Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lkvnXph4w7i7iW6J7zDVMC_hJ0M.roa
File: lkvnXph4w7i7iW6J7zDVMC_hJ0M.roa (raw, json)
Hash identifier: 8mEkxJSYZqvnCAp7mf8iNc1LsVM0SyqvNoZnKQgkC7I=
Subject key identifier: 96:4B:E7:5E:98:78:C3:B8:BB:89:6E:89:EF:30:D5:30:2F:E1:27:43
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018412E29DD695BECEB82DE07C1FFAB6974C
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lkvnXph4w7i7iW6J7zDVMC_hJ0M.roa
Signing time: Wed 26 Oct 2022 06:02:32 +0000
ROA not before: Wed 26 Oct 2022 06:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19318
IP address blocks: 194.104.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:12:e2:9d:d6:95:be:ce:b8:2d:e0:7c:1f:fa:b6:97:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 26 06:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=964be75e9878c3b8bb896e89ef30d5302fe12743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:b4:a1:ea:cb:17:d5:e1:c5:68:66:b0:a1:
0a:c7:35:d8:28:12:d4:b1:83:81:8b:f8:2f:a5:ea:
b1:4f:f1:4c:b7:25:a3:1e:97:86:07:11:ea:21:04:
c1:d0:02:6e:86:06:b6:8f:60:e7:78:d1:4d:94:75:
98:23:ac:06:49:7d:5b:7e:97:9c:3a:82:35:d5:02:
8a:f2:b7:54:bf:ae:e6:2d:3f:17:cd:62:3e:55:76:
22:57:a0:d2:c8:8a:42:80:52:ea:2e:1c:e1:d8:d1:
7f:bd:e8:9b:1a:ef:c1:4a:cb:62:4d:73:3c:93:5e:
06:5c:f6:05:6a:88:25:9e:20:9b:ba:c1:fa:25:0f:
a4:ea:27:e7:75:24:a8:3c:62:7e:0f:7d:df:eb:25:
f2:6e:1d:11:8f:73:0b:e1:59:b2:57:7b:11:61:a4:
7a:3d:68:41:af:fc:4a:de:74:3d:04:90:c2:df:6a:
ce:45:a3:cd:f1:07:46:56:a8:a1:ec:b5:81:e4:50:
78:9c:22:94:b4:3c:97:d7:fd:f0:db:c1:98:f7:ff:
1d:32:98:22:1a:18:b9:bd:96:a6:d2:70:01:ef:10:
37:a8:10:d0:f8:1e:78:82:67:8b:52:2a:36:d8:74:
b2:82:00:6b:9d:7c:0e:56:1e:eb:60:10:d8:42:57:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:E7:5E:98:78:C3:B8:BB:89:6E:89:EF:30:D5:30:2F:E1:27:43
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lkvnXph4w7i7iW6J7zDVMC_hJ0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.156.0/24
Signature Algorithm: sha256WithRSAEncryption
75:76:fd:f6:2a:f1:f6:a8:8b:6c:20:1e:95:7a:08:42:dc:ea:
81:71:8d:87:6e:f1:c2:e1:89:1a:59:ce:ac:2f:c6:59:5f:23:
02:a6:8b:37:72:3e:c1:f0:9a:2a:57:ff:9d:af:07:1e:dc:ef:
00:ef:10:c9:ca:9f:40:f2:6b:0d:5f:e9:22:f9:ad:d8:46:e7:
99:7b:cb:49:6e:a6:a0:5b:ec:ba:00:8c:63:e9:ed:47:2e:72:
e6:d0:05:5f:d8:7a:38:06:4e:f1:13:67:c5:86:c4:f3:7b:5a:
28:d5:2d:0a:11:40:d2:4a:8c:20:14:d3:49:d6:b0:38:1d:80:
bb:10:53:87:51:78:54:ab:df:e0:40:6d:ec:7c:37:54:d2:90:
b5:8d:70:d3:e1:d7:80:40:d2:32:a1:1b:e2:f1:71:fc:ac:0d:
5d:e5:8f:7b:ab:84:11:d0:98:55:5b:c5:82:32:ca:f7:b9:85:
ba:e3:78:fa:46:95:7a:7f:3b:f3:6b:33:af:fc:80:39:11:ac:
6f:af:53:3b:d8:b5:96:52:63:83:f7:3b:8b:6d:64:5d:37:9c:
06:64:18:b1:d0:47:ad:58:d3:7d:62:2d:cd:e4:bc:66:ab:dd:
82:1c:08:25:3b:76:ea:93:f4:b2:76:87:bc:f8:3c:cf:47:fe:
0b:a7:69:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:10 2025 by rpki-client