Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa
File: Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa (raw, json)
Hash identifier: +dB90Z/NoEK2sKATplyBvT745dtw32LCvl2j/FqLTfY=
Subject key identifier: 2E:DD:05:25:28:C8:2F:FC:18:CC:F2:BD:5D:C9:36:52:3B:83:B6:31
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 019427474D8D9CCA0AF63E33F7D02CE2912E
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa
Signing time: Thu 02 Jan 2025 13:49:31 +0000
ROA not before: Thu 02 Jan 2025 13:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56410
IP address blocks: 217.115.121.0/24 maxlen: 24
217.115.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:4d:8d:9c:ca:0a:f6:3e:33:f7:d0:2c:e2:91:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Jan 2 13:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2edd052528c82ffc18ccf2bd5dc936523b83b631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:53:b7:c7:6a:09:6d:f8:b2:b3:37:8d:33:
78:35:e1:a4:80:2f:c9:4b:6a:f8:20:d7:88:2b:55:
2b:2e:19:61:e7:be:68:cf:83:7d:c3:1f:f3:f9:59:
80:79:af:de:fb:fc:ca:53:a3:dd:21:57:3f:b5:ee:
21:de:18:f1:8d:b4:78:e7:58:3c:8b:da:5d:0e:e1:
71:4d:6b:43:ae:44:be:6b:a0:b3:ca:33:c4:d6:d8:
09:5f:8f:38:55:25:10:05:37:27:36:3d:9b:9b:dd:
e6:5e:ee:18:7e:d5:6f:38:aa:dc:5d:fb:90:7f:99:
1d:6c:8e:90:fb:c5:ae:b2:6b:ea:5b:b1:d9:f2:61:
35:64:dd:70:2b:68:12:87:e5:1e:01:e7:ad:6e:4f:
35:81:a8:13:ef:23:c8:9d:02:79:c6:14:42:2e:59:
4c:9d:90:72:2c:1e:0e:60:d2:4c:f8:fd:e5:03:0d:
d1:99:29:2c:4c:31:ba:fa:95:4d:3c:5a:b7:70:75:
8f:4b:6c:6d:00:af:fe:e6:06:44:12:27:5c:b7:b4:
4c:f4:88:5a:aa:32:65:72:df:98:ec:c0:91:0d:fb:
4f:87:b4:ed:f5:fa:94:3c:b0:a9:b4:d8:da:dc:5d:
18:47:a0:5c:bb:ca:88:58:36:7c:8f:a2:c4:32:90:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:05:25:28:C8:2F:FC:18:CC:F2:BD:5D:C9:36:52:3B:83:B6:31
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.115.121.0/24
217.115.124.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0b:9d:f8:c3:07:c7:23:d4:0b:97:9c:6b:60:56:9a:c6:a0:
9d:ec:b5:f2:9a:2e:a3:d7:03:92:7e:22:b9:1f:19:8e:99:81:
0e:dc:88:2d:91:99:4a:6f:20:b9:ec:4f:a1:cd:11:dd:b9:64:
ac:fc:e2:95:90:b6:39:41:c6:88:32:14:c0:26:83:88:34:2f:
6d:8a:dc:b7:c5:52:f7:5f:00:86:27:1b:c5:4c:8c:02:9f:f9:
22:f1:3a:21:ed:e8:61:29:a9:76:65:66:c9:4a:d6:e4:e0:63:
00:32:0b:bf:8e:55:9b:77:af:55:d5:a6:ad:03:13:88:2a:17:
98:00:73:12:8b:2b:76:ae:6d:24:ce:dc:cb:d3:6c:9a:c4:2b:
97:a3:ac:08:e6:56:aa:cf:71:79:96:15:74:8a:4f:70:a6:82:
ef:26:4b:56:47:03:07:93:1a:5f:8d:91:85:4f:8e:ab:f7:97:
a6:65:6a:d0:79:30:eb:38:81:98:c4:18:35:12:b8:66:f1:57:
47:d3:a3:97:64:43:80:59:a8:f8:e6:81:74:a5:e7:2d:e4:ea:
79:7a:19:b1:c6:89:47:dd:67:f9:a3:97:66:e9:39:87:d0:5a:
00:9b:04:bb:ab:67:0f:a7:37:1e:2c:f2:82:87:bc:2c:25:53:
c1:71:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:20 2025 by rpki-client