Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/LT-9VM8v74LKR6mHQpnPgQmq0Pc.roa
File: LT-9VM8v74LKR6mHQpnPgQmq0Pc.roa (raw, json)
Hash identifier: DjF9+jZlXLi3uEoLKBvDZoW0dJ/H/LAI1EAde2tMt5g=
Subject key identifier: 2D:3F:BD:54:CF:2F:EF:82:CA:47:A9:87:42:99:CF:81:09:AA:D0:F7
Certificate issuer: /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial: 0194274859094B5D87D8652A1E9283C7E421
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/LT-9VM8v74LKR6mHQpnPgQmq0Pc.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59809
IP address blocks: 195.110.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:59:09:4b:5d:87:d8:65:2a:1e:92:83:c7:e4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d3fbd54cf2fef82ca47a9874299cf8109aad0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:d9:27:26:b8:ab:9c:d2:02:14:cd:55:9e:
79:00:12:ca:81:64:a6:ee:84:e4:ed:5d:bd:84:72:
42:92:16:cd:69:05:28:4e:98:bf:4c:08:31:e0:a0:
72:95:23:7b:2c:0c:03:df:9d:af:88:81:f7:07:f5:
51:0a:54:03:d2:18:82:cd:b9:e9:6d:43:24:04:1b:
88:e8:74:f0:7a:6a:9b:3a:fd:d6:8d:c3:d0:b9:38:
35:c1:8e:05:d1:ac:6e:77:70:1f:2a:ce:e1:f9:d9:
e2:20:04:e9:20:72:34:aa:6d:26:ca:d1:f4:75:d8:
4f:3f:cc:51:18:f0:96:9c:2f:8a:fa:29:aa:4e:74:
fc:23:f4:e6:60:74:f9:b2:54:3a:d9:fa:b0:cb:71:
45:d6:c2:57:fa:6e:fe:3c:01:62:5b:d4:c3:ea:f9:
67:ac:0a:6c:21:bf:0e:55:72:d2:4d:84:df:b7:87:
79:3c:aa:71:91:86:15:fa:af:c7:db:70:85:29:91:
c1:79:d8:87:24:a4:c1:a9:36:87:52:c9:16:92:f3:
83:ba:35:7f:81:3e:a2:7f:4b:a0:f9:31:5d:9a:47:
99:c7:84:85:9a:fb:c8:28:be:0f:6d:ab:ff:a7:61:
b1:1d:4b:a3:04:bd:f0:bf:15:03:b5:98:2d:5b:7c:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3F:BD:54:CF:2F:EF:82:CA:47:A9:87:42:99:CF:81:09:AA:D0:F7
X509v3 Authority Key Identifier:
keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/LT-9VM8v74LKR6mHQpnPgQmq0Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.190.0/24
Signature Algorithm: sha256WithRSAEncryption
75:09:d8:63:9c:c4:1c:52:22:50:19:f4:6b:e9:fc:9c:8c:88:
25:cb:e0:65:0f:26:50:0a:51:41:43:23:97:35:10:37:55:dd:
ef:02:e3:4e:ca:3d:2a:1c:2e:66:f2:dc:0f:91:bf:81:dd:26:
87:ff:19:67:08:0b:e5:58:30:04:10:a3:56:b7:32:ed:23:38:
39:1f:49:fd:6f:13:ab:36:0a:c3:40:19:5a:77:e6:73:69:d7:
0c:a3:74:01:ff:47:f0:d5:19:11:99:4a:f2:c5:54:75:da:91:
7b:2f:86:aa:5b:f0:a7:38:39:9a:bd:7d:e8:6f:c2:57:87:2e:
d5:b8:e7:a9:77:6f:12:d9:73:d9:7e:f7:59:4b:5d:05:72:51:
67:a8:7f:c9:18:40:9c:67:8b:c0:01:94:75:5a:61:43:6e:1a:
60:3e:fd:35:75:77:36:4a:cf:f9:39:1b:77:f9:53:9d:2e:dc:
73:fb:20:91:5a:8f:14:3a:07:3b:a0:49:96:46:23:bf:14:3d:
8e:51:ae:90:b8:ad:6d:69:76:d0:fa:cf:69:b8:e3:64:62:71:
7b:2b:af:a0:92:a9:a3:1d:8b:ef:53:49:2c:ef:43:50:bf:f2:
dd:57:3e:7d:84:16:ff:43:b6:06:26:29:69:51:d0:4d:3b:71:
84:6d:21:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:45 2025 by rpki-client