Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ljnA30NR9xOfROLBgYNtk3JZLTo.roa
File: ljnA30NR9xOfROLBgYNtk3JZLTo.roa (raw, json)
Hash identifier: j0TBP2+nuBSwHuaX2USrAFWl7QAm3LV+oRIFPpLHIgA=
Subject key identifier: 96:39:C0:DF:43:51:F7:13:9F:44:E2:C1:81:83:6D:93:72:59:2D:3A
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01942444F31037A77DA6C8E7164EAF9245EA
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ljnA30NR9xOfROLBgYNtk3JZLTo.roa
Signing time: Wed 01 Jan 2025 23:48:05 +0000
ROA not before: Wed 01 Jan 2025 23:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138190
IP address blocks: 82.144.171.0/24 maxlen: 24
2001:1aa1:22::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f3:10:37:a7:7d:a6:c8:e7:16:4e:af:92:45:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 23:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9639c0df4351f7139f44e2c181836d9372592d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:20:38:47:94:70:d8:d8:ea:3e:d5:4d:c5:
45:dd:8d:e3:15:ba:29:28:f2:e6:6f:98:74:09:ee:
0e:ec:0b:5e:53:a9:c5:76:d7:c3:74:95:dc:95:49:
6c:0b:5e:27:73:9f:dc:1b:4b:44:66:a6:6b:17:b4:
a3:83:c4:a8:c3:b1:b3:c4:52:14:17:5b:85:2b:ad:
37:25:4a:f8:b8:96:86:24:c3:1a:8c:b7:0f:4a:ff:
2a:80:da:89:61:14:29:dc:09:fd:ce:12:88:b4:96:
4e:bb:43:11:23:f7:aa:1e:38:89:22:0f:ea:23:b2:
b8:f1:eb:18:66:4b:13:0d:a4:87:ca:bc:18:7b:fe:
c4:17:7c:70:9d:28:5c:64:da:e8:f2:e3:07:8d:10:
d2:97:40:88:ff:18:7e:38:d4:1a:ad:f3:8c:9a:78:
83:fa:dd:cd:0f:0d:6d:4f:13:e8:a7:24:c1:a6:43:
80:df:fc:db:6e:0f:24:d8:7d:54:d5:49:54:c3:60:
42:42:4f:e1:57:4c:8e:0c:37:99:9f:af:00:09:6d:
e8:06:07:a2:52:b8:4d:5f:91:53:dc:6a:c5:53:95:
c4:49:9d:47:00:fe:e5:b9:ec:ba:fb:40:c4:25:52:
91:88:c4:c5:bf:43:21:d8:73:ce:c1:0f:1d:5a:df:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:39:C0:DF:43:51:F7:13:9F:44:E2:C1:81:83:6D:93:72:59:2D:3A
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ljnA30NR9xOfROLBgYNtk3JZLTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.171.0/24
IPv6:
2001:1aa1:22::/48
Signature Algorithm: sha256WithRSAEncryption
07:02:b4:46:7b:3c:d2:e4:7e:8b:3c:3d:96:5e:9b:7a:0b:8b:
23:48:32:bd:3c:13:55:95:09:03:8b:da:e5:f4:80:eb:29:c3:
cf:f0:51:5d:68:67:7d:c4:96:e3:47:55:43:d2:1f:0b:ad:87:
83:8e:b7:3a:89:30:5b:00:2c:10:7f:5c:83:5f:81:a2:de:7b:
09:b4:3f:09:15:e0:bb:ed:f5:60:5c:c6:da:69:5b:53:bd:92:
9d:de:87:99:a2:9a:59:3b:eb:cc:78:43:24:b1:63:36:34:9e:
0a:9a:05:22:6b:88:d4:1b:cc:2b:57:1c:5e:93:b5:a2:29:05:
d2:5e:24:06:5f:7e:af:78:85:2a:3e:e5:55:f8:79:d6:5b:16:
24:32:73:e7:b4:e4:a4:43:38:22:d2:3a:5c:9d:6a:f4:f6:9f:
1b:4d:80:d7:48:e4:07:b1:22:4b:a8:7a:41:d3:9c:36:c4:ee:
b9:46:21:93:b0:9c:d7:a4:d5:b2:fb:4a:26:34:49:28:3d:87:
8e:d2:f4:4c:d2:a2:9b:df:5f:95:2d:a0:47:8f:8d:40:dd:71:
cb:2f:6b:11:70:70:b0:06:d0:f8:87:0a:9b:e6:61:2d:42:82:
87:04:37:51:91:66:9b:e2:6e:45:74:03:47:be:06:ee:bf:c0:
43:7d:9a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:36 2025 by rpki-client