Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/lfrxyQ19SAsFQTAfxpfODgpBEcI.roa
File: lfrxyQ19SAsFQTAfxpfODgpBEcI.roa (raw, json)
Hash identifier: tP1SfZ2YWGRxGZi2YvnE8mG56aRx0qKrWtbY178n7wM=
Subject key identifier: 95:FA:F1:C9:0D:7D:48:0B:05:41:30:1F:C6:97:CE:0E:0A:41:11:C2
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 019425FCBE368255090D3BCB6053AA9706A7
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/lfrxyQ19SAsFQTAfxpfODgpBEcI.roa
Signing time: Thu 02 Jan 2025 07:48:28 +0000
ROA not before: Thu 02 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.39.100.0/24 maxlen: 24
193.39.101.0/24 maxlen: 24
193.39.102.0/24 maxlen: 24
193.39.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:be:36:82:55:09:0d:3b:cb:60:53:aa:97:06:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Jan 2 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95faf1c90d7d480b0541301fc697ce0e0a4111c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:a9:70:62:8e:cc:5b:77:2f:ea:6b:e1:50:
57:1f:c6:bc:c1:58:50:16:2d:61:cd:6a:80:2f:45:
cb:31:78:56:57:98:35:69:45:65:9a:cc:ce:68:25:
a3:27:99:9c:0a:c9:0f:6d:38:45:63:04:53:b6:c0:
cc:12:98:4e:92:d2:9f:e5:dd:a0:65:d1:d3:b5:4f:
d7:40:ec:97:89:98:68:07:c3:d8:b5:40:98:0c:a1:
6a:e4:5a:ed:8b:9d:07:7c:e0:39:7e:ac:6b:2e:d3:
70:e5:1c:8e:a7:ec:ac:05:70:c9:04:8e:e3:9f:6e:
7f:f0:04:16:66:54:08:9f:4c:ae:5e:14:30:7b:19:
ba:96:fd:48:d7:8b:6a:20:d9:07:c9:5f:dd:a2:5b:
22:31:37:e8:9c:29:99:69:37:d9:2f:e6:47:c3:a5:
f5:0a:6a:5e:c1:a8:a2:8c:83:02:dc:ff:3c:dc:e6:
34:0b:20:95:ed:e5:2e:e6:a1:54:98:ff:2c:bb:d3:
09:25:08:43:fa:99:8f:a8:4d:01:79:2c:95:16:b9:
88:ed:bc:dd:26:b1:6b:c2:22:26:da:1d:e2:80:9f:
65:95:d1:58:c1:60:aa:d6:5f:3c:d3:02:78:b6:57:
9b:58:6b:f4:58:78:85:45:75:87:e6:04:5a:d8:e1:
45:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FA:F1:C9:0D:7D:48:0B:05:41:30:1F:C6:97:CE:0E:0A:41:11:C2
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/lfrxyQ19SAsFQTAfxpfODgpBEcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:a5:77:54:af:33:25:cf:11:ae:8d:60:6e:7d:83:78:b6:90:
08:40:9b:f2:8a:29:39:10:d7:b1:f3:9a:b8:19:f3:99:bf:ee:
d5:7c:8c:60:69:5d:9f:ff:8e:f9:64:9e:55:2e:eb:2b:7c:be:
f2:c0:fb:4a:ab:3f:dd:21:ee:61:74:41:9c:3a:42:7d:eb:73:
e9:a7:9b:3a:74:c6:df:01:c5:0b:df:10:72:16:52:83:92:79:
01:53:d5:05:59:08:d1:68:c1:97:da:41:6e:51:f7:8e:9f:83:
67:9f:4f:aa:b7:0c:92:dd:1c:79:bd:82:2e:34:17:fd:23:0d:
78:4a:db:de:90:ec:d7:10:b6:89:fd:45:75:ef:58:c0:e5:66:
9b:60:1c:0b:0b:db:ac:a1:c3:77:80:ae:f0:ab:48:67:92:ab:
0d:64:ad:ea:2b:76:a2:66:b9:03:95:ab:4b:80:b8:db:c6:f6:
3f:a3:4b:c2:26:af:75:e2:d2:1d:dc:99:ff:a1:30:5a:be:b0:
6d:bb:8a:22:1e:92:03:3a:e6:5d:5b:a3:90:f5:06:c1:d0:c4:
67:80:f9:c5:2d:c7:0c:7d:f9:c0:b7:21:f9:1a:ff:5f:99:f5:
18:bf:16:f9:d3:eb:df:03:63:66:f7:c3:94:80:8e:90:a1:d2:
56:f2:e1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:17 2025 by rpki-client