Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LdEkTLoeu9wVyaslNjclDOdZy6c.roa
File: LdEkTLoeu9wVyaslNjclDOdZy6c.roa (raw, json)
Hash identifier: 9g5Zrd4DTUxl+PWEABQnIXQ4Zbw5kMWaQMnIPVmTXwg=
Subject key identifier: 2D:D1:24:4C:BA:1E:BB:DC:15:C9:AB:25:36:37:25:0C:E7:59:CB:A7
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA47701550A807C5DB1304051B7DC
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LdEkTLoeu9wVyaslNjclDOdZy6c.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210135
IP address blocks: 92.63.188.0/24 maxlen: 24
193.32.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a4:77:01:55:0a:80:7c:5d:b1:30:40:51:b7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dd1244cba1ebbdc15c9ab253637250ce759cba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:31:97:4e:8e:f8:c0:ee:ad:f0:59:f9:9f:
1f:c6:56:4b:74:da:06:4a:06:51:e6:dc:9a:19:01:
89:fa:28:09:c5:a7:10:d5:9a:cb:b5:10:9f:4e:ba:
09:d1:6d:c8:5e:57:40:59:3e:ce:2a:bc:ad:38:d8:
e0:08:83:6e:31:e3:4e:4d:70:a1:25:f6:07:3a:39:
0a:f6:70:e5:3d:d7:ac:9a:f9:34:dc:62:ae:b1:52:
70:f1:32:22:fc:77:58:05:b9:39:09:6b:21:17:b8:
82:f7:15:52:25:05:07:08:72:e4:f8:e0:9a:c2:6a:
79:65:be:e9:b1:9c:e2:7b:fa:c8:b4:25:cb:20:9a:
f5:56:79:e6:8b:b2:4a:8e:97:f9:88:1e:b0:53:31:
f6:0e:b9:57:1c:30:f2:3f:c4:2e:ca:e5:2b:10:66:
2a:75:67:fa:19:0e:e7:9a:92:5b:76:67:fc:cd:bb:
6f:7c:9a:5a:3f:08:f6:f7:62:bd:b8:ff:d0:1d:8a:
e4:35:63:47:df:78:98:24:52:d4:0c:4d:1a:07:3f:
66:a2:e7:5e:d9:c2:ac:65:28:5a:aa:cf:d7:b1:9a:
9f:23:63:57:cb:4f:e8:31:2d:cd:29:d1:28:f0:cd:
5e:94:8a:73:95:70:31:f5:1c:7f:d5:64:97:6b:48:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:24:4C:BA:1E:BB:DC:15:C9:AB:25:36:37:25:0C:E7:59:CB:A7
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LdEkTLoeu9wVyaslNjclDOdZy6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.188.0/24
193.32.189.0/24
Signature Algorithm: sha256WithRSAEncryption
03:12:e7:cb:ce:7a:d4:c7:ac:14:e5:f7:1e:c0:b9:ca:d9:36:
31:e3:7a:1e:15:10:b4:87:80:61:57:be:85:ae:fe:51:92:ef:
90:e7:da:ab:26:65:95:ea:91:ce:8c:f1:12:44:d7:ba:ba:e2:
6b:94:f0:44:1f:64:71:9f:a9:6d:26:21:2f:ec:24:75:4a:6e:
b6:dc:2f:ab:bf:57:dc:87:11:ee:69:aa:a3:38:3c:ab:21:8a:
aa:57:08:8d:90:52:c7:15:c7:35:6d:2b:b1:a7:12:30:67:e9:
91:f7:25:f3:99:ae:c1:54:5a:1f:e8:b5:80:48:6e:c4:04:85:
bb:2f:ba:b5:29:59:c4:a0:73:64:7c:c7:8d:6b:9a:2d:a5:ab:
8c:b4:09:51:be:3c:82:7c:d4:7f:8b:0b:9b:44:5b:b5:fd:c3:
b6:3c:eb:b4:67:86:51:f5:7b:7c:89:d0:be:f6:de:4a:a3:e9:
8f:3c:23:dc:e3:6b:5c:2e:f5:f4:4e:b0:ba:a4:3a:0a:95:dc:
46:5c:29:cf:a7:86:07:3e:0b:3b:32:c1:20:fd:c9:33:d6:72:
18:bc:30:9d:32:f9:2e:bb:ba:9e:71:b9:d0:36:4d:40:77:be:
d7:91:03:8a:d6:0a:81:62:a8:26:2e:7a:a9:ac:b2:63:61:a4:
83:36:46:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:37 2025 by rpki-client