Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa
File: LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa (raw, json)
Hash identifier: NiYCGksYq+dLcXAYzq8f7QTlHaWi1LxHnyypP6wHNrE=
Subject key identifier: 2E:41:1E:D1:16:80:1C:84:32:14:08:2A:2C:57:EE:EC:81:7E:7C:97
Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial: 019422FC2D25F707B670473822983EFDEC7E
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa
Signing time: Wed 01 Jan 2025 17:48:59 +0000
ROA not before: Wed 01 Jan 2025 17:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48729
IP address blocks: 213.193.209.0/24 maxlen: 24
213.193.212.0/24 maxlen: 24
213.193.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2d:25:f7:07:b6:70:47:38:22:98:3e:fd:ec:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Validity
Not Before: Jan 1 17:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e411ed116801c843214082a2c57eeec817e7c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:c8:4f:20:23:72:a8:ca:ad:cf:1e:a8:2c:
97:f1:30:b9:c2:59:ac:66:71:4c:66:ba:8a:c0:8f:
d7:8a:f8:6c:9b:aa:a8:9c:03:ff:3c:44:8c:bb:fd:
38:92:00:73:b3:81:0b:b1:ff:98:6f:56:e9:11:7d:
c4:4e:97:ac:03:3f:14:b3:d8:63:17:2e:56:4c:8d:
a2:82:64:d1:cb:97:f2:cc:11:92:bf:33:0a:51:ff:
ee:d6:5f:91:aa:6d:a6:70:a6:5c:e9:d9:58:28:f6:
1b:88:d1:db:d8:4c:25:98:3e:22:46:e9:fc:34:8e:
71:ef:08:c7:d7:25:a3:f4:da:83:d9:2c:c6:e6:f2:
66:f9:88:32:9a:79:8e:fc:a2:e2:3b:ee:43:01:60:
b2:3c:8d:bc:e3:b1:30:df:54:4b:ee:20:ee:0f:56:
f3:80:04:9f:15:90:a4:0b:91:1e:f0:2b:47:ee:0e:
29:50:db:1b:9f:a8:a1:29:2d:70:a2:1f:c1:bb:6f:
e1:8f:aa:6f:85:e4:a0:4a:c3:54:85:02:f2:b4:2e:
68:71:ba:17:7a:cb:01:10:ac:cb:eb:35:7e:b9:e5:
e6:28:84:8c:95:99:41:e4:60:d7:3b:d8:92:cd:47:
15:e4:ed:ed:2f:d8:48:b3:a3:4d:48:c2:62:3e:27:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:41:1E:D1:16:80:1C:84:32:14:08:2A:2C:57:EE:EC:81:7E:7C:97
X509v3 Authority Key Identifier:
keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.193.209.0/24
213.193.212.0/24
213.193.232.0/24
Signature Algorithm: sha256WithRSAEncryption
95:98:3d:02:f6:c4:fa:66:31:74:54:f1:90:99:ce:66:70:1b:
7a:3d:51:a0:7d:c6:84:6e:97:09:04:64:e2:ba:2a:72:60:88:
58:d8:e4:46:4a:9b:0e:12:ee:40:cb:ce:79:37:6d:1e:94:b3:
cd:c2:ab:6b:f4:ef:1b:a6:4d:15:08:54:4b:4a:2b:81:3e:9d:
4c:b4:b8:15:a3:46:45:38:a2:00:cb:bd:ef:6c:3e:92:44:1e:
c3:8f:2b:b7:03:80:a9:fc:4d:48:9c:8e:37:d8:f9:dc:ad:4c:
4d:a4:16:84:fb:5d:ac:7e:01:bb:d6:f8:46:c6:49:39:6b:00:
69:b1:c7:45:2d:8f:48:fa:8a:1c:e3:e7:a1:3a:66:1e:2d:62:
f9:26:11:3b:2e:3c:ef:63:f9:7d:12:b3:44:d4:a1:27:a9:10:
db:13:41:ac:3d:8c:d1:3d:91:6a:ff:4b:4a:59:7b:ad:8e:0a:
eb:f5:77:6c:9f:4e:40:c1:a1:ba:8e:30:7a:51:6b:5e:ad:32:
92:c1:fb:6d:b3:53:d5:6a:c8:99:ba:3c:87:50:d4:f0:90:2a:
0f:7a:ad:4b:53:ee:9e:8a:ba:7c:8a:66:ce:20:aa:9e:56:bd:
92:eb:a1:14:0f:a0:99:cf:27:94:35:82:5b:34:1b:c3:49:3b:
2e:dd:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:56 2025 by rpki-client