Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lz-KkeOzILqENRroyDbKzrSx5Vs.roa
File: lz-KkeOzILqENRroyDbKzrSx5Vs.roa (raw, json)
Hash identifier: NCge8fbvwlR2Do+AsNuMgnjdsfoct9bd0cNzMfltBR0=
Subject key identifier: 97:3F:8A:91:E3:B3:20:BA:84:35:1A:E8:C8:36:CA:CE:B4:B1:E5:5B
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C01912AE1BF1BC0C88865E483E22
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lz-KkeOzILqENRroyDbKzrSx5Vs.roa
Signing time: Mon 02 Jan 2023 05:25:04 +0000
ROA not before: Mon 02 Jan 2023 05:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204412
IP address blocks: 195.136.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c0:19:12:ae:1b:f1:bc:0c:88:86:5e:48:3e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=973f8a91e3b320ba84351ae8c836caceb4b1e55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:cd:64:d6:71:78:4b:f0:70:fd:58:fa:8a:
f5:4d:8e:c7:c1:58:b9:c1:81:32:65:46:28:fa:14:
db:44:e3:55:19:3c:c5:53:0b:86:68:83:0c:af:9b:
50:c2:cb:75:3d:21:57:8d:54:a5:d4:d9:3f:d5:d5:
80:74:da:83:3f:68:e3:78:9d:d2:f3:06:36:d4:ce:
a3:fc:cf:1d:ac:6f:85:05:7c:28:a2:c9:1e:70:09:
77:63:4e:d6:ad:5b:2d:e4:5c:ac:a8:3a:5d:e3:fe:
3d:51:f9:e2:44:58:d7:54:78:0b:e7:68:e5:18:3a:
d7:1b:06:1f:0a:83:5a:ff:68:2e:4a:f7:76:a5:6d:
80:67:25:98:b7:2a:67:d2:9a:28:45:6e:8e:6b:19:
56:56:07:97:c0:56:ca:60:a9:d9:d2:a4:b3:10:3a:
48:2d:25:dc:80:60:f5:dd:9a:40:76:78:0f:11:33:
c9:b7:ed:1e:a7:e6:af:90:d7:ec:34:2a:32:81:55:
f0:d3:29:b7:d8:b1:92:fa:aa:e1:31:6e:d5:25:64:
d5:8e:2e:7f:9d:a4:28:b0:c8:72:fc:1e:0a:ad:ab:
f6:70:13:6e:46:9e:30:dc:0d:76:80:a1:71:d1:bc:
ec:73:da:b8:3f:23:ef:c9:df:e2:ab:ba:75:e9:87:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3F:8A:91:E3:B3:20:BA:84:35:1A:E8:C8:36:CA:CE:B4:B1:E5:5B
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lz-KkeOzILqENRroyDbKzrSx5Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3b:71:4f:5f:46:f5:59:8d:85:67:b9:11:62:f7:7c:9b:bc:
8e:9c:f8:36:2a:a7:63:b7:cc:61:b0:a0:8b:99:4f:c2:f8:d2:
49:15:d3:e1:42:91:41:7c:af:04:09:8f:3e:e6:2b:85:e9:69:
93:48:84:f6:93:92:8d:44:c6:1e:bc:39:33:8d:7c:31:30:50:
f9:ab:19:4d:85:4a:58:b1:fa:c8:41:fa:d5:e9:de:20:6a:7f:
c8:cb:7e:06:0c:6c:14:3a:fb:d4:8e:8a:d2:4a:16:07:fe:b5:
7a:12:24:98:6a:27:cc:29:7d:09:8f:ac:c3:9d:76:76:9d:e5:
92:e6:eb:b8:bb:76:c3:9f:2d:f1:de:b5:27:c3:42:ca:29:96:
6b:ec:56:a1:b4:73:33:d5:ef:f2:74:cf:27:cf:c6:30:dc:ba:
53:fd:81:49:93:99:e0:89:40:5f:08:38:d7:fd:00:a6:a9:d1:
31:65:14:8e:9d:aa:2b:1f:07:59:55:23:47:79:f2:82:6c:56:
d8:5e:a2:9f:9c:67:83:e5:68:17:16:6e:fa:83:56:8e:83:2e:
3a:c8:f1:49:ec:bd:cb:d7:f6:c4:be:64:00:e5:7b:da:67:be:
8f:05:e9:7d:b2:4f:01:93:7d:28:df:a1:d6:3b:e7:be:e2:3e:
04:ac:e8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:39 2025 by rpki-client