Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/LAf6z2y7d_FvHWa2exDFEGsDUYk.roa
File: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (raw, json)
Hash identifier: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=
Subject key identifier: 2C:07:FA:CF:6C:BB:77:F1:6F:1D:66:B6:7B:10:C5:10:6B:03:51:89
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 01941F8C51CF7E25A077F8DEF0E052391310
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/LAf6z2y7d_FvHWa2exDFEGsDUYk.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203735
IP address blocks: 94.231.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:51:cf:7e:25:a0:77:f8:de:f0:e0:52:39:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c07facf6cbb77f16f1d66b67b10c5106b035189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:90:35:72:ec:e7:7a:ff:6c:de:33:d9:d5:
05:ee:59:8d:47:ee:16:5a:b4:f6:cc:29:a3:1d:b5:
34:4a:1f:c3:01:3e:ab:b6:34:b1:b3:9c:3c:ae:c5:
bf:da:c1:4c:d7:60:89:c6:b0:e4:f9:ff:8b:8c:41:
d8:c4:85:25:04:f2:cc:cb:7a:c0:c7:01:24:36:f8:
d0:89:94:a3:42:2f:e7:c2:40:8c:a1:b0:b3:c4:31:
a2:fe:4e:14:c1:f5:f3:c6:07:ea:9f:46:1d:46:7b:
bb:6b:e3:6e:33:cf:bc:17:98:ac:67:d7:9d:75:28:
c5:9d:b4:8f:5d:84:f1:c5:7e:48:fc:55:27:a9:34:
46:50:3d:d8:82:c9:32:46:f5:9d:e3:02:ba:a0:21:
27:e7:97:a2:fe:50:f1:e3:17:18:a6:b4:c6:33:7b:
64:b2:ea:5e:8c:81:49:e2:37:b7:69:18:e0:3a:b1:
e0:ed:75:f3:db:fc:35:c2:fd:7a:06:3d:81:10:1a:
97:e5:22:22:19:4f:7e:bb:a3:81:09:e5:50:d8:6f:
c9:a5:2a:2c:7e:97:49:da:36:03:05:7b:8f:22:80:
30:18:19:0f:4c:fe:aa:47:af:90:df:b9:c8:5b:0f:
f1:21:fc:01:4b:8a:16:cc:14:dc:74:7f:f5:74:23:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:07:FA:CF:6C:BB:77:F1:6F:1D:66:B6:7B:10:C5:10:6B:03:51:89
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/LAf6z2y7d_FvHWa2exDFEGsDUYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.199.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5a:bd:44:ed:8d:c2:ef:e0:ff:b0:71:ba:37:f7:ec:1a:46:
0c:27:d3:38:3c:ad:1c:f4:95:30:f1:af:54:48:6e:59:e7:5b:
56:82:fb:e3:a8:2f:73:22:97:fa:50:b4:7a:6a:63:43:30:4c:
9a:86:e5:ef:5d:fa:3a:fc:1d:5d:45:00:e3:38:14:e6:d8:fa:
a9:98:68:07:b3:cf:b2:35:ef:82:c2:0d:d4:5f:5a:62:5e:81:
fc:7e:28:ae:e6:82:56:70:f6:59:ce:d5:0e:4a:be:02:18:71:
8e:0f:e0:66:50:f8:68:96:69:fa:4d:56:e1:2b:e2:91:1e:a4:
16:3d:2b:1a:1a:12:4a:35:ec:86:78:66:e8:de:5b:21:97:f3:
84:e3:20:43:ce:fb:bb:ad:2c:a6:99:7f:cc:87:fd:c1:53:26:
ea:e2:f4:83:f8:f5:87:97:1f:84:80:32:a0:32:48:4a:38:42:
0d:b2:d4:18:48:be:17:17:19:11:e9:56:a4:9f:d0:6e:16:c3:
72:84:da:45:dd:aa:33:a7:cc:b3:9e:f7:bd:01:36:4f:be:eb:
3d:c6:a0:1a:29:3d:ec:75:e8:87:05:ed:9c:e0:c6:15:57:05:
cb:1f:a3:b5:33:7d:58:74:77:b9:ad:bf:64:a2:d5:c9:48:fd:
aa:db:57:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:07 2025 by rpki-client