Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/lR0iRNC3l-fVJZ8JyaTp5MQTqmM.roa
File: lR0iRNC3l-fVJZ8JyaTp5MQTqmM.roa (raw, json)
Hash identifier: xHev34oc7VKyAVjBNum2K3Am5g5WOje1CqMSsfuo5IY=
Subject key identifier: 95:1D:22:44:D0:B7:97:E7:D5:25:9F:09:C9:A4:E9:E4:C4:13:AA:63
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019566F2D0EB922F8F4D77C6454F713E107D
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/lR0iRNC3l-fVJZ8JyaTp5MQTqmM.roa
Signing time: Wed 05 Mar 2025 15:35:43 +0000
ROA not before: Wed 05 Mar 2025 15:35:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 194.93.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:f2:d0:eb:92:2f:8f:4d:77:c6:45:4f:71:3e:10:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Mar 5 15:35:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=951d2244d0b797e7d5259f09c9a4e9e4c413aa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:ed:fa:e1:cd:39:2f:3b:24:5f:d5:ea:76:
36:fb:a5:b5:16:ba:bf:1b:8e:87:fc:14:dd:dd:f7:
cd:f6:23:81:6f:28:50:7d:ed:e5:0e:fb:6c:45:58:
ce:30:69:cb:29:5b:47:86:82:e8:33:6b:b3:f5:11:
98:31:af:fa:fd:80:b8:37:3f:1b:03:48:4e:24:11:
25:f9:72:5b:47:78:41:f6:0d:66:78:96:a2:9d:1c:
a8:97:8e:93:20:2f:f9:71:ef:96:9b:72:ca:26:11:
3e:66:f2:b4:31:35:a9:63:cc:ba:c0:f5:3b:05:a1:
8c:cc:2e:96:a3:b4:7f:0d:05:2b:d7:ea:5d:e6:1c:
91:09:de:32:4e:88:a3:35:aa:9d:1e:0b:84:85:08:
3b:8f:23:56:a3:88:1e:4f:a0:12:59:b4:dc:d1:de:
69:3e:6f:e9:de:b4:42:e8:53:4d:78:4e:28:75:7a:
b4:44:31:ef:51:ec:21:bb:6a:fe:0c:20:36:fd:2e:
f8:6d:de:41:ef:81:82:c1:fc:cf:40:c5:af:bf:8b:
2a:9c:c6:d5:28:31:1c:ba:18:68:ea:32:80:30:6b:
49:5c:d6:df:a3:20:91:c0:97:71:82:1c:33:7c:53:
7c:72:61:81:39:5e:26:ec:6e:87:a0:b1:c0:33:33:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:22:44:D0:B7:97:E7:D5:25:9F:09:C9:A4:E9:E4:C4:13:AA:63
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/lR0iRNC3l-fVJZ8JyaTp5MQTqmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.58.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d2:6a:b4:80:2b:6a:6c:f8:5f:70:8a:01:2c:af:73:71:32:
8d:95:d2:fb:f2:05:28:97:b7:46:66:7d:6f:20:2d:29:50:c1:
74:49:2c:3a:19:7f:2a:a0:b1:b6:1f:48:ee:32:19:1e:80:72:
b6:16:94:a6:86:08:a1:21:8a:47:ae:8d:f0:38:ac:45:12:98:
94:b9:01:5a:0f:f6:fe:1a:90:05:89:13:0d:ce:42:9b:4a:6b:
6c:51:36:f0:ba:0b:45:81:a9:e7:36:23:93:eb:cb:fa:e9:3f:
b7:95:9e:3c:a1:e2:bb:2f:ca:32:b1:40:f2:13:20:8f:a8:34:
69:37:2b:cf:b8:d5:07:c0:2e:4d:2f:ff:e4:43:a0:0d:2c:ac:
4d:30:c2:01:d1:76:6f:5b:1c:06:be:d4:27:bb:b0:1e:c1:42:
40:83:87:59:90:93:67:0b:52:56:d3:74:c7:98:a0:53:23:ae:
61:89:c6:9e:3c:dc:88:c7:c2:ba:5e:1f:5c:f4:5f:d8:31:5c:
24:b4:de:33:22:c7:9a:c5:af:92:de:5b:45:0a:58:93:99:3a:
24:77:9b:ab:63:fa:a8:7d:14:ed:32:e3:b9:8c:ea:1f:5f:5a:
6c:b6:9b:31:2c:f1:43:0f:8a:aa:ab:ee:70:40:79:0e:00:31:
2b:e3:ee:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:02:11 2025 by rpki-client