Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LvTJcAhc_pFhh2eZYYVXTXFWLTM.roa
File: LvTJcAhc_pFhh2eZYYVXTXFWLTM.roa (raw, json)
Hash identifier: vr/56E7TghWtHzcjARvE/B+xTbUDU16VSnM5bwcr4DI=
Subject key identifier: 2E:F4:C9:70:08:5C:FE:91:61:87:67:99:61:85:57:4D:71:56:2D:33
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2847B99F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LvTJcAhc_pFhh2eZYYVXTXFWLTM.roa
Signing time: Sat 01 Jan 2022 16:10:00 +0000
ROA not before: Sat 01 Jan 2022 16:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208876
IP address blocks: 93.171.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675789215 (0x2847b99f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ef4c970085cfe91618767996185574d71562d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2f:87:93:2f:dc:0e:fe:0f:8b:d5:8b:ef:1a:
bc:73:fc:e3:25:ee:95:44:e5:b6:ad:f9:05:71:a0:
a4:15:54:fc:a1:e7:99:c1:77:3d:6d:ea:bb:4d:be:
ea:19:89:ac:f1:44:54:55:26:2e:95:fd:12:08:fa:
f7:f3:f3:08:31:90:a3:5c:60:49:3b:32:a8:6c:db:
f4:22:f3:4d:2c:f0:79:f0:a4:bd:be:a7:19:10:1f:
ba:ec:80:5e:66:ee:9c:3f:39:f9:a9:dc:28:ff:0e:
c3:40:0f:21:a3:65:e1:46:64:a5:90:a8:95:38:38:
14:ca:1c:22:5f:fd:f9:41:8a:e6:f1:48:c3:07:e4:
dc:2c:be:82:06:27:49:9f:cf:2e:1f:67:76:46:67:
7e:e3:42:7f:5a:5c:59:cd:2b:30:a8:61:4b:55:7c:
45:95:fb:17:d7:b9:57:ca:c2:62:3b:3b:43:73:14:
ff:18:e9:77:b8:c6:b3:7a:2a:40:a9:2c:25:c0:fe:
44:f2:cd:45:84:64:1e:e6:3d:53:c8:57:a9:a8:a1:
f9:01:ae:cc:cf:02:53:1c:91:b3:62:b7:a8:de:62:
f5:ae:50:c4:1f:b0:ad:94:f9:c2:f0:b5:4c:74:20:
00:22:0d:c3:97:6c:eb:89:a7:ab:ad:62:a5:44:92:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:C9:70:08:5C:FE:91:61:87:67:99:61:85:57:4D:71:56:2D:33
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LvTJcAhc_pFhh2eZYYVXTXFWLTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:45:c2:44:05:3e:19:23:1e:8c:3b:05:9d:ed:c8:a2:90:49:
16:f4:ac:d6:81:2c:1f:1d:07:06:35:73:db:03:de:63:87:29:
c4:a5:c4:46:e9:b2:b0:76:41:c8:b5:9d:0c:e0:fa:dc:39:83:
5e:f7:e2:d2:b7:25:93:98:98:18:14:8e:76:3f:8a:c4:24:a8:
1a:57:7f:1b:d6:69:02:a2:ec:85:86:25:cb:e1:2b:6f:70:e1:
4d:3c:85:30:f4:5c:c1:ac:55:5f:16:ca:53:15:3d:27:83:7c:
55:3f:cd:b8:f2:fa:64:0d:27:6a:ac:cd:fa:71:da:6f:ca:5e:
2d:a2:76:aa:9f:c6:8e:97:7d:54:65:34:50:0c:c2:89:53:79:
f4:7c:84:f7:01:f3:88:b0:0a:28:4c:57:f9:68:18:d7:fb:9a:
4a:cf:80:2b:94:fb:3c:51:ec:7a:5b:ef:44:0c:0f:89:44:36:
0e:8c:93:c5:d5:6f:d8:a4:9f:eb:4e:29:1b:6c:d8:82:56:35:
c3:5b:b9:3b:f9:02:81:53:72:5e:17:69:9a:39:f8:89:94:36:
5f:65:c7:15:fa:c1:0d:6e:7e:4f:4a:e6:6e:c5:f7:b6:d6:3a:
28:1c:b4:98:c9:18:11:f5:b6:10:cd:57:37:b6:e0:53:64:05:
c3:6c:58:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:34 2025 by rpki-client