Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lHe2pyAbJT3Yog-EKPWjbGzZ8rs.roa
File: lHe2pyAbJT3Yog-EKPWjbGzZ8rs.roa (raw, json)
Hash identifier: qxp9CZbrEu5LoYoE+754qwtbzOUfoefLaPTYPBLVTwE=
Subject key identifier: 94:77:B6:A7:20:1B:25:3D:D8:A2:0F:84:28:F5:A3:6C:6C:D9:F2:BB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C276B8B2A2F3AA318FDCA92671B84
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lHe2pyAbJT3Yog-EKPWjbGzZ8rs.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47774
IP address blocks: 193.231.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:27:6b:8b:2a:2f:3a:a3:18:fd:ca:92:67:1b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9477b6a7201b253dd8a20f8428f5a36c6cd9f2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e4:22:8a:51:7d:35:49:e0:f3:49:2f:3c:8e:
26:48:e7:e4:39:cc:63:07:dd:3a:82:75:23:66:7c:
95:16:27:65:13:dc:d1:51:4c:c4:22:c7:b4:32:e5:
18:70:8c:ab:00:55:50:c8:c5:04:5e:22:93:23:b6:
35:a2:ef:63:5a:e4:96:3a:bb:c9:dd:fc:bf:b1:48:
a3:2d:43:2a:29:a0:03:28:a4:12:b1:0e:1e:7f:fd:
04:3b:f4:9b:e6:85:0d:98:dd:52:72:af:50:2f:ee:
e7:4f:83:fc:ce:2a:e5:23:ae:d0:3b:78:34:4b:25:
e4:b6:91:00:71:03:98:b8:35:83:ca:63:a7:d0:b9:
24:e8:39:66:f0:f9:7e:48:83:6c:09:b1:5e:6b:10:
e9:8e:71:e0:59:b4:d0:87:8b:2b:9f:6f:8d:f7:9a:
45:d4:ef:2f:f5:84:ae:65:ec:43:0d:ef:6e:62:1d:
a7:81:7b:f0:1e:5b:4f:59:0f:cd:0e:49:6a:17:0e:
f3:e8:b2:16:2f:77:20:26:7f:76:e6:65:fb:57:a5:
36:81:59:4d:ab:d7:07:2a:d3:9d:19:f6:aa:f3:ba:
59:79:d6:0e:5c:ec:fd:cb:cd:71:6c:0e:4a:97:3d:
c3:c0:9b:39:67:b7:6a:30:75:87:a5:31:2e:5a:65:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:77:B6:A7:20:1B:25:3D:D8:A2:0F:84:28:F5:A3:6C:6C:D9:F2:BB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lHe2pyAbJT3Yog-EKPWjbGzZ8rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b7:c4:72:42:91:d7:34:9b:65:63:6c:74:23:9f:3d:46:a9:
30:20:1e:59:c8:04:66:67:4f:93:31:8a:ca:9f:cd:85:29:1d:
ae:2e:ea:bc:0b:fb:24:f2:0b:d5:46:20:31:c0:c9:f7:c8:b3:
e9:15:89:66:66:ba:35:3e:fb:a8:a3:d1:ea:a4:fa:f9:16:b3:
52:cc:01:0a:04:be:90:29:a7:f9:8e:ac:44:10:d8:26:07:86:
b0:0e:0e:3d:41:48:54:0f:22:87:45:10:5d:80:ad:d3:0e:20:
f8:e0:61:73:15:85:ed:7b:e4:76:64:3d:62:53:94:be:c3:b9:
8a:e6:b5:0c:11:30:77:61:c4:39:33:d8:0a:67:0e:d3:dc:68:
ae:3d:14:a3:47:0b:98:c7:00:81:60:df:47:c1:0e:92:64:10:
ca:15:15:c9:e2:8e:e1:a2:56:e1:07:19:ee:81:0f:dc:09:d8:
16:19:4d:b5:e1:b6:5a:01:a4:80:0c:5d:37:2b:f1:35:2a:9e:
9a:a2:a0:c2:a1:51:74:a6:ca:bf:a0:4d:1c:90:47:8b:64:d0:
fb:6c:64:ec:61:6e:90:17:0e:98:cf:63:44:fd:3b:39:00:a3:
f2:d3:1d:37:b8:d1:87:01:30:fa:a6:0a:81:83:a9:45:65:3c:
5b:85:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:25 2025 by rpki-client