Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/LSNCN9tVr3akGkMnWrJa_U93epE.roa
File: LSNCN9tVr3akGkMnWrJa_U93epE.roa (raw, json)
Hash identifier: QadgdbAcXbjSebSWak10yLkobSCpTcynNPeAFaKki3U=
Subject key identifier: 2D:23:42:37:DB:55:AF:76:A4:1A:43:27:5A:B2:5A:FD:4F:77:7A:91
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 075E4749
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/LSNCN9tVr3akGkMnWrJa_U93epE.roa
Signing time: Wed 08 Jun 2022 06:46:03 +0000
ROA not before: Wed 08 Jun 2022 06:46:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396073
IP address blocks: 193.228.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123619145 (0x75e4749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jun 8 06:46:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d234237db55af76a41a43275ab25afd4f777a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:8a:24:dc:83:28:bb:52:9b:95:09:f3:ad:
66:98:f9:ec:a3:de:44:b2:40:27:12:aa:5e:0d:8d:
9d:cf:32:0d:f9:19:3e:c6:e7:e8:1c:dd:68:db:cf:
ba:4d:eb:89:90:aa:bc:66:52:86:64:82:1e:1d:e5:
f3:ed:59:db:e8:45:68:0b:3b:bf:f4:7c:db:a9:86:
86:56:d8:f5:37:fb:3d:a5:b3:d0:8b:67:82:85:f5:
d9:e8:87:5b:8e:66:43:bb:49:07:ad:a7:6b:35:c1:
67:35:cc:60:93:6b:19:79:a6:0d:5c:e1:b8:ee:8b:
3b:e3:43:36:c5:15:58:26:7f:31:90:04:0a:69:d5:
1e:1b:4b:b6:22:ed:32:9e:2a:70:33:9f:c7:06:27:
5c:1d:6c:33:19:2b:13:6a:ff:f0:f3:1d:61:fa:5d:
93:f2:91:52:cb:97:c6:fe:13:36:db:08:c9:8c:9d:
3b:5f:d5:c2:3c:28:70:65:cf:d1:43:c4:f0:1b:06:
03:15:49:11:da:75:34:26:0c:8c:57:8f:e8:b0:04:
4d:09:dc:52:c1:37:12:e3:34:c1:52:39:c7:7a:22:
73:58:48:8b:c3:ed:18:79:26:b4:12:20:cc:e9:f5:
78:d9:4b:1c:f9:5b:23:95:9a:19:cd:52:64:66:8d:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:42:37:DB:55:AF:76:A4:1A:43:27:5A:B2:5A:FD:4F:77:7A:91
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/LSNCN9tVr3akGkMnWrJa_U93epE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b4:73:c3:5d:4d:96:d1:b7:59:99:c9:16:00:84:57:59:38:
42:c5:4b:b5:03:8f:ac:71:57:09:af:b3:ec:68:3e:52:0b:8a:
72:6c:82:da:61:58:b5:57:9d:55:13:52:2a:5f:8b:d2:1d:e3:
26:19:ec:03:f9:a6:86:44:1c:49:d1:88:fd:be:5f:66:8d:92:
e1:13:36:a7:89:75:5d:59:5e:3b:a8:47:d0:e0:2c:cb:82:23:
3b:4b:b8:57:8a:5d:ed:fa:74:89:ca:d6:ef:bd:13:ad:26:b2:
2b:66:18:40:e9:f0:a3:e3:dc:bd:04:00:60:f1:ce:d2:42:69:
98:a6:25:15:76:16:31:8f:da:ea:8c:a0:8e:b4:67:75:e0:7a:
6a:4f:02:2d:09:a3:98:68:55:bf:82:be:35:7d:85:d5:fb:ed:
7a:8b:15:53:41:94:49:71:bf:30:94:3b:90:9e:d5:ad:e9:57:
4f:6e:ff:4d:7e:53:9f:f9:28:81:04:e6:5f:f4:08:2f:f1:be:
f2:a9:44:85:44:71:80:c0:9e:1a:86:b2:a1:41:36:17:0e:d7:
9d:98:ac:83:4e:6b:90:25:e4:0e:97:43:0f:b8:85:67:10:5a:
d4:09:c3:d9:50:94:d2:b0:5a:5c:48:d3:fc:2b:2f:a5:52:97:
87:5b:57:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:47 2025 by rpki-client