Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/LrmDMnoLV-3So3KUfZyjmS3Vq2s.roa
File: LrmDMnoLV-3So3KUfZyjmS3Vq2s.roa (raw, json)
Hash identifier: a2UmbqK20CX9JVDbOFrAaAd6YNr7p0Ap+yEXlE8quTA=
Subject key identifier: 2E:B9:83:32:7A:0B:57:ED:D2:A3:72:94:7D:9C:A3:99:2D:D5:AB:6B
Certificate issuer: /CN=dd8f49c733880ae8fa1d322614bc5ed3fd0f5ac3
Certificate serial: 01856CAF0B4645040EBDE44902DEBE37EBC6
Authority key identifier: DD:8F:49:C7:33:88:0A:E8:FA:1D:32:26:14:BC:5E:D3:FD:0F:5A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Y9JxzOICuj6HTImFLxe0_0PWsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/LrmDMnoLV-3So3KUfZyjmS3Vq2s.roa
Signing time: Sun 01 Jan 2023 09:34:49 +0000
ROA not before: Sun 01 Jan 2023 09:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209235
IP address blocks: 212.18.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:0b:46:45:04:0e:bd:e4:49:02:de:be:37:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8f49c733880ae8fa1d322614bc5ed3fd0f5ac3
Validity
Not Before: Jan 1 09:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eb983327a0b57edd2a372947d9ca3992dd5ab6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:16:51:82:3e:1e:ca:6e:e3:cc:f3:86:84:b5:
63:29:28:d0:d6:34:c8:9b:2a:58:16:f2:d5:a8:a3:
49:2e:16:89:b5:53:5c:a5:2a:be:df:7d:d9:85:52:
dc:b1:0c:1e:0c:71:cb:62:96:e0:97:97:f6:1d:2a:
a2:2f:e0:c6:aa:61:0a:8f:60:df:31:79:00:4f:1f:
25:a9:ab:61:0a:91:eb:3f:3e:10:f7:96:fb:bd:46:
b2:b8:91:c5:73:98:c1:71:33:f6:5d:94:bd:00:9e:
43:cc:c0:dd:a9:95:6f:5e:87:aa:53:77:f3:f4:6b:
0f:75:fd:b8:c0:fa:a2:f2:08:78:d5:d6:b9:7d:57:
96:7e:58:8d:fe:f7:35:27:cb:e8:79:c3:f3:99:21:
e2:09:03:c8:25:32:a2:5c:bc:af:6b:cd:90:98:68:
5e:38:c9:ce:24:28:98:0a:08:93:47:85:90:df:73:
f1:27:92:15:06:bd:ba:49:d8:b4:49:d3:dd:09:22:
a6:fa:dc:1a:4f:7a:aa:1b:5a:7c:84:13:15:78:81:
f1:54:92:3a:81:73:e7:06:ca:09:bb:76:26:2e:24:
72:a2:a8:5e:af:aa:16:12:62:ac:b7:4b:c9:ed:8e:
27:bc:12:a7:d8:02:06:cb:f5:a0:62:19:77:66:c4:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:83:32:7A:0B:57:ED:D2:A3:72:94:7D:9C:A3:99:2D:D5:AB:6B
X509v3 Authority Key Identifier:
keyid:DD:8F:49:C7:33:88:0A:E8:FA:1D:32:26:14:BC:5E:D3:FD:0F:5A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Y9JxzOICuj6HTImFLxe0_0PWsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/LrmDMnoLV-3So3KUfZyjmS3Vq2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cb82f3-d57b-41df-b19d-978c76314af6/1/3Y9JxzOICuj6HTImFLxe0_0PWsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:38:bd:d6:06:38:3d:6a:a4:00:a5:72:60:4c:37:1f:21:c1:
fd:cd:8a:75:46:1b:23:b9:b3:e0:b1:15:ac:bc:5d:55:d3:55:
a9:01:ee:23:3b:2b:e0:6d:ef:12:3e:bd:1c:02:7d:73:01:d4:
31:63:f3:1e:99:a0:6d:f6:c7:ec:4b:d5:3d:c0:82:6e:04:ea:
bc:54:65:40:9b:97:c0:db:04:d8:de:24:9b:8a:24:36:9b:5d:
08:26:4f:15:da:19:45:4b:dc:84:47:1f:f0:ac:02:84:81:a2:
bb:a8:c2:03:ef:88:a1:f0:6f:69:56:47:b2:2d:3e:07:49:5f:
b7:3c:dc:fc:a2:dd:02:23:90:eb:15:6d:1f:79:18:c5:ed:37:
a2:e0:a2:83:4c:09:9b:c6:17:13:08:02:6e:9a:f6:81:11:96:
00:d2:3a:b9:2d:79:6b:67:3f:b2:f6:96:c6:d8:a2:7e:cf:d5:
8f:2e:38:f1:e0:d6:a8:ed:1a:52:73:77:4c:6a:26:92:71:20:
99:6d:d1:88:60:9d:dd:c9:bb:6d:c0:a2:a6:07:3b:63:8e:ce:
02:7f:17:80:4c:35:99:2f:92:b5:9d:e6:2e:e4:fd:6d:dc:22:
b9:79:f4:90:60:e7:fe:69:79:60:b4:4a:1c:51:99:c9:ee:85:
e3:19:f4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:29 2025 by rpki-client