Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/Lw7_YPuqPYPBZV8n8Wt5P9NRwsQ.roa
File: Lw7_YPuqPYPBZV8n8Wt5P9NRwsQ.roa (raw, json)
Hash identifier: 1Dm2dtkAzqxn7yado6BTKG4Rw10eSLXp8OwGOIhf1xs=
Subject key identifier: 2F:0E:FF:60:FB:AA:3D:83:C1:65:5F:27:F1:6B:79:3F:D3:51:C2:C4
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019488A42613715A6EEEE45C621D5166B729
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/Lw7_YPuqPYPBZV8n8Wt5P9NRwsQ.roa
Signing time: Tue 21 Jan 2025 11:34:06 +0000
ROA not before: Tue 21 Jan 2025 11:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39522
IP address blocks: 193.108.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:a4:26:13:71:5a:6e:ee:e4:5c:62:1d:51:66:b7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Jan 21 11:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f0eff60fbaa3d83c1655f27f16b793fd351c2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:75:b4:0a:ca:ba:86:38:b4:9c:c8:56:7f:
13:64:96:ca:53:fc:37:37:32:88:f8:c3:24:db:7d:
9d:ea:2d:e1:0f:00:3d:29:9d:57:52:bf:a6:5a:93:
43:de:f7:31:cc:eb:c8:89:f3:2c:3b:ed:6f:83:f3:
e4:eb:19:c5:3b:11:db:80:b0:09:3a:5e:f8:3a:8d:
8b:b8:f1:80:8f:7b:bd:8d:37:a6:6f:fd:8a:f5:25:
46:ae:66:7c:ce:0c:fd:20:2a:1e:77:b3:17:d5:aa:
19:9a:20:81:cd:c3:d9:c2:ad:57:5f:21:3c:5d:1b:
1c:b1:de:8f:97:fd:5f:79:9b:c1:82:51:71:21:d4:
ad:e6:04:52:68:0d:7f:5b:bc:dc:07:5e:39:8c:16:
ff:14:17:77:9f:5f:71:24:a3:a3:26:d5:cb:6b:71:
62:d7:52:3e:74:5c:d0:f1:cc:9c:21:77:ef:e7:60:
21:8f:4c:0e:92:20:03:8e:1d:ef:28:0f:17:51:60:
c5:23:c6:5c:13:0f:98:d0:77:9c:76:66:49:fc:48:
41:35:4a:c9:89:96:e1:2e:8d:5f:ef:15:bd:a6:28:
39:24:5d:37:95:98:c1:8d:84:51:59:bd:ac:f2:e2:
30:dd:fd:8b:a7:22:3b:e8:a9:bb:c4:7d:f4:2b:b8:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0E:FF:60:FB:AA:3D:83:C1:65:5F:27:F1:6B:79:3F:D3:51:C2:C4
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/Lw7_YPuqPYPBZV8n8Wt5P9NRwsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.80.0/22
Signature Algorithm: sha256WithRSAEncryption
07:f5:07:f9:5f:af:5a:f6:7e:7d:14:63:d9:67:f4:13:a3:04:
7f:82:c5:4b:24:9f:e6:3d:95:36:d6:bc:96:8d:c0:16:8e:ff:
fb:d5:d2:f4:7e:52:45:aa:c0:d3:cb:45:81:2d:4e:2b:2a:88:
12:ea:75:a0:22:d9:02:14:4e:32:49:f2:02:1d:98:85:72:ba:
24:54:a7:15:dc:7f:62:73:31:f5:0a:83:6a:9a:62:58:08:8f:
d8:b2:b2:60:c3:17:01:81:61:72:3b:7f:00:99:eb:ce:fd:3e:
ad:96:f3:a4:99:89:f2:25:8e:95:ec:67:bc:b4:1b:9b:f9:ed:
87:8f:a7:15:fa:ad:9b:a0:8a:a9:66:26:fc:40:a0:46:4c:82:
76:d0:d5:87:2e:f7:46:7e:12:13:52:9c:5c:58:da:fc:a9:f2:
fc:6a:fc:bf:74:ad:1d:fb:36:6c:c5:80:60:49:a9:b9:28:1d:
ec:2f:9e:5f:ca:56:92:fe:c6:10:db:52:9d:cf:25:70:df:55:
5e:7c:e4:21:60:22:31:d1:39:7c:53:a9:e7:0f:ba:cc:d7:d1:
dd:2e:be:fd:50:de:42:0a:0e:d6:b6:c4:64:8a:47:67:ee:49:
ef:fe:a4:65:6f:7c:70:18:02:a3:00:7c:13:a8:33:7a:ac:fc:
6d:f1:47:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:47 2025 by rpki-client