Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/lauLTK6HRr7436pAd14mrAaE3vU.roa
File: lauLTK6HRr7436pAd14mrAaE3vU.roa (raw, json)
Hash identifier: ahn5yKzybexoFBgNe3W5HKkjK7F19TopqaCzFWkZQgs=
Subject key identifier: 95:AB:8B:4C:AE:87:46:BE:F8:DF:AA:40:77:5E:26:AC:06:84:DE:F5
Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial: 0194214416D160D420F0FC0B6E5306EDFCB3
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/lauLTK6HRr7436pAd14mrAaE3vU.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35163
IP address blocks: 193.17.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:16:d1:60:d4:20:f0:fc:0b:6e:53:06:ed:fc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95ab8b4cae8746bef8dfaa40775e26ac0684def5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:36:fb:33:53:d3:f3:a6:e4:80:95:a9:94:
01:6e:36:43:87:77:aa:4d:8c:5a:d4:c4:f2:ce:d2:
68:c1:47:2d:ec:09:be:e8:aa:cc:43:00:01:2c:72:
1e:bd:02:8a:d1:ae:5e:62:81:95:10:4c:57:84:80:
75:f0:51:1c:46:ee:30:b6:54:80:23:9a:05:4e:0a:
0b:88:a5:85:dd:ae:6e:07:cc:4b:52:57:3b:20:67:
15:2f:a8:e9:65:7a:01:50:b8:2d:57:b7:c5:36:70:
c9:f1:e2:88:64:10:71:a1:70:4b:77:c1:ac:4e:14:
19:f5:f9:2b:40:71:29:6e:1d:d9:42:d6:b8:66:64:
22:9f:85:73:53:b6:01:2d:e6:71:5b:68:35:db:59:
db:04:eb:6d:29:d4:8d:79:08:e0:09:68:15:ec:4f:
41:9a:e5:91:88:59:66:f6:64:60:d7:86:9f:1f:d7:
f9:6d:20:b5:19:2f:5b:e7:8c:ce:c6:c0:37:5e:4c:
fe:83:a3:46:a0:6e:a7:d2:a7:28:fe:f9:8f:ed:10:
1c:b3:a2:6f:28:d0:c3:0b:9f:44:7f:66:1d:e4:f2:
39:de:bd:05:e1:ed:1a:40:30:3f:ba:b5:a0:3f:7a:
78:9e:bd:ef:df:08:a9:24:39:f1:f5:31:59:d0:4f:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AB:8B:4C:AE:87:46:BE:F8:DF:AA:40:77:5E:26:AC:06:84:DE:F5
X509v3 Authority Key Identifier:
keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/lauLTK6HRr7436pAd14mrAaE3vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.96.0/21
Signature Algorithm: sha256WithRSAEncryption
95:a4:c1:e3:77:92:c8:9e:c3:ae:97:13:e8:ac:2f:48:52:35:
cb:37:64:82:71:0a:aa:0b:ec:05:28:d7:1c:70:a4:ad:94:89:
f9:1b:be:a5:c3:a8:e7:fd:93:6b:40:98:a7:ae:b5:3d:e7:98:
a1:35:5d:8e:be:34:4b:c9:a8:b4:63:97:c8:da:01:94:97:30:
88:4d:c9:d3:6c:0a:37:f1:e4:05:51:a4:4b:ef:77:b0:98:e5:
02:00:d9:f8:bd:50:f3:24:7b:e9:c1:7a:b3:43:31:0c:2c:50:
d6:90:27:0b:4c:79:83:56:2a:7a:56:7b:bb:4a:a5:2e:22:44:
41:49:a1:ad:6a:4d:f6:b1:53:bd:fe:43:15:b3:8b:87:3e:c3:
82:bb:6c:67:1a:29:3f:95:81:ae:1a:90:06:1e:d2:0c:c7:7e:
04:cc:a5:c8:81:18:b0:27:38:48:0e:3e:ba:cd:f1:c2:6f:30:
9e:1a:2e:ea:82:29:18:a6:23:da:5e:1c:b3:dd:42:77:2f:f8:
ab:bb:05:59:af:5b:dd:d4:44:9b:49:c3:bf:83:44:ac:74:36:
b8:45:ca:64:1f:55:04:71:33:f1:6b:76:63:18:1d:ce:71:33:
77:29:0a:af:ba:0d:62:ef:d5:c3:6e:48:b8:ff:ae:d2:82:80:
6a:da:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:23 2025 by rpki-client