Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/L5CVIsoItTTVw443IuKRnX_6ofc.roa
File: L5CVIsoItTTVw443IuKRnX_6ofc.roa (raw, json)
Hash identifier: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=
Subject key identifier: 2F:90:95:22:CA:08:B5:34:D5:C3:8E:37:22:E2:91:9D:7F:FA:A1:F7
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 01941F8C6AE43B313520E966D72B610DD350
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/L5CVIsoItTTVw443IuKRnX_6ofc.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48137
IP address blocks: 94.126.48.0/24 maxlen: 24
94.126.49.0/24 maxlen: 24
94.126.50.0/24 maxlen: 24
94.126.51.0/24 maxlen: 24
2a02:f00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6a:e4:3b:31:35:20:e9:66:d7:2b:61:0d:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f909522ca08b534d5c38e3722e2919d7ffaa1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:af:bd:38:48:6a:6c:20:a3:d8:2b:da:c2:
c9:9b:3a:0b:fb:a0:9e:d6:fc:74:98:1b:aa:72:22:
b7:37:44:96:6a:09:fa:c4:e6:84:00:61:04:88:3f:
31:72:11:22:2f:9d:1b:90:f6:2f:0c:37:0e:77:17:
9b:48:bf:b1:d9:28:f8:9b:3b:b3:65:ee:07:2f:66:
cc:b1:85:ce:0c:98:ce:a7:7b:78:75:ed:7c:eb:33:
05:d4:4b:3a:67:5b:8c:3a:81:1a:0a:59:11:02:7e:
de:63:2e:be:22:71:e4:93:02:63:ac:70:c1:74:bf:
40:1a:b7:1d:20:60:c2:52:d8:62:2b:1e:5e:d6:8d:
7e:40:5c:72:31:a8:6a:ab:b0:ab:90:ca:44:25:e0:
b6:ed:8e:8a:92:74:bc:9e:7c:76:b3:bf:85:cd:0f:
e5:46:2d:a5:0a:83:e2:fd:c8:a7:c9:13:01:ef:72:
32:d7:6f:1a:4e:9a:98:5d:d6:65:92:c0:75:3d:de:
8c:b5:61:02:0c:bc:5a:ff:ff:e8:40:71:e1:8d:21:
72:22:58:a6:a0:a4:ae:ad:52:92:61:96:3a:5f:c9:
7c:cb:60:1c:8a:c4:91:09:04:27:ef:39:65:0d:45:
9d:15:d5:3f:c9:32:04:c8:3f:e2:f1:d1:01:3f:ce:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:90:95:22:CA:08:B5:34:D5:C3:8E:37:22:E2:91:9D:7F:FA:A1:F7
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/L5CVIsoItTTVw443IuKRnX_6ofc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.48.0/22
IPv6:
2a02:f00::/48
Signature Algorithm: sha256WithRSAEncryption
57:7d:fd:ec:bc:b1:55:a0:c0:31:92:7b:31:54:e6:11:cd:b0:
11:d9:56:f0:18:60:f5:6f:1b:5a:ce:c8:f8:3c:bc:c1:94:ae:
1e:ef:ed:8c:7c:3c:14:ea:10:bf:60:e2:2d:53:38:1b:ed:9b:
a1:4d:90:d9:2f:17:d2:1a:58:e2:cb:be:5e:e2:23:83:ba:2e:
49:3a:44:af:80:0f:a5:36:0f:48:d6:06:bb:84:6a:34:14:73:
96:b9:84:56:60:3b:fd:3f:1b:84:0c:1a:d1:ad:77:2d:b5:e7:
3e:c3:11:38:13:1f:ef:38:b2:8c:86:e2:bd:fe:29:50:a2:1f:
85:d4:b9:c6:b5:6b:47:b8:4d:ad:bf:3f:26:2b:d7:d6:49:d3:
b1:61:b3:21:bf:4a:1e:95:d5:3f:00:c7:85:9e:4d:48:f8:8a:
b5:5b:68:11:ef:a8:a1:ca:49:2a:3e:2d:64:fe:6f:64:04:0a:
df:3b:5d:4d:44:de:da:c3:88:39:4c:22:b3:fc:59:9f:59:09:
7d:78:66:32:d0:7a:b1:59:8b:ae:cc:04:7e:d4:dd:cc:a1:80:
75:ee:43:7c:00:f6:9c:7d:3e:e8:37:5d:d9:73:2c:d0:3b:69:
5d:fa:8e:5f:19:ef:0c:26:4f:83:47:eb:39:e1:a1:84:97:c9:
95:04:16:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:42 2025 by rpki-client