Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa
File: Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa (raw, json)
Hash identifier: tYAhzY7EkxkcdKAd1e+CEruoxf+PG643EXDIhg1GnKY=
Subject key identifier: 2F:0B:F6:CF:9D:13:69:C1:17:0D:F0:20:B7:64:10:E5:39:E9:90:2B
Certificate issuer: /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial: 019421B23FC0F0175C8409BEC51AE0CE954C
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 130.251.0.0/16 maxlen: 16
192.148.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3f:c0:f0:17:5c:84:09:be:c5:1a:e0:ce:95:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f0bf6cf9d1369c1170df020b76410e539e9902b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:55:db:94:6e:5b:ef:96:3a:a6:70:41:49:
26:92:d0:d4:e7:d7:87:28:5b:fb:33:74:94:df:38:
dd:0f:ef:d9:59:69:79:21:24:55:72:21:7f:0b:70:
9b:46:06:2f:8a:18:d7:6e:6b:01:e9:2a:02:37:ac:
fc:64:1b:b7:83:d2:2b:33:cb:b3:3a:0e:ac:3f:2b:
b0:47:de:8d:fa:f5:dc:1c:65:a4:ce:0c:cd:ff:e1:
92:fd:42:f0:fa:2b:b3:29:11:60:8c:7f:11:d9:4b:
bc:16:0e:d9:a9:f4:53:43:c2:fe:8b:25:64:c1:b8:
82:f0:d0:87:b4:76:c1:ee:44:0f:ec:53:13:64:88:
8a:f7:da:70:c2:53:d2:c6:94:fc:a8:15:dd:9b:23:
8c:e5:44:4b:2b:ef:af:98:33:20:67:a5:da:b2:a4:
7b:ad:1f:2d:36:cf:cd:32:93:7b:a6:5b:0e:8f:ea:
7f:9f:90:fa:8e:ae:1d:f6:7c:54:d4:e7:8e:77:8c:
e5:b0:08:42:cc:25:34:df:9f:e5:64:ca:c1:a8:45:
8a:43:1d:3f:f1:97:d7:8a:f5:c9:dc:ad:5d:33:86:
27:94:1a:d6:38:f6:da:ce:d8:d4:54:62:7f:a7:2a:
2e:b1:3b:9f:c3:87:9f:b1:95:f0:47:2d:6f:3d:58:
cb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0B:F6:CF:9D:13:69:C1:17:0D:F0:20:B7:64:10:E5:39:E9:90:2B
X509v3 Authority Key Identifier:
keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.251.0.0/16
192.148.193.0/24
Signature Algorithm: sha256WithRSAEncryption
65:5d:1f:62:91:01:a4:a8:01:6f:52:76:6c:51:8a:bb:13:8c:
c1:30:4d:f4:33:d8:63:2f:64:4a:b1:51:1e:9f:e5:52:2e:79:
13:d6:fd:68:90:10:57:bc:8b:25:f6:cf:e9:a7:fe:82:69:d4:
ec:9d:7b:65:19:9c:55:14:52:e4:d4:67:46:82:4b:c3:7d:6f:
52:b2:d6:27:5a:72:32:d8:04:8d:13:71:1c:f4:93:b8:6a:c7:
8d:0c:c4:0d:fa:69:03:5d:11:d1:df:0f:5c:83:d8:22:e0:e8:
5d:31:4d:57:91:ba:6d:cb:e5:ca:64:d8:65:b5:1e:0a:ad:07:
6f:a2:63:ae:80:f4:74:52:d0:d3:ff:08:12:37:73:95:67:7b:
55:72:2f:05:b1:4f:ac:e2:8b:9c:76:ab:86:ca:ee:d8:c1:aa:
73:c5:b8:5a:67:7d:f9:71:e8:08:3a:e8:a6:26:1c:96:cd:10:
d8:8d:2a:37:14:09:c7:0f:ff:18:b8:34:87:59:b7:c5:6c:e1:
cd:42:a9:4b:d8:ed:0e:d2:f3:5b:1a:d8:9d:49:db:19:29:1c:
ff:ee:9a:1e:47:48:d9:6f:24:09:2a:4d:3f:63:49:87:bd:33:
68:dc:ef:c2:4f:15:b9:fd:37:aa:b1:28:66:cb:ae:5d:00:8e:
60:aa:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:45 2025 by rpki-client