Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/LJm4ejx93tTGGSMSp9-CoJADCNU.roa
File: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (raw, json)
Hash identifier: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=
Subject key identifier: 2C:99:B8:7A:3C:7D:DE:D4:C6:19:23:12:A7:DF:82:A0:90:03:08:D5
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 019422FAEFD0642C74C803FD9A61FCDA21DF
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/LJm4ejx93tTGGSMSp9-CoJADCNU.roa
Signing time: Wed 01 Jan 2025 17:47:38 +0000
ROA not before: Wed 01 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202796
IP address blocks: 193.169.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ef:d0:64:2c:74:c8:03:fd:9a:61:fc:da:21:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Jan 1 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c99b87a3c7dded4c6192312a7df82a0900308d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:9c:df:49:ae:94:a4:e2:7c:75:02:d7:73:
dd:3c:5c:44:31:d9:c0:87:61:49:62:2e:49:07:89:
4d:0a:b3:12:c7:fb:5e:24:29:b1:27:b5:9b:22:e7:
a5:42:2a:ec:9e:25:de:41:5c:2f:db:99:d3:eb:3b:
7b:20:b4:40:ce:16:cf:f3:f3:34:83:4a:de:98:d9:
59:f2:ef:f5:c4:ef:5e:38:f3:b4:01:69:ce:2f:96:
80:49:3d:ee:ff:3b:46:12:37:1c:a6:93:af:3a:27:
13:f3:c4:32:e1:4e:4e:5c:33:46:04:69:25:58:03:
e4:88:df:c9:8d:b6:cb:ce:8e:01:22:6e:24:7a:23:
72:c7:77:52:82:6c:ee:15:f4:84:26:77:f2:bb:7d:
71:8f:df:da:04:a8:ae:c6:35:6f:26:7f:82:6f:0e:
8a:23:7c:97:92:67:db:85:99:1b:4b:91:85:c4:60:
63:b3:0a:c7:15:34:90:0e:a2:de:94:bd:4f:18:c0:
ba:09:cd:b0:40:08:59:f8:dc:06:b6:ef:f3:42:d2:
aa:5b:cd:dd:fe:45:63:c7:36:58:c0:c2:c3:2b:5b:
47:7d:9b:95:fa:4a:49:de:ec:4f:84:80:76:47:5a:
ac:81:79:8f:2c:7d:6f:ea:6e:86:16:e9:4f:d8:b4:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:99:B8:7A:3C:7D:DE:D4:C6:19:23:12:A7:DF:82:A0:90:03:08:D5
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/LJm4ejx93tTGGSMSp9-CoJADCNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5b:23:96:43:ac:ff:9b:5a:c5:6c:df:b3:60:ef:7e:0d:0b:
79:85:e9:b5:94:f8:f9:23:76:37:e6:e1:cb:14:f0:ba:3f:81:
2c:19:e7:f1:0e:8e:e0:1a:dc:60:31:c8:18:e7:f8:9c:d7:17:
0d:6b:87:fa:17:f0:6c:46:f6:15:6c:8f:83:de:6c:43:91:fb:
36:b6:1c:29:be:1f:23:9d:a8:3a:51:4c:ac:4c:f6:e9:cf:b1:
ca:60:44:17:55:41:b8:f1:e1:dd:46:15:53:0c:ac:89:0a:90:
2f:ca:ca:31:e8:90:f9:53:56:51:77:33:77:7b:33:35:9e:50:
f7:2f:41:47:1e:45:1a:b6:28:5a:87:f4:af:04:e5:22:7a:97:
bc:4f:4f:16:ec:b0:d2:21:05:8d:c6:8d:fe:c3:95:db:ea:18:
c2:76:62:f7:ff:aa:f9:0d:b4:62:9b:c4:5f:70:52:e7:e7:b5:
de:77:a4:56:a2:66:90:80:46:1f:e5:af:b6:11:21:88:3c:fc:
74:dd:5d:59:b2:b8:ee:a6:62:a9:9e:92:bf:89:00:7b:9b:e9:
fb:be:eb:3b:ac:82:9b:17:a1:a5:61:7f:3b:fe:06:a1:f2:02:
b5:2c:b7:5c:68:e2:81:b4:40:39:36:dc:6b:1c:be:64:59:47:
d7:89:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:52 2025 by rpki-client