Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/0lLIFsMnJfjbMITyMtcjv5rwpaE.roa
File: 0lLIFsMnJfjbMITyMtcjv5rwpaE.roa (raw, json)
Hash identifier: CF29X9QV8+/p4F0B+TvxRr6hYoLcahP5zhILwH1ecU8=
Subject key identifier: D2:52:C8:16:C3:27:25:F8:DB:30:84:F2:32:D7:23:BF:9A:F0:A5:A1
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 0194228DF1D7C7DEED0B2C8C52A8919AFF7F
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/0lLIFsMnJfjbMITyMtcjv5rwpaE.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 134.97.2.0/24 maxlen: 24
134.97.3.0/24 maxlen: 24
134.97.16.0/24 maxlen: 24
193.22.4.0/24 maxlen: 24
2001:650:cc02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f1:d7:c7:de:ed:0b:2c:8c:52:a8:91:9a:ff:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d252c816c32725f8db3084f232d723bf9af0a5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:5c:34:a0:73:fd:20:4b:20:18:9e:db:5d:
7c:15:20:41:6c:35:b2:74:8b:b5:1b:90:c9:ff:7b:
ee:89:9d:47:de:64:c8:e0:00:81:ba:b0:68:52:b9:
fb:4b:c8:27:89:ba:4c:a4:5f:53:37:a2:9a:a1:80:
df:cd:76:42:05:ca:a6:46:5d:12:6b:ef:31:27:3a:
2c:2a:91:52:62:1e:e6:7d:f8:d7:2c:2c:0e:96:8a:
f2:fb:32:53:f0:3b:ed:25:be:63:f8:84:08:87:8b:
64:70:b4:b4:3e:1a:c5:8c:83:ee:8a:bc:d8:fc:a0:
3b:3c:37:00:5a:82:7d:aa:38:15:9d:3c:30:b0:c3:
6b:4b:f9:68:75:1f:e5:d4:8d:8b:43:cf:3f:b4:b4:
45:58:c5:d8:20:97:0f:31:93:d9:c6:a7:2e:e2:3e:
5c:0a:15:21:bd:48:c0:19:aa:dd:ff:b3:36:76:23:
4e:4e:63:d4:be:69:3d:c7:ab:df:74:29:12:3e:f3:
b1:f0:6e:49:00:ac:3a:c5:3e:74:83:f2:b3:45:59:
ae:c2:58:cb:18:9d:ce:2e:72:bb:c8:73:ee:35:db:
36:f6:63:ae:f9:04:2a:c7:58:03:1b:e7:9c:f9:7c:
08:25:c3:d9:c0:e4:2d:0e:d0:2c:64:43:b6:fc:a1:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:C8:16:C3:27:25:F8:DB:30:84:F2:32:D7:23:BF:9A:F0:A5:A1
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/0lLIFsMnJfjbMITyMtcjv5rwpaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.97.2.0/23
134.97.16.0/24
193.22.4.0/24
IPv6:
2001:650:cc02::/48
Signature Algorithm: sha256WithRSAEncryption
4c:29:45:b9:89:88:eb:b3:f3:60:57:07:9b:46:b5:b0:c1:56:
1a:37:f6:c1:2a:57:5e:73:8d:2f:e1:d0:e1:e4:da:dd:cf:86:
67:f3:db:8c:df:ed:98:c3:2d:d8:c5:93:a2:31:64:77:fa:8b:
ce:02:51:17:4f:6b:08:7c:03:97:e8:ec:86:af:25:f8:be:0e:
52:bc:a6:6f:2f:b8:bf:dd:82:d4:c5:da:bb:e9:da:5e:a3:47:
60:96:fe:af:3c:be:eb:57:19:f3:e9:ed:48:6e:e5:af:be:95:
e5:ad:e6:31:bc:b4:7b:ad:e7:97:e0:0e:e1:3b:b6:2b:45:a2:
72:43:9e:73:28:4f:a2:0a:44:44:01:f7:d8:35:29:4f:5a:70:
39:60:e9:7f:ea:d8:68:3d:b6:4c:ac:09:28:a6:36:5b:33:86:
46:83:13:6c:a2:c2:7b:14:6e:a8:ff:28:21:3e:a4:a0:0b:d1:
06:3c:41:a4:38:a0:da:7c:20:e8:10:fe:fc:49:43:52:df:81:
eb:39:fa:cf:33:a0:ef:3e:4a:57:61:7d:dc:25:00:2b:05:4b:
7c:b0:b9:df:e6:ad:76:20:25:4d:45:66:7d:f6:0d:e3:9a:5c:
8b:28:1c:c6:04:e1:e0:4a:0c:e3:12:af:10:49:f7:14:0d:ee:
e2:60:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:43 2025 by rpki-client