Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/LUH1cVg6vfPDhY_TVbzox9gkGt0.roa
File: LUH1cVg6vfPDhY_TVbzox9gkGt0.roa (raw, json)
Hash identifier: Oa6kl9SEaGWXfPtuYrU8ZKcl8mEd4AMTKntLiHtGqM8=
Subject key identifier: 2D:41:F5:71:58:3A:BD:F3:C3:85:8F:D3:55:BC:E8:C7:D8:24:1A:DD
Certificate issuer: /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial: F053C3
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/LUH1cVg6vfPDhY_TVbzox9gkGt0.roa
Signing time: Sat 01 Jan 2022 05:58:05 +0000
ROA not before: Sat 01 Jan 2022 05:58:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210761
IP address blocks: 64.187.208.0/23 maxlen: 24
91.193.114.0/24 maxlen: 24
2a06:a340::/29 maxlen: 48
2a06:a340:abcd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15750083 (0xf053c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
Validity
Not Before: Jan 1 05:58:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d41f571583abdf3c3858fd355bce8c7d8241add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:c0:3c:a0:e3:55:ce:30:e1:1b:88:d7:d0:
5e:81:e8:4d:b6:f0:c8:57:19:b4:cc:c6:ad:15:ab:
a2:3c:dd:41:37:42:d2:eb:60:cc:13:7c:88:21:0f:
60:0e:19:16:89:0f:5e:80:2c:de:17:f4:5e:43:f4:
8b:de:68:cc:df:7f:81:8c:a4:b1:d4:f5:9a:c8:fe:
3f:ab:0b:ba:74:20:bf:80:bb:9b:3b:42:d4:c9:ab:
2e:1c:3c:a0:10:32:f4:d3:71:f5:f3:cd:95:9d:aa:
74:68:9b:16:8a:17:25:45:4a:43:ca:30:d6:68:94:
7b:8f:5a:c8:1c:a8:34:b7:a4:c2:d4:e1:5f:0d:f3:
16:a8:8c:a0:7c:2a:0e:52:7e:ef:1f:c0:f4:ed:c7:
1e:27:66:7a:26:12:7e:87:4c:26:d0:b9:6b:bd:7d:
eb:77:df:05:8d:08:e2:5a:5e:5c:21:35:3f:26:40:
97:85:48:9f:16:b0:05:9e:28:f4:71:28:45:36:2c:
8e:88:0f:62:fe:73:84:7c:89:aa:f7:61:8f:e5:b8:
e0:1e:ac:4a:7c:78:a4:08:7d:1d:83:c9:5f:4f:e6:
a1:de:88:1e:04:fc:e5:6b:a8:36:6f:a3:46:48:a3:
65:c1:0d:f8:8e:05:12:90:b2:dd:02:ca:a6:f5:7d:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:41:F5:71:58:3A:BD:F3:C3:85:8F:D3:55:BC:E8:C7:D8:24:1A:DD
X509v3 Authority Key Identifier:
keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/LUH1cVg6vfPDhY_TVbzox9gkGt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
91.193.114.0/24
IPv6:
2a06:a340::/29
Signature Algorithm: sha256WithRSAEncryption
17:10:f1:d3:b0:54:38:63:2b:59:a6:7b:6c:7d:76:fc:0b:2d:
45:86:a7:32:e7:eb:74:0c:7b:3f:13:a1:dd:ca:88:db:db:7f:
19:2c:e0:2c:dd:8b:37:46:e2:1e:e0:95:6c:52:16:99:d7:d9:
8d:00:de:f9:8c:aa:22:e5:f4:e8:8b:a8:b6:60:a7:05:d0:b4:
bd:c5:bc:73:6a:db:96:16:27:78:30:9a:76:3b:8b:61:35:bc:
ac:79:e2:f8:07:a1:dd:42:07:e5:cc:96:9d:44:8e:50:73:4e:
f4:8a:e1:2a:f0:77:28:1e:61:98:2b:ea:57:1d:3c:43:50:eb:
15:fa:97:b2:6d:8e:b2:c2:fb:1c:12:f5:e7:5d:e4:0f:9e:44:
aa:87:2d:cf:99:ad:f2:dc:90:11:9b:f8:71:64:6f:78:86:a3:
73:37:92:cc:61:5f:06:f4:51:b4:2e:36:1e:82:15:54:b0:64:
ec:21:20:2f:55:08:68:da:0a:5c:02:be:1d:4f:db:1d:14:fd:
df:c7:b3:01:44:96:ea:84:2c:a6:c5:a6:28:a8:02:08:c9:f8:
c9:a9:99:d4:e5:4e:7a:a7:16:79:77:3d:de:95:00:85:93:b1:
94:83:29:61:d4:15:c5:9e:7c:f0:21:00:99:c1:b2:4f:c3:cc:
7a:2d:ba:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:33 2025 by rpki-client