Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/lH-qHFc7crMLSf4GUnVsxi7d5S0.roa
File: lH-qHFc7crMLSf4GUnVsxi7d5S0.roa (raw, json)
Hash identifier: mgWBS9e4WAOzI2AGy8eUIJvq5GzFNK7+k2P1TPWDi18=
Subject key identifier: 94:7F:AA:1C:57:3B:72:B3:0B:49:FE:06:52:75:6C:C6:2E:DD:E5:2D
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 0194214446130719D2069342802779F10E28
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/lH-qHFc7crMLSf4GUnVsxi7d5S0.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 83.118.224.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:46:13:07:19:d2:06:93:42:80:27:79:f1:0e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=947faa1c573b72b30b49fe0652756cc62edde52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:35:85:fa:a5:68:41:cd:26:33:97:a6:1f:
d6:59:07:79:76:fb:f0:0f:c6:f4:be:6a:f2:86:fa:
d1:91:4f:04:88:8e:5e:d2:77:14:bf:1f:ed:58:92:
76:d3:60:b9:a2:2a:25:b0:83:d1:cb:cf:43:f6:9a:
65:e3:68:03:6d:aa:d6:99:2a:33:f9:91:16:ad:d3:
7d:68:ad:d3:35:34:13:52:a7:cf:b2:dc:01:b3:44:
65:a4:a1:96:ca:06:5f:97:c5:43:fb:a6:89:11:2e:
58:42:83:80:cd:90:a8:e2:07:5f:49:33:fb:24:5a:
26:79:58:e5:ee:fd:f8:a0:19:02:6a:97:f9:47:fc:
71:fd:d7:37:c6:2a:bb:b2:a5:b0:7a:91:86:7b:54:
2d:ac:a8:64:92:78:cf:8e:f9:c1:74:c7:5e:6e:89:
91:6c:ad:f0:87:53:00:8c:51:61:57:02:2c:ee:f0:
34:88:a2:f2:a2:2d:d7:64:b1:1b:22:29:14:6b:66:
a7:c0:a7:06:9d:76:cd:0c:fa:a8:6e:70:a9:2e:85:
6a:5d:f2:4f:55:ec:7b:07:5d:fa:e5:2f:41:09:63:
37:40:40:0d:5d:c1:b6:75:a6:b3:dd:45:da:ca:d7:
0c:7a:56:2b:33:d2:53:6e:6f:2f:e3:90:8b:f8:d9:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7F:AA:1C:57:3B:72:B3:0B:49:FE:06:52:75:6C:C6:2E:DD:E5:2D
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/lH-qHFc7crMLSf4GUnVsxi7d5S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
Signature Algorithm: sha256WithRSAEncryption
22:b8:43:b3:43:68:56:81:30:26:61:c7:c7:5b:e3:fa:b4:0a:
69:d6:5c:05:81:5b:34:40:0c:df:17:b2:9a:ae:4e:a9:cf:21:
57:31:ff:94:5b:61:87:63:92:fc:7e:52:a9:85:e2:4f:7f:79:
87:ab:f3:e4:57:08:f0:69:ac:36:74:f7:88:e3:8b:07:f8:d0:
43:c0:d4:4c:e6:d9:74:17:32:27:5a:f2:6f:55:b9:20:af:a8:
31:c7:8a:b1:73:b2:ea:f8:42:b7:65:38:40:65:f5:24:42:1e:
5f:63:01:7b:fa:44:7d:e5:66:6e:cf:ad:19:64:9d:35:14:a5:
7e:b4:06:a8:7e:3b:4b:67:55:b8:28:d2:f9:d3:5e:55:d8:c9:
07:a6:6b:95:77:86:d6:b1:93:33:3b:1e:51:de:f3:7f:52:79:
d0:68:ad:61:e8:24:1d:43:6d:fe:c1:b9:4e:f0:78:cc:8a:3c:
8b:e9:d6:1a:c2:9b:b8:41:1d:d1:93:78:a9:ab:b0:bc:61:ce:
a5:a3:53:93:cd:77:e3:15:2d:3b:f2:46:9c:f3:00:0a:19:10:
6c:36:93:b5:46:af:00:5f:8b:43:7c:91:34:64:05:0e:17:18:
e0:d0:ce:e9:6d:e5:48:88:d7:2f:e9:76:83:53:21:0f:44:ba:
6d:0d:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:47:27 2025 by rpki-client