Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/lTLE7VIfbcOyI7v4iJ3PigAikTY.roa
File: lTLE7VIfbcOyI7v4iJ3PigAikTY.roa (raw, json)
Hash identifier: FeL4HP6e908qPMKFXzFon63n+dL/8ftPIgxz6NLVz68=
Subject key identifier: 95:32:C4:ED:52:1F:6D:C3:B2:23:BB:F8:88:9D:CF:8A:00:22:91:36
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B13DB05726D03563AA350DD8AC362
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/lTLE7VIfbcOyI7v4iJ3PigAikTY.roa
Signing time: Sun 01 Jan 2023 13:35:09 +0000
ROA not before: Sun 01 Jan 2023 13:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205492
IP address blocks: 194.209.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:13:db:05:72:6d:03:56:3a:a3:50:dd:8a:c3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9532c4ed521f6dc3b223bbf8889dcf8a00229136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:23:3e:b2:9c:19:eb:94:db:00:03:ad:c0:
c2:26:d6:74:9f:0a:ad:22:f8:19:e5:7c:58:95:94:
55:74:0c:a9:2e:3b:06:34:12:b4:cb:3c:48:32:ef:
16:9e:5a:44:2e:44:e1:4f:a5:52:9c:56:b9:ea:a0:
29:3a:f2:f9:e6:6d:ba:b8:6f:ca:87:63:b8:7d:9c:
22:d4:04:ae:99:39:43:00:e6:91:c0:40:17:4b:85:
d6:65:95:54:ce:6f:c3:95:8c:c3:81:79:31:09:e0:
7d:f2:e4:d9:88:cc:3e:ba:ae:6a:fc:0e:28:ca:ba:
03:7f:df:7c:5c:ed:b7:a5:6d:27:e3:86:21:b0:48:
f9:41:53:c9:e9:73:f7:e5:67:48:3e:a2:e9:f1:76:
ca:c7:31:8d:9c:87:bc:23:03:47:90:a6:04:1c:8e:
08:73:2f:be:ef:a9:75:9b:07:ba:72:4a:bf:fc:b3:
b2:b4:6b:9c:d0:66:d0:4e:48:a1:2c:95:83:d2:13:
a5:44:46:29:29:9d:0a:3f:9d:f3:d3:a3:a5:0e:1a:
70:27:c5:19:de:52:29:c9:02:88:ae:2e:3b:20:96:
d5:e2:3c:87:9f:f0:18:67:a5:5b:e6:4a:10:d3:9f:
1b:34:cf:25:c6:62:1f:a6:a4:fd:ee:98:ed:bc:69:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:32:C4:ED:52:1F:6D:C3:B2:23:BB:F8:88:9D:CF:8A:00:22:91:36
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/lTLE7VIfbcOyI7v4iJ3PigAikTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.80.0/24
Signature Algorithm: sha256WithRSAEncryption
17:2e:11:01:0a:7e:ff:80:ce:3f:7c:19:d4:b1:34:98:d8:87:
af:c0:88:62:06:1c:f6:27:a8:b5:e7:ff:b0:88:9f:21:55:d1:
c0:04:13:e1:48:3b:b4:6c:81:0d:f5:a5:b9:44:78:ca:56:3a:
31:41:28:3a:20:f1:3f:5e:4d:44:67:a3:d1:d8:2e:40:93:74:
6a:7c:b8:5f:db:17:31:33:7e:90:15:02:14:03:56:c0:8a:c6:
fe:6d:c3:b5:8b:4f:ba:f0:6f:21:ca:93:54:31:8c:01:67:c1:
0d:c7:97:3b:a2:54:82:37:d5:83:f3:5f:17:24:8d:32:34:27:
9f:ec:59:18:3e:88:fc:e4:26:be:ab:56:7b:2b:37:81:0d:14:
04:03:ca:57:8b:81:98:47:e3:b4:45:26:c4:b6:84:57:ae:86:
b4:af:24:f8:a4:66:de:13:1e:4a:1e:e5:f3:01:a4:81:55:b6:
d4:73:93:a1:c1:70:dc:40:00:cc:0f:0c:41:23:e9:da:95:69:
53:d9:d2:fb:a3:5e:1d:f9:ac:dc:72:db:79:c0:4c:40:be:d4:
c5:25:1e:87:78:65:76:41:ec:b4:33:8b:2a:63:57:f3:92:8d:
98:b2:05:0a:3e:72:1e:de:9b:25:b7:20:ac:7f:f4:95:25:78:
44:d6:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:28:06 2025 by rpki-client