Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lPi_9vBBm93nBff4C-kS1lFEYnY.roa
File: lPi_9vBBm93nBff4C-kS1lFEYnY.roa (raw, json)
Hash identifier: DZNwUhQdsD0HeUOxaLxniqA+D/Ic7xDUKr7IY0QcCK8=
Subject key identifier: 94:F8:BF:F6:F0:41:9B:DD:E7:05:F7:F8:0B:E9:12:D6:51:44:62:76
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03E62B89
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lPi_9vBBm93nBff4C-kS1lFEYnY.roa
Signing time: Mon 14 Mar 2022 16:47:11 +0000
ROA not before: Mon 14 Mar 2022 16:47:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.113.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65416073 (0x3e62b89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 14 16:47:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94f8bff6f0419bdde705f7f80be912d651446276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:4f:d2:40:cf:9d:f2:05:3f:ac:00:34:cc:
7c:9c:26:ed:e7:d3:5b:b6:50:ce:f3:4d:e8:a4:fa:
f3:c3:03:0f:37:2e:a5:5c:0a:2c:04:bb:89:91:cc:
f0:62:e2:a5:fc:ad:63:f9:ba:79:75:7b:49:da:37:
b9:25:c6:13:a2:f8:7c:d0:12:37:09:03:a6:29:89:
23:5b:2a:b4:5e:2f:bb:5d:f9:88:d2:53:5c:ab:68:
53:a7:11:7b:62:cd:a6:1f:f9:ad:ba:72:3d:27:1c:
66:81:b3:2e:3d:d6:3b:35:f2:15:00:d6:3b:d4:46:
0e:d1:e4:ce:2e:59:d1:aa:1d:36:a6:be:cf:eb:6a:
6c:3e:61:87:a0:f0:ee:b7:6d:95:71:fc:0f:86:7b:
bf:97:ed:fc:e7:c0:45:32:e3:76:5d:01:4f:81:12:
66:66:c4:a9:4f:6b:a9:ce:04:e6:6f:a5:47:50:e1:
11:77:6d:1a:6d:b2:6b:dd:ec:29:6f:dd:b9:dd:6c:
89:66:1d:ec:5d:8c:99:39:2d:9f:9e:0f:e1:50:8f:
05:41:23:7b:4f:44:f1:c0:77:3f:6f:c6:1d:72:89:
64:02:46:0f:6a:1c:16:27:de:b3:e9:62:c5:5a:af:
b0:20:a0:bc:5b:83:33:3b:bd:8e:79:5a:b9:46:0d:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F8:BF:F6:F0:41:9B:DD:E7:05:F7:F8:0B:E9:12:D6:51:44:62:76
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lPi_9vBBm93nBff4C-kS1lFEYnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.227.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1a:2f:b0:cf:cb:de:10:8b:6a:a2:73:8d:2f:1b:70:56:ff:
44:ad:b0:b7:05:04:25:82:90:1a:f5:9d:49:c9:55:08:37:1f:
0e:cb:bf:05:cb:3f:56:12:3a:0c:da:56:ea:8e:b8:83:70:a1:
6a:33:83:26:71:75:4d:49:de:7f:c5:6d:b5:9e:08:4f:eb:69:
99:10:aa:2a:45:a9:19:9d:df:8d:8f:1f:d6:fd:39:b5:dd:77:
99:1b:94:06:7f:e6:7b:6e:71:5e:d4:37:85:59:71:08:bf:93:
62:be:a5:76:5e:57:70:da:ae:94:a1:78:19:a0:4e:44:b5:7d:
f9:b2:33:ea:cf:77:76:74:08:54:f7:43:06:40:f9:d4:6e:24:
14:27:1e:d8:89:c5:8d:a3:45:65:a7:86:97:a4:06:77:86:44:
c8:90:12:10:76:9a:ce:51:21:bd:73:ed:ec:82:d3:bb:be:2b:
12:31:1b:98:73:ff:a0:26:86:9b:bf:ea:4d:06:f2:c9:12:38:
ba:24:7d:b8:9b:1f:0b:00:9e:9b:b9:2e:6a:89:d9:4a:ea:c0:
13:5b:59:4d:c4:89:b3:a0:e1:d0:e8:cb:d6:2b:31:44:c9:7c:
62:91:e0:90:13:d5:0e:59:36:73:f1:33:bb:3a:ee:13:fb:53:
0e:bc:dc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:20 2025 by rpki-client