Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LWlpvvSH5RQCKqGfsOmC0cotLr8.roa
File: LWlpvvSH5RQCKqGfsOmC0cotLr8.roa (raw, json)
Hash identifier: tDUYom4/O0CUqIPIwIsSJ2YtEGMmhZcrPgPg2+ZFTE0=
Subject key identifier: 2D:69:69:BE:F4:87:E5:14:02:2A:A1:9F:B0:E9:82:D1:CA:2D:2E:BF
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE91064B9CCA6B4EE400F3DF35CCF9
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LWlpvvSH5RQCKqGfsOmC0cotLr8.roa
Signing time: Mon 02 Jan 2023 09:44:49 +0000
ROA not before: Mon 02 Jan 2023 09:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 185.93.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:91:06:4b:9c:ca:6b:4e:e4:00:f3:df:35:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d6969bef487e514022aa19fb0e982d1ca2d2ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:16:a4:36:69:de:3a:ff:d0:90:ab:e8:eb:
5d:75:f4:b2:d1:b4:32:d2:c4:73:39:69:d6:d7:32:
db:4d:15:45:4c:20:5e:93:b7:f8:f7:bc:49:48:f7:
a7:ee:16:09:a9:23:4f:e5:bd:e8:2d:d6:54:48:19:
2d:1c:b7:3c:60:d5:f2:4a:33:cf:53:0d:f5:6f:85:
3f:37:f6:0f:93:20:2d:37:e7:31:e9:c1:1a:c9:94:
6f:a2:73:b1:6e:da:fe:0b:f8:e7:f0:10:83:31:2d:
77:dc:9f:3e:ea:ac:72:fc:5a:20:a3:b8:81:df:01:
f7:69:94:8a:4c:64:6b:66:b5:23:8f:9a:8b:bc:81:
93:61:25:b9:66:d9:55:f7:6a:bb:10:6a:51:62:b3:
96:26:9e:95:66:59:61:ad:90:b6:31:80:2a:d4:4e:
e8:7b:be:d3:93:55:38:bf:e5:18:57:56:00:12:31:
93:08:cf:52:b0:fa:a3:56:d2:33:25:2d:63:1c:c2:
70:f8:20:78:21:d9:08:05:57:d3:e6:19:af:64:0b:
5f:ce:10:c4:38:80:2c:f1:46:c9:e6:6e:9a:49:d8:
51:40:e6:36:e5:ab:1c:e6:7d:1e:27:6a:37:19:95:
71:53:59:60:e9:d7:44:f9:4b:9d:64:be:aa:3c:8e:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:69:69:BE:F4:87:E5:14:02:2A:A1:9F:B0:E9:82:D1:CA:2D:2E:BF
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LWlpvvSH5RQCKqGfsOmC0cotLr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ed:a8:29:a1:93:e1:e8:0b:65:49:63:cc:82:30:ee:e2:3b:
3b:fc:0c:94:51:5a:da:a1:8f:78:9a:55:9f:fb:ac:3b:2c:e5:
36:25:3c:86:5e:8d:8f:ff:73:25:9a:00:0b:4f:ab:e2:fc:c5:
57:24:9a:51:bb:13:d9:33:88:cd:b7:2d:4c:96:1a:9d:cf:c8:
a4:9f:e4:38:05:1f:c9:76:e1:3e:cb:c8:a1:76:c8:2e:8b:82:
6c:4d:22:b8:9a:12:9e:ca:2f:0c:70:4c:c2:02:8a:74:d5:b7:
e7:57:db:b6:6d:d9:95:35:3e:ee:80:8b:74:4e:16:b1:bc:e6:
98:5b:7c:fc:31:09:9e:20:1c:bf:ac:60:4b:41:84:7d:d6:af:
2b:bd:72:46:c9:4e:6f:e2:a1:73:1d:ae:b1:73:5b:ea:b4:47:
72:87:bc:e3:eb:99:5e:ac:01:a6:56:55:23:9d:f5:06:6f:16:
6a:6c:40:ff:0a:cf:36:a8:ba:fc:6a:c2:87:77:c7:9d:97:a1:
8d:f3:ab:1b:00:1a:7f:5f:58:52:5f:6d:fc:d9:25:ac:94:10:
ff:ed:31:f3:ab:a4:cc:5f:65:7f:4e:d3:fa:78:16:d1:7e:c8:
27:7c:11:f6:95:43:49:3e:c2:f6:33:95:63:c7:0c:2c:01:8a:
c3:fb:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:40 2025 by rpki-client