Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/4LquHY9Bu-OkQD8GjroRfe_XAsI.roa
File: 4LquHY9Bu-OkQD8GjroRfe_XAsI.roa (raw, json)
Hash identifier: L2vUbQ56dOKq9/52zrvc5PNYovggduZuNUb5aQFUS1s=
Subject key identifier: E0:BA:AE:1D:8F:41:BB:E3:A4:40:3F:06:8E:BA:11:7D:EF:D7:02:C2
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 0192234A83AABD22F7D4A7DCA8B5726E3CA0
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/4LquHY9Bu-OkQD8GjroRfe_XAsI.roa
Signing time: Tue 24 Sep 2024 09:08:58 +0000
ROA not before: Tue 24 Sep 2024 09:08:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47295
IP address blocks: 93.90.128.0/20 maxlen: 20
194.48.144.0/22 maxlen: 32
2a03:2400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:4a:83:aa:bd:22:f7:d4:a7:dc:a8:b5:72:6e:3c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Sep 24 09:08:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0baae1d8f41bbe3a4403f068eba117defd702c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:58:38:18:4f:e7:7d:e8:7b:8c:98:76:9d:
85:81:53:1f:ce:7a:a6:fc:3f:64:67:8e:5e:f0:60:
6a:8c:8d:b7:6a:69:7b:73:4c:b7:1b:49:50:f4:72:
1d:e0:a6:3b:74:22:a2:d5:61:33:e4:b6:55:ee:3e:
a8:11:47:75:a4:fe:a9:05:94:14:7c:ae:e7:df:a9:
50:e9:c9:a5:2b:ce:8c:e0:e4:17:ba:eb:90:23:d8:
ab:7c:a2:a1:91:22:fc:a7:a4:f0:3b:df:5b:2d:c4:
a8:25:f2:da:eb:57:b3:9b:82:bc:0e:d5:f8:33:d9:
83:31:76:87:a1:20:f0:d8:e6:08:df:69:0b:ea:a7:
c1:08:77:91:d2:7d:e8:1a:af:2a:10:5a:56:80:c8:
d2:fa:37:7b:9f:31:50:f2:46:e0:d3:2f:19:ea:68:
8b:e6:3b:69:e0:a7:c1:1f:7e:11:05:5e:35:3c:29:
fa:4a:2c:b9:11:65:90:20:5f:bf:3e:3b:17:a7:ad:
29:50:2c:45:13:86:3f:4b:f7:2b:0b:00:30:e4:2b:
b3:7b:c6:0d:ec:eb:f7:d3:53:ac:48:4c:2e:0c:21:
d2:7c:f1:8a:76:82:e2:10:6a:f7:4f:6e:8a:73:36:
38:8d:69:23:4f:bb:ab:02:4e:46:33:65:6a:de:00:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BA:AE:1D:8F:41:BB:E3:A4:40:3F:06:8E:BA:11:7D:EF:D7:02:C2
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/4LquHY9Bu-OkQD8GjroRfe_XAsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.128.0/20
194.48.144.0/22
IPv6:
2a03:2400::/29
Signature Algorithm: sha256WithRSAEncryption
8c:04:91:52:51:2b:cf:3c:67:31:a4:21:f2:6f:5c:30:d9:55:
95:78:fd:0c:6f:bb:f3:ec:ca:84:d7:dc:c3:ae:17:35:c3:0b:
6f:4f:ce:a7:52:c2:0b:db:5b:af:c3:b2:88:02:65:45:37:ca:
fb:d2:38:ea:7c:fd:3b:3d:9c:43:76:9e:ea:53:5d:57:3f:b7:
7e:90:b1:6d:9b:1a:61:f2:42:92:c2:75:21:a1:62:4d:46:41:
0b:3e:8d:7f:63:37:8a:df:30:bc:54:dd:91:96:8d:62:b7:95:
04:9f:c3:85:48:6c:9a:f0:ba:d3:9d:70:15:af:ea:4c:56:57:
eb:73:6a:4b:e0:16:7e:7c:9c:a7:a6:36:ed:61:76:5c:ac:37:
46:87:c4:41:06:79:d6:86:8e:af:0f:ea:49:e9:83:49:de:d1:
13:6b:2a:f0:cd:de:7d:8f:6e:88:10:d6:34:c1:18:cb:59:2a:
18:6d:4b:f1:db:7a:84:80:9b:68:2a:92:c1:d8:b0:82:d3:b0:
98:49:da:91:b8:a2:92:8d:71:14:d1:06:1d:08:c6:d9:f6:42:
07:ec:91:2d:35:ce:65:81:5a:cc:49:c0:ff:97:9b:7b:1b:1f:
a5:f0:af:42:e3:38:a3:0b:ef:34:64:83:d8:26:0d:76:fb:72:
08:a3:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:01 2025 by rpki-client