Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/lXftion8-6bSPXb1hByWoZWZToE.roa
File: lXftion8-6bSPXb1hByWoZWZToE.roa (raw, json)
Hash identifier: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=
Subject key identifier: 95:77:ED:8A:89:FC:FB:A6:D2:3D:76:F5:84:1C:96:A1:95:99:4E:81
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 0195D0D142C2B18E46A0820A0F7EEC3D5EBA
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/lXftion8-6bSPXb1hByWoZWZToE.roa
Signing time: Wed 26 Mar 2025 04:58:49 +0000
ROA not before: Wed 26 Mar 2025 04:58:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49915
IP address blocks: 62.69.150.0/24 maxlen: 24
91.216.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d0:d1:42:c2:b1:8e:46:a0:82:0a:0f:7e:ec:3d:5e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Mar 26 04:58:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9577ed8a89fcfba6d23d76f5841c96a195994e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:8a:4e:53:2c:27:1f:9a:57:cb:34:14:dc:
85:42:ce:fd:f9:4d:bb:ee:0e:5c:7e:d6:af:65:73:
7c:ad:1f:03:31:ee:80:c5:7a:e8:c8:5a:bb:21:b0:
31:15:24:e7:f6:de:fc:52:f2:12:c6:68:b5:f8:71:
ae:33:5c:a9:36:cd:59:6e:64:28:37:24:21:4f:c9:
3d:9f:70:bf:44:79:2a:dd:7d:91:3f:89:04:8d:29:
3e:f4:ac:ac:db:75:d7:d0:42:12:af:69:0b:ba:cc:
2d:cf:68:11:d4:50:d8:d0:30:b3:ee:7e:46:b8:31:
2e:fb:27:32:33:7d:b7:0d:45:58:10:45:20:d6:b7:
ed:eb:59:4f:f6:57:98:e0:2a:ba:24:c6:21:73:4a:
9f:24:8e:ea:a7:dc:c5:85:10:f1:bf:46:29:b9:0f:
78:c1:ee:08:fb:e0:59:77:ab:67:97:2d:a7:9d:b6:
3c:e0:04:4d:14:bb:2f:3b:8d:d3:b8:b5:ab:ba:0e:
d8:f6:5f:fd:73:c6:3f:01:37:0b:16:64:02:61:54:
34:e9:f2:6a:e2:a4:63:22:41:fd:c8:86:ef:c7:5e:
77:ea:c0:7e:91:34:16:2b:eb:d3:d4:48:83:37:28:
30:bf:17:03:d2:8f:ac:8c:27:8c:37:52:11:8b:7a:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:77:ED:8A:89:FC:FB:A6:D2:3D:76:F5:84:1C:96:A1:95:99:4E:81
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/lXftion8-6bSPXb1hByWoZWZToE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.150.0/24
91.216.158.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3c:68:4f:55:89:86:41:1c:62:74:a4:2f:bd:97:b0:d3:70:
3d:70:7b:80:29:e1:10:e3:83:41:91:51:03:2f:ca:6b:e1:13:
a6:e4:d4:73:b2:9d:bc:08:38:6c:f8:b3:e2:f9:77:1c:7f:c3:
e5:6d:ab:3a:96:d7:ab:93:78:9b:8e:57:5e:ff:a5:86:50:a6:
dd:4f:a8:1e:3b:9a:8f:e2:35:c0:fe:97:63:3a:c9:fd:d7:17:
12:8a:0a:7d:26:44:4c:62:1a:c7:07:9a:91:b6:76:46:88:19:
7a:49:db:49:eb:a5:3e:60:40:c2:27:f0:8a:87:69:b3:e2:aa:
0b:94:12:9b:fd:82:3a:81:ab:35:3f:ae:75:ea:0d:4c:ff:c5:
3c:b3:8e:9e:bc:13:bf:e4:9a:22:e4:41:eb:9d:a9:84:2a:ca:
d2:74:bd:b9:f8:18:29:b3:ba:7a:6b:38:19:ce:2c:43:60:65:
20:a2:33:43:44:50:4b:4d:5b:4f:6b:31:6c:3e:1d:8c:00:82:
ca:13:31:50:f4:d9:80:5a:17:e2:52:64:98:d8:96:3e:17:20:
60:43:49:d5:6e:b4:49:c8:91:01:ff:ff:0e:61:e9:eb:39:62:
95:07:ac:fd:b3:03:41:63:31:b8:48:42:5b:41:35:b2:59:c3:
47:55:5e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:18:39 2025 by rpki-client