Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/L5u5DmCNVd1MJcqU05puywfJc2I.roa
File: L5u5DmCNVd1MJcqU05puywfJc2I.roa (raw, json)
Hash identifier: GhoJ1IVauLDifT8FydRaNxi9zBDwIMep7o7joySpooc=
Subject key identifier: 2F:9B:B9:0E:60:8D:55:DD:4C:25:CA:94:D3:9A:6E:CB:07:C9:73:62
Certificate issuer: /CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Certificate serial: 018CC5006A7C4411EF1A9A9A0BDB81A95A16
Authority key identifier: 95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/L5u5DmCNVd1MJcqU05puywfJc2I.roa
Signing time: Mon 01 Jan 2024 12:29:47 +0000
ROA not before: Mon 01 Jan 2024 12:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 193.56.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:6a:7c:44:11:ef:1a:9a:9a:0b:db:81:a9:5a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Validity
Not Before: Jan 1 12:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f9bb90e608d55dd4c25ca94d39a6ecb07c97362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:59:34:77:a9:da:b5:18:42:3f:c1:97:9e:
b1:8d:e1:6c:97:44:4f:5f:98:e2:bd:77:54:4c:34:
0c:b3:80:48:c9:14:0a:91:7b:09:5b:da:36:b5:50:
5a:b6:7a:fe:4f:f2:4b:3b:84:c7:d5:5d:ff:80:49:
3f:54:54:57:ee:bc:81:e6:69:bd:07:9e:c8:28:89:
9f:8c:7b:90:58:dc:e7:e4:d6:c3:13:61:dd:88:10:
94:12:19:4d:29:75:96:5c:aa:38:09:ae:f6:4c:fa:
34:aa:15:35:70:f7:8e:2a:ab:4e:3e:16:76:d3:0e:
07:58:56:fa:ba:78:8d:b9:ad:2f:c0:d4:31:b7:f7:
79:b5:c3:4e:83:5b:41:fb:e5:e0:c4:d4:ed:6d:10:
bd:83:93:ce:ee:c9:c0:cf:6f:c9:3f:02:1d:e6:f8:
52:6d:57:d8:e9:a3:33:1b:65:82:62:c7:ff:1d:20:
b6:48:4e:13:45:be:25:08:86:b0:44:25:21:de:96:
c8:a0:38:ae:19:a1:41:ab:ee:4f:2c:69:00:96:0b:
cf:68:c1:82:b6:66:9f:53:fc:39:ac:4e:01:33:78:
f2:7f:40:b1:3a:37:f4:59:a2:78:35:94:e4:4a:48:
43:84:65:2f:e0:fb:18:bf:c0:fb:94:36:53:e6:06:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9B:B9:0E:60:8D:55:DD:4C:25:CA:94:D3:9A:6E:CB:07:C9:73:62
X509v3 Authority Key Identifier:
keyid:95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/L5u5DmCNVd1MJcqU05puywfJc2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/lRyLQG6CmacpTdciRXD8MrYp3Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:81:de:8b:e9:73:e2:af:e8:ff:a5:b3:eb:07:a6:ab:31:e7:
e6:a0:90:39:a6:d7:f0:65:98:6e:e0:e7:31:cb:7c:55:3b:f3:
b5:63:99:9e:13:66:15:1a:fa:c4:ff:62:23:90:9e:2b:cc:df:
46:54:a4:a3:e1:55:a6:33:36:49:40:31:b1:a3:36:28:49:3f:
df:3f:c2:4d:2a:e5:51:4e:aa:4f:73:b2:39:1f:ed:53:5c:a4:
ca:a5:79:41:3e:6b:bc:ed:4f:ec:38:e0:77:65:54:a8:de:33:
36:09:ca:e4:fe:89:40:7b:00:63:68:11:29:f8:c3:bb:29:47:
8a:2a:0b:e9:de:60:ab:9a:d7:6d:be:fa:5f:74:e5:e0:26:c8:
b6:d2:4a:57:dc:55:ad:38:9c:6a:ed:c8:1e:52:8e:03:ac:36:
3f:98:9a:df:32:32:8b:83:f7:35:29:5e:cd:5b:51:1d:4c:68:
4a:d0:a6:58:04:76:ec:01:74:30:83:6c:fa:82:16:e7:06:09:
5e:06:3b:a1:e2:6a:24:ff:bd:6b:37:d3:23:d1:14:60:8d:d1:
84:da:05:99:ce:ab:3f:bb:c0:91:76:52:58:a3:2d:80:9d:e3:
75:6d:52:4d:03:48:b9:c8:23:50:1d:54:1d:df:7f:ac:39:37:
de:39:f6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:09 2025 by rpki-client