Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/L8MtunTiL_7fpmbLmJYAVUFmis0.roa
File: L8MtunTiL_7fpmbLmJYAVUFmis0.roa (raw, json)
Hash identifier: /e6OtlB8Bp8ods8s3jApPDjMcjpXE5NeSw3RRuhnEfw=
Subject key identifier: 2F:C3:2D:BA:74:E2:2F:FE:DF:A6:66:CB:98:96:00:55:41:66:8A:CD
Certificate issuer: /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial: 08032A6D
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/L8MtunTiL_7fpmbLmJYAVUFmis0.roa
Signing time: Sat 01 Jan 2022 03:55:29 +0000
ROA not before: Sat 01 Jan 2022 03:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 193.111.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134425197 (0x8032a6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Validity
Not Before: Jan 1 03:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fc32dba74e22ffedfa666cb9896005541668acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:07:11:ac:99:18:70:5f:0d:70:62:74:ac:
19:95:a3:8a:a2:80:a0:3a:20:c4:3b:e4:b0:3a:2c:
8d:8c:ee:81:7b:ce:87:92:fb:15:35:27:0f:1c:85:
0f:d1:b9:da:62:ad:5b:a8:d5:0a:8d:7e:d2:22:2f:
ba:c5:21:b7:b5:5a:bd:f8:49:24:f7:70:08:58:ee:
8a:1b:e2:a0:d3:90:ce:59:0f:4e:8a:7c:60:3c:83:
a5:37:6a:35:1b:d4:8a:ce:b7:d6:cb:77:9b:3b:b7:
83:2d:6a:d6:2f:66:13:fb:01:49:40:51:71:9b:a4:
4a:f1:b3:27:db:0f:20:b6:12:42:6e:ba:45:5a:1b:
1b:4c:a5:0e:3b:df:66:28:3e:6b:2c:51:0b:71:c1:
e1:f5:97:d8:46:24:c2:3a:39:a4:a3:09:d2:51:56:
d8:17:b0:34:78:32:14:ab:b9:45:68:94:a6:07:b2:
1b:c6:ab:82:6f:d1:e5:ea:59:70:2f:60:b6:4c:60:
ee:9d:10:b8:f8:bc:82:ea:61:ba:68:03:5a:1e:e4:
3b:75:f4:f1:98:ab:bf:53:d5:dd:a2:c3:f3:09:55:
f3:d3:d6:96:65:ca:ae:28:33:81:93:ee:78:df:db:
2b:55:76:8b:80:14:a9:75:b1:66:42:03:34:ea:92:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C3:2D:BA:74:E2:2F:FE:DF:A6:66:CB:98:96:00:55:41:66:8A:CD
X509v3 Authority Key Identifier:
keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/L8MtunTiL_7fpmbLmJYAVUFmis0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.77.0/24
Signature Algorithm: sha256WithRSAEncryption
67:62:0a:18:d7:d9:fc:69:3e:a0:ac:c0:21:13:7e:ff:17:18:
d2:ab:50:a0:3a:d2:8b:4b:a0:b6:7b:78:64:42:b4:fd:64:61:
03:65:f6:40:dc:f5:f9:69:cc:21:d4:a5:32:ce:df:02:4f:46:
c9:f1:9a:9d:46:68:45:1c:d4:e9:04:50:b2:a4:09:d9:d6:ae:
e6:1f:23:86:69:5f:71:54:fe:6b:67:a2:21:9e:e0:d3:45:d6:
36:27:c4:7c:b8:3d:33:aa:76:36:33:40:7f:a7:4e:03:6b:21:
c4:41:35:58:fd:37:c6:24:fd:44:c7:8b:0d:b9:2f:49:8e:60:
ce:b3:e1:1d:9c:86:87:5b:ea:57:14:7e:bf:c6:6f:86:f2:8a:
26:75:58:4c:1f:51:43:04:08:0b:1c:f9:c2:f6:9b:4b:20:bf:
a0:d7:f7:f4:17:c1:5d:01:63:ee:39:41:ce:46:0a:ca:98:b3:
d9:e1:73:58:e1:b4:fd:18:00:89:ff:ec:06:5c:4a:e4:c7:90:
7f:6d:ad:6a:fc:30:af:a8:71:cb:e9:15:b9:42:9c:d5:0d:a5:
6b:0c:92:8e:cc:18:68:02:b5:7e:d7:f8:33:81:a3:f6:09:31:
02:46:a1:9e:73:70:00:e1:9c:e7:78:5f:45:53:a7:0c:63:10:
47:97:09:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:05 2025 by rpki-client