Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/LvroX2rbaU_k3RPLrOXr7iRyvMY.roa
File: LvroX2rbaU_k3RPLrOXr7iRyvMY.roa (raw, json)
Hash identifier: 2py/bHZXYSzSVjaQfhs8pk+UMqkj3HFyEF+kIcIjhNg=
Subject key identifier: 2E:FA:E8:5F:6A:DB:69:4F:E4:DD:13:CB:AC:E5:EB:EE:24:72:BC:C6
Certificate issuer: /CN=1ae5c2fd9716718f426202834791d941a9c846a7
Certificate serial: 01856D819323BD8C39D293D3B67ECEECA637
Authority key identifier: 1A:E5:C2:FD:97:16:71:8F:42:62:02:83:47:91:D9:41:A9:C8:46:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuXC_ZcWcY9CYgKDR5HZQanIRqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/LvroX2rbaU_k3RPLrOXr7iRyvMY.roa
Signing time: Sun 01 Jan 2023 13:24:46 +0000
ROA not before: Sun 01 Jan 2023 13:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 176.116.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:93:23:bd:8c:39:d2:93:d3:b6:7e:ce:ec:a6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae5c2fd9716718f426202834791d941a9c846a7
Validity
Not Before: Jan 1 13:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2efae85f6adb694fe4dd13cbace5ebee2472bcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:80:88:9b:f9:79:6f:d0:3e:28:f3:e4:93:0d:
45:62:4d:4c:be:8f:6a:d3:1e:5a:f4:95:00:e6:58:
17:a1:0e:7a:98:dc:d5:d4:7d:47:3f:b2:00:19:e3:
0b:c3:35:23:6e:aa:aa:a3:1d:52:8c:69:a0:59:3e:
60:be:ca:2a:85:3a:28:8c:05:fd:53:ea:af:71:5d:
8b:4d:e9:62:a5:d5:18:b8:b6:c3:0c:54:b5:13:11:
99:85:6e:94:d2:8d:75:7c:24:81:42:43:76:bb:a8:
54:75:68:25:69:c5:55:05:2a:b4:ac:0e:f9:3c:f5:
38:23:91:74:d8:2e:7c:b6:74:22:c3:70:45:aa:16:
0b:3a:25:9f:71:01:36:36:05:a6:94:ea:35:e3:59:
c2:9a:79:e0:2c:91:ea:fc:91:0d:88:59:2f:9a:ae:
d5:02:bf:b9:ba:da:98:26:5b:05:ac:c2:95:b6:00:
3f:97:37:4a:aa:43:45:07:8f:9a:1b:73:15:1e:0a:
07:14:be:3b:90:fd:df:16:fc:e5:19:e3:06:8a:ad:
d0:37:33:b6:ea:8b:02:e9:f6:c4:49:d0:b0:62:0f:
40:52:fa:fe:c2:b8:86:fe:ae:fa:13:40:9e:99:f2:
7d:90:7c:0a:05:7c:e1:11:d1:36:6d:5c:eb:6b:3b:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FA:E8:5F:6A:DB:69:4F:E4:DD:13:CB:AC:E5:EB:EE:24:72:BC:C6
X509v3 Authority Key Identifier:
keyid:1A:E5:C2:FD:97:16:71:8F:42:62:02:83:47:91:D9:41:A9:C8:46:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuXC_ZcWcY9CYgKDR5HZQanIRqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/LvroX2rbaU_k3RPLrOXr7iRyvMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aa576f-9aab-4cc8-a738-56f52b0ae04a/1/GuXC_ZcWcY9CYgKDR5HZQanIRqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:48:fc:a0:1a:e1:24:62:e6:d7:7e:84:6d:ab:15:3f:6a:16:
e1:1f:39:a4:f9:89:48:04:47:e6:71:e0:b7:07:46:42:b3:bf:
d5:51:dc:8f:34:79:4a:d5:a0:0b:92:91:11:0e:77:88:61:81:
5c:43:74:2f:05:42:d7:f5:cf:d2:40:64:68:f2:16:08:b3:08:
b1:4a:e0:d9:b7:63:76:cd:02:f7:2d:2f:01:6e:13:c7:6a:8e:
98:c3:cf:9f:69:c3:22:f3:1a:0a:d0:b9:70:74:0e:ba:54:40:
e8:08:8d:16:f5:a1:9a:0e:a9:2f:e2:5f:45:14:19:ce:ae:ec:
e7:07:16:56:c0:c9:f7:bd:7f:a9:84:93:a1:08:de:f6:db:cd:
c8:5c:5d:30:7d:7b:82:79:c7:f9:aa:37:c2:5e:2d:11:c0:fc:
3b:06:08:cd:c8:59:db:d7:f6:01:c6:4c:9b:da:3d:54:3d:cd:
3e:bc:02:11:68:cc:2c:0c:eb:0d:6d:ff:cb:56:da:94:51:7e:
c3:78:10:1d:d2:7b:e2:f8:55:0b:09:f8:eb:b1:6f:a4:f5:a8:
de:fc:7c:64:b2:ef:ad:7a:2a:5f:b3:15:cd:0a:27:b4:5a:a1:
c7:e4:05:6e:9d:b6:5f:f3:1d:72:db:4c:dc:c6:97:24:8a:b3:
87:eb:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:01:31 2025 by rpki-client