Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lFWzMUMWUnRfCuMgLaMpn6UbWQc.roa
File: lFWzMUMWUnRfCuMgLaMpn6UbWQc.roa (raw, json)
Hash identifier: vNCu/SJOpVhYwrZNMm21Lii9CRgeKWvdvmysisGpZyQ=
Subject key identifier: 94:55:B3:31:43:16:52:74:5F:0A:E3:20:2D:A3:29:9F:A5:1B:59:07
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427487BD55C63AB376FECC2465228E22C
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lFWzMUMWUnRfCuMgLaMpn6UbWQc.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 92.119.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7b:d5:5c:63:ab:37:6f:ec:c2:46:52:28:e2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9455b331431652745f0ae3202da3299fa51b5907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5f:cc:5e:2a:c6:03:0a:9a:ef:f3:20:68:3c:
36:b0:06:82:3d:bf:01:8f:73:60:8a:23:c2:78:27:
f8:c2:d6:88:96:60:d1:fd:15:f2:02:a2:b9:bb:f7:
04:0f:93:d0:8a:8e:4b:67:6c:4f:2f:00:da:c2:d1:
a8:c5:51:f6:88:b9:bd:09:58:e1:1a:eb:47:ed:f7:
b7:c9:a9:31:f9:db:da:35:ed:20:1a:65:64:59:6e:
8b:94:10:b8:70:82:2f:4d:01:52:ba:e0:82:a0:ba:
3f:5f:f9:67:ec:5d:c7:79:3e:cd:f3:d0:84:40:73:
ee:ac:23:2e:c2:ea:49:9b:b6:32:9d:ef:90:8f:05:
e6:f3:9d:40:98:2c:ee:b2:de:9c:02:62:b0:cc:6c:
96:2d:f3:32:78:29:44:ee:7c:4f:13:71:fe:e0:fe:
19:9e:e7:07:30:2e:db:52:89:cc:0d:b7:2b:6a:16:
23:46:c4:33:fb:db:cc:49:d0:1e:c6:53:02:f9:76:
d2:3f:cf:e4:83:67:bd:b4:ca:8c:5d:d8:bd:dd:47:
ae:06:dc:c4:49:67:09:e1:86:36:c2:59:86:ac:5f:
da:68:3a:3f:33:ff:0d:9e:62:19:6c:9d:ce:bf:02:
8f:ae:77:a1:2a:e5:d9:c7:a1:7e:e3:41:14:f4:23:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:55:B3:31:43:16:52:74:5F:0A:E3:20:2D:A3:29:9F:A5:1B:59:07
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lFWzMUMWUnRfCuMgLaMpn6UbWQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.164.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:82:57:7b:d2:8c:28:35:48:ec:86:43:98:93:47:db:9d:fe:
85:fc:c7:0b:c7:27:49:c7:b0:84:57:1c:da:9c:c0:c1:f9:0b:
78:41:78:f1:56:25:fa:ca:4e:cb:3d:88:b2:c6:3a:5c:f8:42:
e2:67:b6:be:d6:e8:d6:0d:90:0c:d9:40:65:3f:86:26:05:0e:
1b:5d:86:d8:51:8f:ec:c9:11:2f:ad:80:83:0b:f3:ba:55:4d:
4f:dd:82:98:bf:e9:0c:14:63:e9:b3:ba:c0:8e:a8:11:37:07:
f0:c3:d8:72:ce:e6:d2:ea:6e:76:86:8c:8c:03:07:82:fe:66:
69:28:e7:ea:b9:cc:0d:00:e2:82:a1:df:af:75:bd:32:f5:aa:
a4:16:c4:0e:23:85:7c:b1:b6:36:b9:df:71:73:e4:c2:04:82:
ff:70:58:ac:34:e5:93:92:3c:e8:6e:b5:ac:3a:1b:db:9d:70:
09:33:83:83:86:c0:a2:1f:06:79:57:34:02:fe:13:01:c2:fc:
0e:44:5b:3c:b4:e5:ac:dc:5e:6a:c5:de:ce:fc:40:4b:58:cd:
3a:cf:32:56:ea:75:51:ae:45:e8:c8:2e:da:03:92:ac:60:32:
6c:e2:d6:b3:67:44:a7:4f:42:9f:ab:60:64:ca:25:ca:d1:91:
50:cb:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:25 2025 by rpki-client