Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/LlPeYcU2dy-3SXumX9DEWZNt5hI.roa
File: LlPeYcU2dy-3SXumX9DEWZNt5hI.roa (raw, json)
Hash identifier: j0PkMGVwrFlS+qNvQe2n82M3uELkpS90A9lvkwyKKqs=
Subject key identifier: 2E:53:DE:61:C5:36:77:2F:B7:49:7B:A6:5F:D0:C4:59:93:6D:E6:12
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019424B3E5A75E5753E56BC8CE23EBD99BF3
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/LlPeYcU2dy-3SXumX9DEWZNt5hI.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198405
IP address blocks: 185.156.97.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e5:a7:5e:57:53:e5:6b:c8:ce:23:eb:d9:9b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e53de61c536772fb7497ba65fd0c459936de612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:bd:9e:eb:33:43:71:f0:94:f9:0d:65:a2:
fe:67:8d:e8:97:f6:58:22:c9:5b:14:0e:f5:8d:92:
b3:85:2b:6a:1d:b8:ca:7f:11:96:50:bd:c7:c7:79:
0d:36:36:4e:fa:a0:69:2f:b4:46:8c:8e:a5:55:08:
f0:4f:1a:67:80:74:ca:f1:00:e3:4d:da:05:45:c6:
26:22:28:da:98:f1:0c:4f:6b:9c:82:10:66:c6:3b:
6e:56:ba:26:41:eb:46:fe:db:2a:a1:82:30:f4:a1:
7a:3d:26:53:99:8b:94:c3:d2:e9:a5:b0:e3:e6:1c:
76:3a:5d:e5:61:1e:ef:4d:7d:f6:cd:dd:b0:ba:9e:
f5:78:19:c7:ec:d8:8c:b4:b9:0d:a1:58:fc:3d:35:
02:8f:17:1a:a6:6b:6b:1a:d1:87:fe:18:c3:d2:87:
5a:9d:a7:4f:10:d0:7e:c4:d7:5c:cc:57:ee:5a:ed:
40:24:6e:f9:b8:93:f8:9b:85:75:53:51:59:51:9a:
e1:47:83:f3:7b:34:83:09:46:cb:43:35:06:6a:33:
67:62:4a:2c:74:5f:e1:7d:c9:26:67:26:f9:16:63:
ce:5a:65:b1:98:cb:9b:2f:ce:85:ea:a7:4a:a4:e5:
1a:e1:c5:9a:ea:09:85:c4:3d:a7:45:af:ba:6b:b6:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:53:DE:61:C5:36:77:2F:B7:49:7B:A6:5F:D0:C4:59:93:6D:E6:12
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/LlPeYcU2dy-3SXumX9DEWZNt5hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.97.0/24
Signature Algorithm: sha256WithRSAEncryption
32:70:51:48:97:c6:62:64:c4:a3:bc:10:1e:cf:e8:f9:05:5f:
d5:a4:18:a0:67:49:1b:de:d2:1e:f0:aa:f8:ee:9a:89:9c:d0:
49:71:5e:65:53:0f:7d:e1:b6:66:c1:33:c0:b5:0c:5a:e3:bb:
c0:b5:2c:02:07:2a:6c:14:3f:2e:26:66:e6:2d:7e:ef:bb:f7:
bc:58:ef:58:1a:9d:e5:39:d4:cc:f5:60:e2:4b:5d:37:b6:b6:
1e:c1:4a:00:5a:74:cc:86:95:12:61:a4:2f:00:ba:65:6e:41:
7e:35:32:62:3f:b0:5a:5f:b6:ff:17:db:d6:b6:c7:3a:82:4b:
be:b1:9d:2c:11:67:ad:63:6f:46:de:89:6d:c5:1a:34:e7:3a:
49:e6:da:bd:41:85:dd:18:f4:01:e6:82:df:84:da:77:f8:5a:
5d:c3:36:ac:53:e0:0c:41:40:ff:e0:e5:3b:7d:e8:ea:48:02:
a4:e8:67:a1:ac:34:3c:5f:4b:70:47:b9:93:a2:7f:c3:5d:54:
1d:6e:09:12:b8:81:63:fa:b3:f5:20:bc:bf:ac:7b:77:29:15:
52:a3:56:09:0b:79:95:6e:54:d0:e1:db:86:67:0d:a0:2d:c8:
d3:dd:f1:15:8e:98:df:78:82:33:32:2e:84:a4:e1:e1:40:85:
84:e3:b7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:48 2025 by rpki-client