Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/LM4Pk0L89FT4bKCAnT5Pam60X3A.roa
File: LM4Pk0L89FT4bKCAnT5Pam60X3A.roa (raw, json)
Hash identifier: 15JH8Jc4TtNGcpNeD66bPIeSCBDAVTNv6bCkpCrYf1k=
Subject key identifier: 2C:CE:0F:93:42:FC:F4:54:F8:6C:A0:80:9D:3E:4F:6A:6E:B4:5F:70
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019424B3A7ED8470E590A2B4C4D8B45C82B7
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/LM4Pk0L89FT4bKCAnT5Pam60X3A.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43962
IP address blocks: 185.123.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a7:ed:84:70:e5:90:a2:b4:c4:d8:b4:5c:82:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cce0f9342fcf454f86ca0809d3e4f6a6eb45f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:7a:9d:cf:d7:c3:05:3c:26:75:dd:32:76:
2f:fc:4e:3a:ad:9b:54:26:4c:97:71:b2:87:e7:47:
a3:51:87:f7:c7:1e:fb:50:ab:31:b8:0b:ae:73:e6:
77:d8:33:fa:05:a3:8c:bb:51:85:ba:b4:1d:0c:80:
9e:b1:bb:7a:03:73:99:e5:c6:d0:50:ba:bd:df:d3:
9b:a4:e7:5b:5c:c3:ce:09:f3:28:f3:1a:f2:8c:e7:
93:71:a4:55:80:00:7c:92:71:91:6a:33:e2:03:0a:
60:e4:b5:3a:dc:b8:48:2f:a1:b5:20:16:61:2b:de:
0b:d0:0c:45:ed:97:8b:0c:3b:c5:32:18:4d:92:e5:
d0:dc:41:5d:16:3e:a4:72:fa:7a:80:97:ff:18:8d:
6e:66:45:65:d4:af:0e:fe:b2:a4:49:56:7a:d0:e7:
2b:a3:b0:26:1b:db:17:9a:87:eb:a4:b4:e2:0f:33:
bf:b0:7b:ab:b8:a2:f1:27:3d:da:78:60:5f:08:3e:
97:99:18:30:cc:d7:79:3d:c4:e9:8b:68:0d:ff:0b:
27:e5:64:53:3c:aa:df:82:c6:5b:bf:2c:44:ad:ae:
ed:84:06:11:2e:2d:8d:92:9e:9b:e8:f4:3b:23:92:
c5:4a:1e:9b:a5:75:8a:6e:af:fd:d8:33:78:1b:28:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CE:0F:93:42:FC:F4:54:F8:6C:A0:80:9D:3E:4F:6A:6E:B4:5F:70
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/LM4Pk0L89FT4bKCAnT5Pam60X3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.162.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:da:8d:5a:89:1e:ae:c6:6b:26:c9:37:39:67:32:4d:27:52:
1c:f1:8f:23:44:3d:7a:9e:53:82:bb:51:cd:d6:cd:7d:e3:f0:
64:d1:b0:9f:40:c6:0f:26:59:89:02:26:ed:18:09:c8:ff:18:
a5:97:2c:dd:57:69:00:9d:95:f3:f1:6d:bf:31:02:bf:17:a3:
97:02:f0:f3:bd:12:74:8d:58:f1:6d:73:48:2b:87:d4:ee:04:
54:32:01:57:ad:4e:78:9e:8a:29:fb:38:b8:f4:eb:a3:45:a6:
1c:2d:82:c6:43:e9:71:c8:7c:54:ed:af:8a:f6:63:66:9a:a6:
d2:f0:ba:c8:41:fb:44:ec:50:30:67:ff:46:60:19:a6:ad:ad:
b7:d2:f3:e9:d3:3e:e1:d1:34:2c:b9:f8:89:e3:1d:bc:fe:e6:
55:0b:d7:ad:42:48:f5:a1:11:c1:4d:5a:62:60:ca:ad:5d:fd:
1b:63:c4:e9:42:5c:e4:17:4c:db:2c:be:56:57:31:df:2e:6f:
8b:3b:d3:89:70:bf:ab:89:28:b2:dd:21:8c:cb:f5:03:8f:04:
b7:2d:11:ec:93:c1:ed:04:aa:f0:c5:64:1e:c6:a8:3d:8d:0e:
24:87:27:26:6a:13:36:dc:a1:79:6b:4a:48:b9:bd:36:8d:22:
58:10:03:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:06 2025 by rpki-client