Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/NLujiyLDNINg7_ALKuGpNWHf90o.roa
File: NLujiyLDNINg7_ALKuGpNWHf90o.roa (raw, json)
Hash identifier: S6u8CLwoGP6KKvaV/764lqLnv660M41bJlIaV+CiIbg=
Subject key identifier: 34:BB:A3:8B:22:C3:34:83:60:EF:F0:0B:2A:E1:A9:35:61:DF:F7:4A
Certificate issuer: /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial: 0194228DF9BA2DB275942529AA2D7879E70E
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/NLujiyLDNINg7_ALKuGpNWHf90o.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206317
IP address blocks: 185.187.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f9:ba:2d:b2:75:94:25:29:aa:2d:78:79:e7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34bba38b22c3348360eff00b2ae1a93561dff74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:49:7d:7b:c4:03:69:42:2f:0b:03:01:36:
9f:09:0d:ce:95:6f:33:73:ac:10:4a:fe:9c:82:b7:
93:ce:cc:ba:16:7d:29:8f:27:74:53:be:25:eb:c0:
c3:dd:1a:19:fa:99:63:6c:95:ae:5b:e9:4a:21:03:
d3:be:f6:7a:e2:ce:4d:fe:1e:76:d5:e7:5b:2b:9b:
e8:2e:fe:57:38:30:6c:88:80:43:3f:85:ff:63:98:
91:c2:48:7f:4b:a5:ec:18:9a:9c:de:42:e3:42:ac:
23:e3:1c:bd:49:30:86:91:27:d9:3a:e3:7a:c7:32:
ea:63:1a:7d:92:e6:48:bd:b5:d0:ff:77:a8:9d:2b:
93:70:10:6e:24:9d:2c:2b:26:b6:cf:54:13:a3:f4:
76:ec:48:7a:a5:bc:6a:01:08:1d:8d:8d:8e:e7:ab:
bc:fb:f0:c4:ff:10:2c:58:11:e0:78:a0:67:aa:cb:
3a:8a:2a:df:f7:3b:60:ec:4a:80:14:66:d2:e3:2d:
08:6d:ea:7e:a3:5f:dd:d6:9d:65:c7:91:f5:2d:df:
e4:28:53:09:be:08:6d:3d:42:96:b1:6f:9e:83:66:
32:f1:8e:33:e4:85:f6:5f:6f:48:86:58:9a:9d:af:
a6:33:46:1f:c6:1b:58:cb:b0:3f:68:de:d5:b8:db:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BB:A3:8B:22:C3:34:83:60:EF:F0:0B:2A:E1:A9:35:61:DF:F7:4A
X509v3 Authority Key Identifier:
keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/NLujiyLDNINg7_ALKuGpNWHf90o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.118.0/24
Signature Algorithm: sha256WithRSAEncryption
94:59:81:b9:ca:8c:69:65:60:51:4d:2b:f9:a3:e6:aa:86:c7:
a3:6b:46:51:a6:58:05:e9:9a:05:d6:57:c1:54:ac:7b:3d:b9:
cd:b8:02:9c:09:17:b2:eb:f2:e8:bc:9b:e7:a3:53:c7:1d:4b:
fd:d0:e8:12:bb:f8:f0:95:06:00:63:81:e0:9b:81:fd:bb:c1:
d0:42:e5:70:27:ad:de:63:ee:4a:91:d0:f9:f6:b8:6a:81:9f:
4a:b8:45:6a:14:de:07:e1:24:39:c0:e1:c9:bd:df:ec:33:ec:
2c:24:11:1e:84:6a:fe:21:63:06:f9:de:32:2a:b8:f1:0d:3f:
77:ff:3b:bc:4f:1b:45:53:b7:56:d2:34:1e:9a:74:07:16:a9:
19:5b:5e:2d:07:9a:cc:3c:f8:c3:73:e6:0f:bd:d9:74:38:b8:
15:9d:de:2b:7c:fc:d7:e7:c6:8b:9d:7a:67:01:c7:99:69:cb:
f0:d6:7c:d2:b9:9b:9d:e9:5e:da:37:67:85:1c:16:bb:19:da:
8e:cf:a5:d1:65:a0:bf:c4:79:79:0c:cc:22:b1:21:07:5d:0b:
46:c2:84:4d:89:e3:dc:86:b6:e4:ca:95:e3:85:d1:91:f1:1f:
86:40:a6:77:3b:f3:b0:8e:a7:08:1c:a2:91:23:ed:3e:17:3f:
eb:f9:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:07 2025 by rpki-client