Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa
File: LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa (raw, json)
Hash identifier: DoEtx/xv7eVuPlv74sp5O1oZZhlzZhNTbGR1DN0rf7U=
Subject key identifier: 2C:B7:23:54:A9:FD:56:90:E8:68:38:5D:A8:84:7A:9A:01:53:66:D2
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 01942521830E002E6E04CCED1940FB02CE60
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12463
IP address blocks: 213.215.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:83:0e:00:2e:6e:04:cc:ed:19:40:fb:02:ce:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cb72354a9fd5690e868385da8847a9a015366d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:8d:4b:1f:d6:bd:dd:56:5a:d7:06:c0:53:
6f:65:29:06:4a:e8:5c:d8:f4:85:f2:23:11:e8:3e:
0b:99:c1:1f:91:1a:bd:cb:ba:1a:ef:f3:2a:4f:b8:
a6:eb:25:9a:8c:45:f9:60:cd:f9:9a:14:b4:05:97:
f5:94:d8:c2:00:13:d5:d5:52:77:7a:58:52:aa:61:
d6:53:be:a1:9a:a2:2a:c9:6e:2d:72:9e:7b:14:de:
21:09:5c:43:32:62:7c:97:06:e5:ea:b6:b1:7a:ab:
24:5c:af:25:48:9d:9b:9f:4a:88:a6:73:64:ff:f3:
ca:2f:9d:d5:40:f7:8b:02:fb:48:a9:83:6a:ae:32:
40:86:e1:39:81:e9:0c:a3:51:95:9b:f9:26:3b:21:
4e:23:45:f0:26:78:d5:a6:9a:42:2e:1b:73:d5:21:
84:c3:3f:4e:31:70:b2:dd:54:f0:85:65:21:61:e7:
c8:84:96:f7:5d:ae:6f:12:a0:17:26:a7:eb:69:45:
12:59:0a:c7:ad:55:24:25:11:12:23:6d:ce:db:d7:
1e:99:81:91:60:4b:85:c7:d6:8d:58:92:d6:46:dc:
dd:17:8b:fb:db:e8:1d:a9:df:e8:56:07:17:2f:24:
3e:94:4d:f4:8c:b0:08:51:fa:08:19:9e:d1:cc:9b:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B7:23:54:A9:FD:56:90:E8:68:38:5D:A8:84:7A:9A:01:53:66:D2
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.38.0/24
Signature Algorithm: sha256WithRSAEncryption
29:cd:2c:f4:ef:9c:fa:cc:71:9e:fa:82:44:25:81:63:16:b2:
49:b6:cf:3d:28:62:4f:73:d9:38:73:24:61:4f:10:29:7a:65:
a6:c7:37:e9:bb:85:7f:c4:0d:2d:33:fb:c7:fb:5f:be:17:ac:
34:21:02:d5:6a:d8:82:2c:d0:d1:3d:4b:1e:90:a8:7c:e3:94:
98:f6:26:fb:b7:44:1e:8d:af:d6:9d:db:3a:48:84:a7:5d:8d:
1e:48:b9:9a:96:51:af:ef:9e:eb:c8:81:a8:d0:80:1f:04:e9:
1a:d5:65:f4:47:bf:0f:1f:81:7e:5a:36:f9:dd:8e:a9:e0:04:
67:43:4f:62:39:6d:e1:77:23:47:0e:a0:cf:a9:f8:fb:40:10:
cb:29:de:21:b8:2e:fd:a9:5b:f6:51:f6:eb:73:fe:dc:52:f2:
6c:5b:bb:67:f5:f9:0d:27:80:4f:5c:35:32:5e:d9:84:c8:2d:
cb:67:af:0d:79:e2:d8:b1:96:ef:dd:53:68:d2:f1:a7:8e:c4:
fe:85:8e:5d:ad:2a:bc:84:98:de:c0:b2:1f:46:25:02:8c:33:
f5:77:0a:bf:cd:21:b7:27:18:fc:d2:2e:bd:63:7b:0c:6d:ee:
eb:52:ea:3f:40:f0:86:2d:4d:92:0b:4d:ec:6a:f9:14:b2:f0:
45:b1:b4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:57:40 2025 by rpki-client