Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/lgWMWWQ2KOYdSDhAlDGQuHNHWdc.roa
File: lgWMWWQ2KOYdSDhAlDGQuHNHWdc.roa (raw, json)
Hash identifier: P6bpbS3OXvq0UtxdzJFd21jTQ3yjWXkBJ0OIzqYZwM4=
Subject key identifier: 96:05:8C:59:64:36:28:E6:1D:48:38:40:94:31:90:B8:73:47:59:D7
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 0194258FBAD6694AE6CFCB59A088F1C21D87
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/lgWMWWQ2KOYdSDhAlDGQuHNHWdc.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199669
IP address blocks: 194.38.10.0/24 maxlen: 24
194.38.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ba:d6:69:4a:e6:cf:cb:59:a0:88:f1:c2:1d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96058c59643628e61d483840943190b8734759d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:4f:29:35:35:ec:93:3d:fd:da:c0:4b:d7:
b6:0d:5d:da:55:16:80:7f:ca:9e:6b:98:e9:a8:cf:
e2:b9:5c:44:02:32:d2:c7:dd:a3:3e:92:50:f4:3e:
7d:0b:a6:ca:1d:43:70:bb:93:b6:ca:b7:56:6e:33:
c6:33:ef:e2:6d:8c:eb:27:7a:13:db:22:6e:c4:a1:
ad:7c:ed:6d:bb:29:30:d8:42:4f:a7:3a:d3:c3:b4:
56:16:8e:91:4b:17:17:2b:ae:79:b1:36:f4:55:d0:
3c:d5:fd:59:05:7e:7b:0c:4f:8c:17:0e:8d:f0:2c:
fd:a9:71:9d:78:e1:d4:4b:b1:90:3f:d9:01:40:2b:
a3:2b:d7:97:c0:49:c6:cf:25:07:14:b5:37:cc:e0:
cf:23:76:0e:5b:6f:d8:a1:53:dc:22:65:42:eb:1b:
ff:ee:95:38:52:54:59:48:d9:2f:89:2a:d1:09:10:
a1:c9:48:84:bb:e4:23:6e:56:00:32:7a:8a:62:12:
b3:3d:43:ce:c6:a0:d5:c6:df:42:15:7e:11:30:f4:
d2:a8:74:c9:86:34:5c:29:0b:3b:51:ac:17:fa:19:
23:a0:21:23:66:64:1c:99:b3:3e:9f:eb:25:38:fa:
71:13:5c:cf:bd:12:d8:22:0c:aa:07:ca:51:8a:a7:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:05:8C:59:64:36:28:E6:1D:48:38:40:94:31:90:B8:73:47:59:D7
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/lgWMWWQ2KOYdSDhAlDGQuHNHWdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.10.0/23
Signature Algorithm: sha256WithRSAEncryption
47:4d:13:6d:9a:a9:3d:38:e6:ce:8b:13:9e:f0:d3:8f:cc:bf:
c1:3a:a9:01:6a:50:6d:80:22:c9:52:af:ef:98:7b:5e:86:c9:
21:cb:8b:c2:8c:bd:4e:32:f0:a8:eb:49:0a:c7:24:7a:45:fc:
29:eb:51:73:8a:dc:dd:f2:2b:3c:94:25:14:44:fd:e5:5c:30:
d1:93:ac:0f:a7:a9:cb:b9:5a:f4:25:41:ee:7f:0e:a7:f7:76:
15:39:c4:c9:21:3d:45:e5:46:31:0e:6d:92:29:56:cc:26:16:
57:68:c3:83:ed:fd:19:68:84:04:dc:66:19:c8:27:95:d8:ad:
13:83:27:45:0d:bb:5d:14:4c:0e:47:d0:8a:b6:b5:f7:a9:d4:
46:99:33:5c:a0:73:d2:e5:86:31:a3:1c:c3:87:7c:24:19:52:
dc:11:2b:f1:dd:b1:2f:76:27:96:43:75:9f:50:50:2b:9c:96:
ea:4a:48:27:f8:49:55:8c:05:70:0a:5f:ca:0b:d5:b4:d1:1e:
f9:f8:d1:6f:8a:05:8e:90:8f:81:ec:3a:70:c0:d2:ae:b2:51:
aa:15:b3:7f:c1:af:0a:7e:fc:d6:20:e7:01:db:e8:ed:0a:dc:
40:bf:d8:c3:ad:73:ec:02:4a:2e:0b:31:56:32:65:59:a3:2d:
a5:4e:b3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:43:47 2025 by rpki-client