Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/lEhVQNOMvqw54edqH7zh3c7mW1U.roa
File: lEhVQNOMvqw54edqH7zh3c7mW1U.roa (raw, json)
Hash identifier: nQoP405LztBAkFL0e8Rma4sgogpaQEPhwJTWJogq2nE=
Subject key identifier: 94:48:55:40:D3:8C:BE:AC:39:E1:E7:6A:1F:BC:E1:DD:CE:E6:5B:55
Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial: 01941FFAB8760E90A889C3D8ED85A87F9111
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/lEhVQNOMvqw54edqH7zh3c7mW1U.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.72.144.0/24 maxlen: 24
193.72.145.0/24 maxlen: 24
193.72.146.0/24 maxlen: 24
193.73.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b8:76:0e:90:a8:89:c3:d8:ed:85:a8:7f:91:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94485540d38cbeac39e1e76a1fbce1ddcee65b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:96:17:d4:24:a3:1b:5b:32:00:77:fd:18:
cd:4f:a2:ce:30:0b:f3:eb:9b:db:e3:fc:fc:78:9a:
37:24:0b:2a:f6:73:39:ff:af:eb:8b:97:b5:4a:96:
b3:ea:fd:37:8c:db:30:9f:84:f9:e9:86:d7:39:2a:
c2:72:52:76:45:f9:84:21:75:99:2d:f5:b7:7a:7b:
33:9d:6c:ca:9c:f9:78:14:37:eb:1d:74:47:71:2c:
7a:78:c9:4b:34:81:db:62:33:de:12:9a:a1:99:d3:
b2:3d:b8:51:50:bb:a9:e6:d0:aa:cc:aa:62:1c:4d:
fc:80:f1:7d:1a:9e:13:2d:ad:ee:1c:4d:ee:36:bb:
75:d5:29:04:f3:d2:39:89:14:ce:25:b6:4e:0c:98:
25:e4:35:3c:12:82:ce:12:88:28:b9:04:37:71:32:
57:5b:a1:90:4d:d2:0c:7e:d3:91:ec:c4:04:b3:c6:
fe:e4:6b:25:22:28:55:67:76:85:dc:46:eb:99:25:
14:3f:82:40:e6:fb:53:99:18:d0:d0:21:92:94:24:
88:d3:65:47:7d:4f:41:da:dd:1e:e6:ff:29:2b:0f:
eb:f2:89:8f:7f:39:b4:4c:85:d1:9b:95:f7:81:2f:
c1:a5:7d:db:be:51:3e:87:e1:5d:59:68:5e:14:a9:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:48:55:40:D3:8C:BE:AC:39:E1:E7:6A:1F:BC:E1:DD:CE:E6:5B:55
X509v3 Authority Key Identifier:
keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/lEhVQNOMvqw54edqH7zh3c7mW1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.72.144.0-193.72.146.255
193.73.238.0/24
Signature Algorithm: sha256WithRSAEncryption
60:eb:b6:f1:60:4b:aa:06:bc:72:0e:77:a3:48:21:3a:1c:19:
93:37:12:f8:30:0e:51:8e:98:69:9d:99:fc:1e:af:f1:ea:6f:
45:9c:99:d4:60:a5:cf:fa:58:bf:d0:88:3a:fd:13:b6:d3:75:
f2:ef:74:fb:e2:f6:73:be:e1:6c:9b:7f:0e:13:0f:5c:bb:fa:
c5:e9:ab:07:f2:ce:65:bb:fc:1b:85:c4:58:51:49:42:aa:3d:
3c:e8:b6:af:b1:2d:fb:19:e3:2b:a8:7c:cf:5b:9b:7c:df:a0:
93:37:eb:a5:d8:4b:e1:47:3b:4f:85:34:9b:0a:3f:7b:58:90:
66:32:32:bd:1a:24:3c:66:87:0a:ac:52:e8:33:28:bf:32:25:
00:78:04:2e:ce:9c:e3:4e:f9:bc:bd:ba:9f:90:e6:c6:e6:2f:
3a:85:7e:7d:9a:dc:bd:50:ff:0e:07:88:c5:80:50:b7:e7:5c:
4c:a4:fb:e5:3f:66:24:9b:91:f3:be:db:6b:89:08:cf:07:98:
05:4c:64:2e:e9:73:f2:e8:9e:c6:6c:c8:1d:b9:42:dc:19:e5:
84:5b:a4:6e:f8:b8:84:ae:90:1b:47:eb:f2:ad:0d:42:16:fd:
05:c6:40:62:14:51:93:ed:8e:4e:98:39:d3:e7:29:73:0d:86:
6d:2e:38:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:17 2025 by rpki-client