Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/LLltM-NzTNKgxqwZ9NE7KyNLRfU.roa
File: LLltM-NzTNKgxqwZ9NE7KyNLRfU.roa (raw, json)
Hash identifier: 62y8p/Y8rE/XeGWy9+O3o9ixoxKXX+jz7XcY73z+2J0=
Subject key identifier: 2C:B9:6D:33:E3:73:4C:D2:A0:C6:AC:19:F4:D1:3B:2B:23:4B:45:F5
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 019423D6FEA597E555F4E8188AC292F11CDB
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/LLltM-NzTNKgxqwZ9NE7KyNLRfU.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.150.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fe:a5:97:e5:55:f4:e8:18:8a:c2:92:f1:1c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cb96d33e3734cd2a0c6ac19f4d13b2b234b45f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:60:bd:7a:95:1a:56:55:e5:40:af:1e:0d:
5d:df:98:9b:88:47:92:94:e8:3e:00:9d:75:94:4f:
df:e5:a4:e2:a7:14:da:6b:7f:38:30:d5:06:73:e7:
6e:70:59:cc:da:18:57:f9:03:da:8e:f7:55:c6:d9:
17:8f:8b:33:13:93:aa:e2:c0:eb:0f:06:fb:21:cc:
44:a9:08:fa:c6:39:55:74:24:06:7f:05:4c:31:39:
ad:09:33:91:a7:ec:11:e5:d0:8d:6d:e9:d0:09:75:
d2:28:11:a8:29:d8:b0:a6:dd:2c:3f:7d:09:50:94:
29:86:17:cb:b6:03:01:2f:7c:04:ca:7c:c9:bb:59:
da:60:44:87:db:7d:86:6f:81:78:94:8c:37:3c:91:
27:71:49:46:97:40:77:d5:b0:40:a1:f2:72:a2:07:
e9:4b:4c:c5:b8:dc:13:60:02:ed:23:7d:f2:8c:74:
08:7b:7b:e9:f2:3a:1d:97:1e:fd:2e:ea:58:92:b1:
99:12:7f:61:c3:06:85:69:e0:35:3c:de:de:38:42:
0a:3d:3d:75:9b:42:af:da:da:a9:c2:44:a8:25:d6:
dc:e4:87:2f:49:76:26:d5:f2:fb:f7:7a:b1:d9:dd:
8e:44:ea:ca:0f:f8:f3:5a:22:45:33:6e:29:f3:15:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B9:6D:33:E3:73:4C:D2:A0:C6:AC:19:F4:D1:3B:2B:23:4B:45:F5
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/LLltM-NzTNKgxqwZ9NE7KyNLRfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:06:6e:94:c7:cb:55:68:c6:f8:96:70:fd:e4:00:b4:57:65:
1f:75:55:fd:20:4d:cc:a0:1d:be:e6:e9:6c:41:ad:06:78:b0:
28:7f:40:f1:27:c1:6d:b2:60:96:0f:0c:55:43:d3:02:5c:53:
a3:54:1f:eb:f1:e7:c0:c5:2a:cd:46:d2:86:d0:5a:6d:c7:e3:
42:ab:5e:27:7f:96:3f:fa:e8:1d:1b:73:88:16:69:bc:5b:ec:
32:aa:43:10:c3:fd:af:52:ef:c8:77:83:86:a0:b4:a2:41:1b:
6e:d7:00:87:e1:87:34:76:ac:49:e4:72:c4:72:b4:c9:dd:d2:
17:94:cf:7e:ca:66:b0:1f:ca:95:c6:82:7b:5d:26:32:d4:7f:
69:3b:7c:c6:ac:06:42:f5:e9:7f:c8:7d:0c:07:d3:55:61:e5:
b0:77:bd:15:b7:87:8b:29:5b:05:7c:63:2a:91:19:6b:06:f3:
1d:58:d0:6a:48:81:c5:34:7b:b7:64:8b:7b:41:2f:a2:f0:23:
c1:34:ce:21:f9:d5:d2:58:ea:3b:10:aa:1f:32:93:d1:b7:66:
9d:4c:ee:80:c1:1b:27:0c:db:19:5b:3e:4a:47:c4:c4:bd:a6:
c8:3a:c8:c5:6f:af:ea:de:56:11:9a:2f:31:57:9e:a3:d6:9b:
47:ec:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:29 2025 by rpki-client