Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/lkUV_pQvaLsSaoJOegWniJF6RQo.roa
File: lkUV_pQvaLsSaoJOegWniJF6RQo.roa (raw, json)
Hash identifier: i9n/5GhzO6//QgpiyuPewqwCFXVYirWQt6MCRZhl13U=
Subject key identifier: 96:45:15:FE:94:2F:68:BB:12:6A:82:4E:7A:05:A7:88:91:7A:45:0A
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 0195CEA672BD8F3318274BC9A90C30B6A581
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/lkUV_pQvaLsSaoJOegWniJF6RQo.roa
Signing time: Tue 25 Mar 2025 18:52:49 +0000
ROA not before: Tue 25 Mar 2025 18:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212315
IP address blocks: 194.164.239.0/24 maxlen: 24
195.200.23.0/24 maxlen: 24
2a14:2040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:a6:72:bd:8f:33:18:27:4b:c9:a9:0c:30:b6:a5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Mar 25 18:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=964515fe942f68bb126a824e7a05a788917a450a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:bb:19:64:80:5f:71:fa:3b:94:2e:c0:df:
9c:20:cf:82:de:bd:13:c6:e2:d6:fc:52:8f:4a:52:
a3:69:c9:6a:07:65:0e:56:9d:6e:09:e8:e5:69:d8:
17:fc:92:fa:8c:ea:86:b2:ac:9b:e3:92:ff:0d:19:
26:60:e5:06:b2:fe:3b:18:40:fd:65:80:a1:99:71:
6a:e1:07:17:f5:28:c0:92:9b:42:80:9b:f1:16:68:
db:3d:93:9e:b4:2f:0d:5d:90:67:4e:d9:d0:b8:46:
ca:9d:f2:99:ec:24:a0:44:26:fa:cd:98:a0:56:e1:
1d:71:2b:26:83:4b:fc:88:4e:51:dd:96:33:46:8f:
d6:fa:3f:b1:fa:de:3c:0c:6e:b6:96:97:d8:7e:76:
87:dc:dd:4d:8b:bd:39:e2:6a:1f:34:7f:6e:f2:f9:
ab:d6:be:f1:24:32:26:c4:29:7b:de:ca:ad:09:e8:
6f:1b:0f:cc:29:8c:b2:40:8b:c9:1d:a9:74:d7:da:
20:e1:c7:9f:c6:27:a3:2a:c2:84:83:b8:0f:07:42:
ee:fe:f9:2e:9a:c1:18:9c:e6:13:c2:1b:e8:17:eb:
c3:4e:fe:5d:1d:6e:b0:21:5c:25:77:d8:b7:b6:9b:
ab:32:8e:57:d2:66:2d:53:d4:0f:53:bf:7f:21:7d:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:15:FE:94:2F:68:BB:12:6A:82:4E:7A:05:A7:88:91:7A:45:0A
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/lkUV_pQvaLsSaoJOegWniJF6RQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.239.0/24
195.200.23.0/24
IPv6:
2a14:2040::/29
Signature Algorithm: sha256WithRSAEncryption
3c:d7:b8:ad:60:ee:f4:ce:9e:2e:1e:99:be:75:db:aa:bd:82:
a1:c8:6b:7e:f8:55:a8:98:fb:3c:ca:75:1b:a9:15:3c:c0:dd:
1f:92:21:45:7d:04:30:58:e5:7a:ed:f1:31:47:49:4e:ec:62:
09:b0:9c:96:bb:34:8c:9b:c1:64:14:2c:ad:0b:1a:c7:54:f1:
3d:14:79:cd:d7:89:40:6a:30:9c:e6:a4:c4:89:40:55:34:bc:
2b:b3:8c:5f:3e:c2:7c:95:d1:ee:d1:d0:fc:46:71:74:0d:b5:
12:2f:a8:c1:91:b9:c9:b7:f9:c9:55:29:22:93:d3:47:5c:7e:
2e:cf:f1:46:d0:ac:77:7c:a6:e6:9f:5e:10:bb:ec:a1:c6:30:
fb:99:28:67:53:0a:7d:5c:13:2f:c3:3b:08:fc:96:e5:72:60:
16:a2:68:f7:7a:fc:16:7e:67:7b:be:c0:e1:27:3a:bd:ca:4c:
b0:da:46:77:69:9c:57:b5:7c:8a:01:1a:ee:f0:b1:07:a2:b2:
7a:53:64:df:bc:5e:85:c1:d5:b8:79:40:ca:bf:60:88:ee:b4:
e3:08:9c:0f:e6:75:f7:39:73:48:5d:80:b5:d2:74:00:82:5c:
31:79:cd:9f:a6:0d:2a:b8:80:35:4a:62:20:f4:1d:25:6b:f2:
c0:62:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:57 2025 by rpki-client