Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ljEmnoOQouLCZxUPXq_N_nl7FpI.roa
File: ljEmnoOQouLCZxUPXq_N_nl7FpI.roa (raw, json)
Hash identifier: LRRLrBd7KVkWC+vBb/CoxTSSAUwb14bZ1Hd5NrF7bv0=
Subject key identifier: 96:31:26:9E:83:90:A2:E2:C2:67:15:0F:5E:AF:CD:FE:79:7B:16:92
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C341C8636F99377210436530410AC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ljEmnoOQouLCZxUPXq_N_nl7FpI.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62342
IP address blocks: 80.96.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:34:1c:86:36:f9:93:77:21:04:36:53:04:10:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9631269e8390a2e2c267150f5eafcdfe797b1692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:79:8d:27:d5:2f:8c:24:75:d1:5f:32:d3:
04:19:a3:00:78:61:cf:ba:2a:aa:42:51:ee:82:a2:
0e:a5:71:6c:d1:7a:57:99:d4:c4:33:85:3b:fc:32:
ae:d2:ef:d6:d8:21:a1:f7:81:97:21:0c:16:4c:b0:
1b:a3:6d:79:df:8a:ed:21:af:a0:c0:06:b9:40:18:
75:14:a1:56:81:a1:82:9c:f6:1f:18:3d:08:a3:d5:
14:15:8d:d3:f8:84:c1:f2:2c:a8:45:81:02:34:09:
a0:75:3e:30:1c:63:0e:b3:e0:f5:8d:7f:36:90:c5:
6a:e1:7b:22:2f:e7:68:29:a4:c9:a5:ee:a8:79:80:
68:b1:59:1a:6b:89:b4:9a:e4:d3:29:1e:d5:16:bd:
42:74:3f:24:26:f9:c0:56:7c:bc:07:dd:60:84:6e:
04:8d:a4:b4:99:6e:84:8a:56:40:1c:54:f3:8d:88:
ed:e6:25:eb:14:40:b5:69:e5:a6:78:36:c4:8e:e7:
e9:8e:b9:2c:a4:33:fd:3b:cd:7f:cd:7d:79:07:36:
00:48:87:92:83:32:06:d5:7a:14:e4:87:c8:62:4a:
e3:f3:19:18:f9:7c:ae:c6:d4:47:82:2a:cb:f2:8d:
ae:0f:55:5f:e6:04:e1:82:39:ab:b7:b3:22:d9:6d:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:26:9E:83:90:A2:E2:C2:67:15:0F:5E:AF:CD:FE:79:7B:16:92
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ljEmnoOQouLCZxUPXq_N_nl7FpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.52.0/24
Signature Algorithm: sha256WithRSAEncryption
35:06:13:b1:1f:a3:a3:b5:50:f6:bb:4a:24:d8:4f:fe:c9:bf:
ae:76:51:e7:b6:74:28:34:a1:59:34:8b:a8:96:d1:30:08:71:
bc:ac:27:6a:61:14:5b:4d:df:fe:33:d4:40:08:10:d3:20:7b:
b0:16:17:58:b8:4b:3a:bc:c6:67:22:dc:b5:76:a7:90:e9:c4:
1f:4f:79:fc:65:b4:5a:93:44:b7:65:5b:27:da:14:df:6f:42:
ff:6f:87:e4:0a:25:b6:6b:0e:34:2f:04:88:b5:b0:d4:13:df:
48:a3:e7:8a:90:5e:63:9a:14:31:e2:ec:c0:8a:e7:cd:11:33:
cf:a2:81:bd:6e:da:03:50:5a:8f:81:58:2d:e3:86:00:f9:a4:
74:1d:62:48:6b:28:6e:45:3e:39:0b:db:d7:a5:9f:77:fd:5c:
48:8c:24:1b:7f:06:59:fd:70:be:21:d1:e1:6d:06:4f:8e:32:
c1:45:e3:da:b7:4c:80:24:e3:5b:b1:67:29:12:e9:59:11:1d:
9a:c4:f2:d6:dc:f0:d4:c5:e3:1e:6d:4e:78:41:79:53:64:ea:
df:a7:c2:b2:f2:d5:ae:37:44:91:a7:1a:44:d7:d0:c8:ab:82:
f0:4d:d8:bd:74:cb:52:46:1a:91:1f:3b:b2:06:f9:52:c9:ad:
33:24:9f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:31 2025 by rpki-client