Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/lM34tUpj9pjlT-_u4mYCQVRVfN0.roa
File: lM34tUpj9pjlT-_u4mYCQVRVfN0.roa (raw, json)
Hash identifier: /spwVctCu8FMEkLVZOtpXcgHQlyjVGrCS+s0HNsd8/o=
Subject key identifier: 94:CD:F8:B5:4A:63:F6:98:E5:4F:EF:EE:E2:66:02:41:54:55:7C:DD
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01941CF3105C48C1FC9482D3A449745C455D
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/lM34tUpj9pjlT-_u4mYCQVRVfN0.roa
Signing time: Tue 31 Dec 2024 13:41:18 +0000
ROA not before: Tue 31 Dec 2024 13:41:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 213.137.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:f3:10:5c:48:c1:fc:94:82:d3:a4:49:74:5c:45:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Dec 31 13:41:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94cdf8b54a63f698e54fefeee266024154557cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:5f:90:67:aa:cf:4c:80:0a:2a:67:3e:80:
3b:b9:16:8c:18:5f:3d:6e:24:cd:1c:1e:bb:ba:77:
b3:57:45:b2:bd:bb:4a:43:8d:e2:8a:2d:19:13:04:
e7:31:c7:a3:31:a2:05:39:87:f9:a7:8d:27:74:01:
d2:dd:29:dc:5f:17:ef:57:d1:bc:a9:8f:95:ef:a2:
d1:06:c6:a8:26:2e:dc:67:9d:9f:1e:b4:34:d3:22:
1c:51:4e:e8:73:5d:01:e5:68:4b:b2:13:15:3a:46:
6e:fe:50:63:0b:1c:30:c2:99:45:03:9f:9e:36:f0:
e8:d6:86:22:0f:de:b1:70:05:c3:28:0a:19:06:ab:
7d:1c:06:1b:cb:e8:fa:54:95:32:7b:75:3c:92:55:
95:41:22:b4:ce:a0:8f:b1:65:b1:8f:87:c5:be:cd:
b3:94:26:ea:f6:23:55:d0:7c:72:32:96:1e:53:c9:
fe:82:c2:f0:9d:c0:3d:28:70:87:26:4b:85:f9:5c:
d7:ee:8e:20:ae:06:89:7a:48:8c:28:3b:1c:85:a9:
2a:35:74:88:7e:53:5d:9d:98:dd:19:f2:ce:f2:53:
28:2a:06:b0:34:0a:3e:e3:56:4a:ca:be:1c:71:90:
b0:c6:c3:74:f2:77:77:78:f2:a3:3d:67:d4:cf:69:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CD:F8:B5:4A:63:F6:98:E5:4F:EF:EE:E2:66:02:41:54:55:7C:DD
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/lM34tUpj9pjlT-_u4mYCQVRVfN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:83:7c:6c:b4:c2:68:dc:d9:58:72:58:83:c5:88:98:99:69:
85:02:03:49:10:3c:ce:48:2c:fd:d0:90:87:02:a0:5b:6d:69:
fe:1c:cc:5c:f8:bc:1d:6d:ee:04:1b:c1:49:e1:88:7a:cd:5d:
a8:29:0a:5b:5c:60:21:71:44:53:da:37:dc:c8:d5:96:93:db:
76:41:25:76:16:67:11:70:9c:3a:bb:5c:3a:08:cc:d6:33:5e:
2b:b6:29:bc:4c:1b:fe:d3:1a:35:11:52:e1:54:13:df:5b:80:
30:5c:51:09:7a:da:1d:fc:fb:7c:69:4d:58:8b:66:ff:30:c7:
e5:21:e7:8e:ee:29:30:b8:0e:2e:49:34:0d:7c:d6:fe:cc:a3:
5a:31:1f:8f:8e:06:8e:30:0a:1a:eb:59:6e:0b:5c:76:d6:00:
7b:e9:a6:b5:b9:83:d8:88:d8:82:82:44:1e:73:d3:f0:17:e0:
49:f4:69:f3:28:89:22:14:20:eb:28:57:29:35:e9:44:f0:e9:
27:4d:f4:e7:b4:b8:4f:b9:8b:68:1d:f9:53:93:87:a5:58:cf:
46:7a:7a:ee:de:2c:e2:7b:6e:53:35:31:fe:33:1d:b1:a1:c0:
c0:a2:82:30:ad:18:e8:22:ed:91:d9:ea:aa:e9:80:fb:38:e7:
b0:56:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:54 2025 by rpki-client