Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LPB3wRTe9pPsOPk3GclHDWvmKJA.roa
File: LPB3wRTe9pPsOPk3GclHDWvmKJA.roa (raw, json)
Hash identifier: p3aAmpdVRwVECHftJpHfVM4mbxvURFMgU6iqPqA3uk8=
Subject key identifier: 2C:F0:77:C1:14:DE:F6:93:EC:38:F9:37:19:C9:47:0D:6B:E6:28:90
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018E6956E2076243655055E64AB23CADCDB4
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LPB3wRTe9pPsOPk3GclHDWvmKJA.roa
Signing time: Sat 23 Mar 2024 03:24:45 +0000
ROA not before: Sat 23 Mar 2024 03:24:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 95.82.8.0/21 maxlen: 21
95.82.16.0/20 maxlen: 24
109.111.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:69:56:e2:07:62:43:65:50:55:e6:4a:b2:3c:ad:cd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 23 03:24:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cf077c114def693ec38f93719c9470d6be62890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:84:3e:43:90:bc:6a:c8:8d:0b:57:b3:01:
ba:20:60:4a:cc:ea:86:15:74:2e:3d:e1:25:0e:62:
ad:1e:98:f1:d7:03:4d:3b:08:11:85:4d:aa:e6:fc:
17:24:98:e6:71:58:74:05:7a:35:2f:2d:a3:46:96:
2d:15:a8:49:41:52:36:1d:e5:4c:dc:7b:8c:77:61:
b0:4a:2b:53:95:a7:cc:50:14:78:d6:b9:4a:df:36:
4f:f5:fa:21:c7:87:9f:6d:35:0e:fd:a7:d4:19:79:
81:e9:99:47:b1:d3:d5:c0:2f:fb:c4:6b:e1:a7:72:
4c:d1:6d:d5:85:bc:cf:38:b9:75:5b:d7:97:1e:23:
90:a4:b5:5f:da:11:f0:8c:00:32:56:b9:5d:4e:da:
b9:2a:80:2e:f9:2f:1e:30:82:d7:12:4b:f4:a2:99:
49:f0:9b:61:fb:f1:f0:40:26:ab:f9:0f:21:ad:cc:
0d:2c:bf:71:14:24:3c:82:b3:91:ef:20:8f:38:e7:
e1:99:43:fe:ef:37:a5:a0:0f:ac:91:12:07:fa:4d:
9f:ad:cc:e5:41:60:7b:6a:62:c1:f4:8d:e4:30:e6:
de:19:6e:57:28:cf:fd:ed:d8:5e:86:4b:64:a4:1f:
e7:61:59:cf:3e:5f:6f:a6:54:12:27:1c:50:7e:b1:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F0:77:C1:14:DE:F6:93:EC:38:F9:37:19:C9:47:0D:6B:E6:28:90
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LPB3wRTe9pPsOPk3GclHDWvmKJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0-95.82.31.255
109.111.52.0/22
Signature Algorithm: sha256WithRSAEncryption
77:94:c4:6f:95:6f:cb:57:c1:e6:3b:8b:82:46:92:52:2b:4a:
1f:58:8f:8e:2b:f4:9c:e7:f1:4d:61:e4:e5:0e:0d:0f:bb:0d:
7e:29:d9:c3:d9:c9:1a:a9:e9:b2:68:cd:51:33:b7:ff:c4:4a:
db:8f:8a:a4:fe:a1:c8:70:b5:93:51:3b:bd:ee:8b:85:a1:24:
9e:50:81:b7:6a:a4:6e:94:c8:b6:d6:0f:43:07:18:5b:c2:7f:
2d:b2:ed:d5:61:f5:82:1a:31:88:4f:b3:f6:54:6f:75:c9:72:
dc:bb:7f:59:16:8f:4d:b2:23:a4:03:8b:c4:9b:85:77:81:61:
7a:83:9b:1a:a6:77:9e:cf:b0:85:08:9d:94:26:49:3c:f6:6e:
67:cd:8f:56:76:d2:9d:cc:b2:63:bb:de:48:fe:a7:f6:a8:b2:
33:80:c0:0c:3a:4c:b7:50:56:d8:c9:09:b7:86:3e:e1:49:84:
37:e2:44:b0:92:5b:ab:69:dd:b8:57:0c:c5:3b:c9:bb:24:a4:
5e:e2:de:3e:04:f7:1d:84:61:b4:b5:c5:e5:fd:b2:3d:70:d2:
78:1b:59:c5:2d:d4:35:5f:52:c5:53:ae:1e:af:e5:8e:53:cd:
b2:fe:76:7f:1e:a6:90:88:a7:6e:a7:7c:42:62:ca:40:8e:4e:
ec:c6:e8:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:17 2025 by rpki-client