Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lbM48AJb7bZinr9rIBPCwH5SCls.roa
File: lbM48AJb7bZinr9rIBPCwH5SCls.roa (raw, json)
Hash identifier: KLi5sEVmdO18RySpIAilWvtOUBYUjHrNQXISY8w4fbQ=
Subject key identifier: 95:B3:38:F0:02:5B:ED:B6:62:9E:BF:6B:20:13:C2:C0:7E:52:0A:5B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824F6816F2EC8B6F7F6B1DBC453C657
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lbM48AJb7bZinr9rIBPCwH5SCls.roa
Signing time: Thu 02 Jan 2025 17:51:38 +0000
ROA not before: Thu 02 Jan 2025 17:51:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 192.124.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:f6:81:6f:2e:c8:b6:f7:f6:b1:db:c4:53:c6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95b338f0025bedb6629ebf6b2013c2c07e520a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:20:74:b8:5f:52:1f:8a:9f:fc:6d:f7:1c:
f3:d3:02:12:bf:46:9d:6c:38:4f:e0:24:1b:06:00:
c2:16:9e:7e:2e:6c:9e:36:23:19:63:ff:56:fb:de:
f7:64:df:3b:cc:11:5c:25:f1:1c:07:1b:35:be:55:
17:09:a0:3d:76:4f:bb:fc:49:6e:81:75:8e:c7:93:
90:11:a0:0d:9e:cb:a2:76:15:29:b1:4b:6e:de:f3:
5c:87:cb:b1:6c:16:28:ca:88:11:b0:4e:0d:c1:85:
5e:59:1e:fc:41:d4:15:c2:6d:4e:a7:a1:c4:2c:6c:
d5:b2:77:6a:7f:f9:11:8c:91:2d:02:b2:12:83:ca:
14:21:28:15:60:ca:41:33:2c:0c:82:58:ed:e7:2d:
c6:6f:fa:92:e0:e4:f1:11:d8:89:6d:ca:20:4d:3b:
e9:b5:bd:18:a7:35:4d:da:19:49:95:23:6a:b5:0e:
fd:ca:32:91:0b:b2:57:71:c7:22:9f:fa:b9:ad:0e:
84:50:3b:08:8e:d7:42:03:c5:75:c4:93:91:31:6d:
0d:26:96:7d:05:dc:e5:4d:1a:47:a2:01:0d:b7:da:
7b:8a:2b:57:ba:67:08:41:a4:1d:9e:2c:ed:6b:97:
f8:34:5e:83:c3:6b:3e:63:cd:24:53:ec:f7:7d:eb:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B3:38:F0:02:5B:ED:B6:62:9E:BF:6B:20:13:C2:C0:7E:52:0A:5B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lbM48AJb7bZinr9rIBPCwH5SCls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.177.0/24
Signature Algorithm: sha256WithRSAEncryption
40:dd:23:e1:be:4a:25:24:79:11:4f:36:d2:da:54:76:0a:57:
c8:99:c9:db:ad:97:47:39:d0:58:1c:51:48:e8:51:26:c3:ab:
09:ae:4d:08:1a:c1:f8:40:bd:97:e5:ec:c8:50:e4:ad:6f:d8:
a1:6e:5c:5d:2d:17:99:7c:19:e4:2c:37:ea:8c:b9:56:70:57:
61:ba:14:16:d1:b5:52:e0:ac:e3:02:9d:96:2d:3d:93:91:83:
00:7c:59:8a:9c:36:bf:38:13:b4:a5:26:7a:a6:bf:0b:1a:0e:
a6:ab:92:44:6b:02:97:2a:43:8d:eb:01:a6:de:4d:57:99:7f:
e9:1d:6a:2d:44:eb:09:0a:0d:e9:90:3c:77:cd:28:77:9d:4e:
1c:21:60:4a:54:e8:11:bb:2e:ab:0c:9f:d7:33:05:65:3a:ee:
0f:48:c0:e3:58:6d:5f:9a:4a:67:44:a4:56:67:b4:cc:83:80:
ab:07:21:26:ef:7c:9c:c0:29:9e:6a:0d:c7:fa:ff:ad:30:8d:
4b:2a:13:74:b7:b5:23:d9:ba:33:4d:99:1f:a4:06:fc:31:33:
a8:e4:08:cf:7d:ab:49:7a:e7:cd:48:58:34:e5:c2:a5:cc:e1:
09:de:8f:8c:87:33:99:0e:38:33:a0:ab:fa:3f:bc:e7:bd:50:
1d:0c:a7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:40 2025 by rpki-client