Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lVLXkjE5u336DUNe5-yOssKJPTU.roa
File: lVLXkjE5u336DUNe5-yOssKJPTU.roa (raw, json)
Hash identifier: LZfaMzNKKI5KTD1Ka0mwOqPdg88OEyiRswrf9PDppVQ=
Subject key identifier: 95:52:D7:92:31:39:BB:7D:FA:0D:43:5E:E7:EC:8E:B2:C2:89:3D:35
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019421B20D3C029004362B413D154FC6A702
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lVLXkjE5u336DUNe5-yOssKJPTU.roa
Signing time: Wed 01 Jan 2025 11:48:24 +0000
ROA not before: Wed 01 Jan 2025 11:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214048
IP address blocks: 95.181.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0d:3c:02:90:04:36:2b:41:3d:15:4f:c6:a7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9552d7923139bb7dfa0d435ee7ec8eb2c2893d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:cd:9b:9a:b2:4c:3f:8f:f1:a1:04:85:87:
30:f7:5f:7d:da:f5:8d:24:c0:91:65:5a:70:aa:02:
d7:51:8f:02:14:e4:4e:cd:0f:62:ac:66:30:04:59:
f6:6c:2c:79:52:e5:1a:72:4d:e6:f3:92:ab:7c:64:
fb:dc:e1:8e:01:70:74:75:7e:a1:a3:74:24:41:6d:
1d:7c:80:4b:73:57:71:08:00:9f:50:62:9d:24:0a:
f7:6d:57:e3:c7:0e:0b:c6:73:86:8a:91:27:28:fc:
4f:91:1a:1b:10:c9:46:b2:70:b5:87:5a:13:33:73:
3d:d5:57:33:64:b8:e4:d9:f2:32:09:a2:c8:32:31:
2b:cb:ea:87:93:b5:f1:ea:8f:1e:f1:8c:07:bb:43:
9f:8b:d8:65:7d:91:d0:8d:a8:83:84:10:1c:b5:00:
e1:4a:01:75:53:26:f5:fd:87:2b:8d:ec:82:cc:1f:
44:64:6d:a1:f9:c0:96:52:05:86:97:58:ee:fc:24:
92:cf:89:20:a5:27:79:ef:c6:a8:c5:ad:e2:03:54:
e7:f3:c0:19:1f:b8:67:02:77:10:74:97:e3:84:50:
f3:ea:b2:87:88:3a:c3:8b:42:f5:37:e9:04:d6:e3:
d6:ae:8e:6e:1a:0b:a5:bd:12:ef:76:50:b7:11:1d:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:D7:92:31:39:BB:7D:FA:0D:43:5E:E7:EC:8E:B2:C2:89:3D:35
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lVLXkjE5u336DUNe5-yOssKJPTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.153.0/24
Signature Algorithm: sha256WithRSAEncryption
45:10:01:dd:21:c9:e7:ff:44:d8:54:24:36:37:e7:fe:9d:84:
4d:11:40:a5:7c:44:bf:e8:d8:96:83:53:6b:c1:ad:34:3a:65:
1d:0f:88:5a:ed:9d:96:f9:77:7f:af:c9:03:a6:3b:47:88:39:
bf:74:60:76:84:63:0d:23:ee:05:d9:74:96:6d:3b:51:f3:2c:
6e:a4:50:8c:fe:b2:a7:12:b2:de:55:42:0d:94:14:d7:6b:ae:
4a:4b:d7:60:03:ad:9e:63:7b:93:ba:0c:5e:df:c3:7b:7e:5b:
ab:f0:6c:9d:53:52:9d:bf:f9:af:66:67:02:0e:07:8e:df:cb:
2d:38:64:6d:24:4b:58:2b:37:47:be:65:fc:21:8a:8c:45:7a:
a6:1a:df:e0:ad:05:fc:ad:59:da:8a:24:dc:bd:4f:69:2a:2d:
86:dd:3e:0f:52:bf:f4:1d:60:c8:5a:60:02:ee:5a:bc:c0:8e:
54:f0:52:7c:d4:af:12:88:56:84:4d:e2:85:ec:cf:96:27:a3:
24:d3:fc:88:d0:9f:43:01:7a:76:d9:0f:cf:7b:fe:a1:c6:19:
5f:53:7a:e1:f9:9c:08:19:7f:a0:bc:fb:38:d9:64:a4:17:ac:
6f:f3:46:5b:83:59:1a:09:f2:c9:52:ab:fd:8c:52:de:9d:c8:
0e:f9:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:53 2025 by rpki-client