e0:12:
61:dd:4c:35:33:49:82:4b:7f:7c:f5:e8:c7:03:8d:
c3:40:3e:c3:b0:58:e6:81:78:5d:01:86:af:bc:a9:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E5:E8:5E:74:A8:60:7F:99:7B:68:C3:9F:E9:0B:1A:D3:6E:8B:7F
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/lOXoXnSoYH-Ze2jDn-kLGtNui38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.219.8.0/23
149.219.249.0-149.219.250.255
Signature Algorithm: sha256WithRSAEncryption
82:44:f9:f6:bf:9f:58:4a:57:ba:b7:27:ec:c7:91:10:7b:89:
e4:cc:70:87:96:e8:c8:9c:04:16:95:7b:34:7c:ec:75:3f:ff:
42:ea:21:5f:b1:5e:fc:bd:2c:af:fa:20:b7:83:28:a6:44:3a:
2b:28:49:13:ed:8a:97:3e:d1:5a:4b:5d:a0:2a:30:59:96:8e:
f9:7c:6f:c7:68:4c:1f:c1:9d:03:2c:3d:34:33:c0:50:11:c9:
38:9d:e5:ff:4f:85:e9:01:ae:5f:5c:e1:3a:cd:3a:6d:fa:92:
d5:3e:6d:26:b1:52:fe:fe:28:6b:93:65:d6:46:ba:64:a3:56:
a8:53:fc:8b:e2:ca:95:a2:2d:00:a3:76:68:cf:99:63:6f:bb:
49:35:9c:ab:65:25:74:dc:7f:b7:ca:ec:dd:c7:00:77:ef:8d:
62:54:34:9e:69:bd:0b:84:16:4e:4b:fc:7b:f3:48:c8:74:df:
a6:8d:a8:af:a4:42:d0:16:d3:93:da:e2:81:43:05:a1:35:b5:
e7:cc:6a:83:c6:3e:d8:58:25:b2:ec:b5:8d:74:aa:c9:e5:25:
17:37:15:42:a3:c1:eb:a3:bd:eb:6f:7d:e5:0a:00:5c:64:3d:
87:1a:ef:08:81:92:e0:10:56:45:75:41:81:f0:fd:5b:c8:5b:
64:0b:53:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:51:06 2025 by rpki-client