Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa
File: lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa (raw, json)
Hash identifier: dTACe68AOYRTGOWM2bf2NFYllivUWP/q40LE4fNKxno=
Subject key identifier: 95:B9:48:33:61:49:43:F5:95:7F:E6:B8:98:55:AE:E4:EB:60:AF:E0
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 0194214460F419104921FDC9196B23D39AE1
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa
Signing time: Wed 01 Jan 2025 09:48:36 +0000
ROA not before: Wed 01 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54538
IP address blocks: 193.110.180.0/23 maxlen: 23
195.88.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:60:f4:19:10:49:21:fd:c9:19:6b:23:d3:9a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Jan 1 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95b94833614943f5957fe6b89855aee4eb60afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:e2:c7:61:4d:1e:1a:45:52:db:d2:cb:e5:
2f:5d:00:2f:c6:23:92:61:d3:4a:4c:72:3f:48:01:
15:0d:05:05:8f:b4:f4:ef:4d:2d:04:5f:68:17:7c:
fe:f3:68:e9:03:11:c4:40:73:23:bd:1f:1d:c2:27:
3c:d3:23:e0:08:f8:4a:48:16:91:95:fb:e1:7e:99:
d0:cb:01:6d:3d:17:8d:7e:fb:85:a5:10:67:83:8f:
98:ad:d3:bd:2d:e8:30:d7:96:95:18:72:ab:ec:92:
4b:f3:2f:1d:15:7a:b2:6a:32:ee:7b:9f:8b:32:f5:
f2:cc:e6:3f:0c:ac:4b:40:e9:92:d2:47:df:b1:a7:
ef:9f:21:76:91:e6:77:d9:e2:a9:03:14:ab:56:b5:
02:fd:28:a3:5e:36:5f:df:a6:68:69:5f:32:12:8c:
25:bd:f5:be:02:f7:ed:cc:7d:99:a4:0c:87:fa:8e:
fd:eb:f0:a7:a5:51:6b:a6:64:f5:06:0f:ea:d2:73:
51:e5:49:4f:36:61:83:6d:8d:d0:67:3b:04:9a:53:
05:d4:d2:81:ca:f2:a2:3d:cd:d7:6c:90:30:65:ea:
bb:9c:0a:25:b7:e7:54:fd:e8:9a:86:6c:21:74:20:
ad:fd:b9:3f:13:86:f4:b9:1a:0f:12:02:c0:1f:2b:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:48:33:61:49:43:F5:95:7F:E6:B8:98:55:AE:E4:EB:60:AF:E0
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.180.0/23
195.88.212.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:38:2b:a4:af:50:5d:ed:8b:c1:9a:58:9f:51:0a:f5:76:27:
af:ad:ca:8c:ab:de:78:50:51:ab:8d:e1:22:c7:e4:5d:0c:3b:
52:bf:22:8c:62:81:4b:d8:a6:24:3b:16:7f:68:da:36:4e:6b:
85:50:ab:a6:15:bc:e0:9d:91:92:cc:36:34:ed:e0:33:ed:b8:
3e:27:59:bb:4d:7c:09:54:c6:32:b4:da:35:b6:b7:a5:c7:34:
91:fa:72:e6:0f:31:84:db:b8:ac:4c:11:7c:c7:de:64:cb:b0:
fd:86:57:96:2e:17:94:08:5e:f7:da:69:ee:45:47:53:16:7f:
a7:57:77:49:ca:11:e5:f7:9e:7e:60:fe:90:4a:e3:12:4c:4f:
fa:45:f0:6e:a7:e0:1b:05:a2:8f:05:d7:b1:d7:28:78:59:8e:
cd:1f:e4:b5:76:23:55:78:cb:1f:27:42:cc:e9:d2:9e:c1:48:
83:7d:6c:49:9c:c4:6b:df:99:5a:66:f9:60:37:48:62:ee:f9:
61:06:f0:67:58:d7:2b:84:0f:c2:0d:41:a3:0a:dd:3b:42:cd:
02:5e:a1:64:ee:c9:62:76:94:55:b9:4f:77:9c:c8:d2:4d:5a:
3b:e9:6f:be:f4:dd:fa:e7:ed:ad:72:38:19:86:c0:30:01:56:
25:d0:fb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:06:18 2025 by rpki-client