Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LtMZWdKhRwuWtzJauz_J1gA2EtM.roa
File: LtMZWdKhRwuWtzJauz_J1gA2EtM.roa (raw, json)
Hash identifier: Oxnd2fnwvVmjK5Um7qydmzBd0iAr/JgA1gYvPP/E+j4=
Subject key identifier: 2E:D3:19:59:D2:A1:47:0B:96:B7:32:5A:BB:3F:C9:D6:00:36:12:D3
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420683A178764A1C330A7033121D30B46
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LtMZWdKhRwuWtzJauz_J1gA2EtM.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8480
IP address blocks: 193.233.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3a:17:87:64:a1:c3:30:a7:03:31:21:d3:0b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ed31959d2a1470b96b7325abb3fc9d6003612d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:ce:d1:c5:00:c8:bf:f4:7f:cb:56:16:6e:
a3:16:d3:ce:a9:83:c1:6f:b0:02:b9:05:52:ba:84:
54:a3:91:b2:4b:46:f8:55:88:bb:d0:c5:5b:96:07:
67:4a:6f:a1:0a:22:ec:6e:3b:a2:08:14:bb:18:0f:
70:6b:be:17:5f:bd:6a:d6:35:25:97:ba:cb:af:52:
8e:8f:f8:fc:79:5d:ab:47:8a:89:71:ad:82:85:28:
94:7b:95:a4:a3:a9:6d:89:59:da:ef:51:8f:0b:8a:
f3:58:45:1e:76:75:31:d3:bc:74:8e:67:3a:65:d6:
ee:1b:94:47:c6:6d:ab:21:8a:43:35:f5:57:2d:bd:
82:f7:92:33:42:c3:c0:bd:da:0e:29:39:f6:80:a5:
7e:73:8c:f4:8f:1c:b0:c2:ab:f2:1f:3d:28:40:c7:
9b:fb:9a:a9:4b:20:33:b1:ea:35:79:bd:d9:d2:39:
8d:64:3b:32:20:ec:4e:90:d8:12:b1:35:78:30:b1:
60:a8:f7:f4:23:5b:88:69:18:71:73:4f:e4:a8:b5:
d0:75:c9:2e:af:44:2f:67:5f:55:cb:97:96:5b:39:
a5:40:12:22:16:43:ba:ef:80:16:4a:a6:b2:ae:74:
01:41:7b:59:7e:fe:2f:ff:78:d7:ea:cb:ed:e7:31:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D3:19:59:D2:A1:47:0B:96:B7:32:5A:BB:3F:C9:D6:00:36:12:D3
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LtMZWdKhRwuWtzJauz_J1gA2EtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.144.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:95:7e:7e:f3:e3:9e:50:b9:80:b1:2f:9a:9a:bf:3b:36:16:
a8:2d:37:5c:18:e9:57:94:10:1f:60:b9:af:dc:56:dc:77:54:
f8:b9:24:d5:0a:ca:2a:94:23:2a:c5:04:a7:bb:20:e6:0e:7f:
55:71:24:8e:c8:bf:f8:3e:38:ef:4c:7a:49:3e:87:76:e0:92:
c5:56:27:83:66:31:a1:7a:70:a4:10:3c:bd:55:19:80:e4:e3:
3a:f5:44:13:3c:c4:1a:d7:0f:83:38:f9:e7:c9:1d:fd:87:e7:
96:19:ee:f6:f8:15:cc:34:da:dd:2e:ba:b3:7a:69:d0:ae:e1:
8d:0b:9c:3a:c0:9c:29:9a:a9:06:a8:7e:ad:67:ed:af:62:22:
7a:a6:47:14:50:13:7f:63:f9:14:71:4b:c8:99:42:39:ca:43:
74:59:ea:26:c0:dc:d2:a3:41:82:ee:68:fe:f3:df:53:be:a2:
07:7c:80:69:b9:6f:ce:43:56:b2:2f:c8:04:f8:48:41:65:90:
35:08:dc:02:da:89:88:c7:71:14:67:c0:0c:08:61:15:74:32:
2e:a4:93:d3:cb:80:2c:cb:ad:8d:b4:84:82:d4:ee:bb:a1:f1:
bf:ba:7b:89:b1:3e:a7:ed:4a:72:47:a8:76:4f:39:39:85:f9:
d3:ee:df:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:10:23 2025 by rpki-client