Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/lCLEuhTXsjjMpbzOcaCN7wTy-es.roa
File: lCLEuhTXsjjMpbzOcaCN7wTy-es.roa (raw, json)
Hash identifier: ybQEKhZN7GJiDOCV0hRI/RfWbazgbDz9/mZPSzHghag=
Subject key identifier: 94:22:C4:BA:14:D7:B2:38:CC:A5:BC:CE:71:A0:8D:EF:04:F2:F9:EB
Certificate issuer: /CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
Certificate serial: 0185730397046DACCEF09C30090112D2EF17
Authority key identifier: BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/lCLEuhTXsjjMpbzOcaCN7wTy-es.roa
Signing time: Mon 02 Jan 2023 15:04:53 +0000
ROA not before: Mon 02 Jan 2023 15:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8236
IP address blocks: 195.244.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:97:04:6d:ac:ce:f0:9c:30:09:01:12:d2:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
Validity
Not Before: Jan 2 15:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9422c4ba14d7b238cca5bcce71a08def04f2f9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:f3:86:ff:e0:73:f5:b2:c4:0b:5b:0c:0d:
49:51:fd:82:62:79:46:92:9b:c9:c8:3b:e9:d1:f5:
4d:fa:f8:a2:60:a1:01:d8:5a:f5:8d:3c:e3:01:5e:
b3:6c:66:56:f5:7e:1b:ed:ad:1b:69:f6:05:0b:b6:
95:49:65:1c:22:95:52:24:48:4b:6f:50:88:89:19:
b5:6a:f5:86:ae:5e:1c:9a:af:b2:da:25:19:9a:fc:
71:57:39:1c:68:4e:07:3d:3a:4b:69:37:b6:52:06:
04:42:ab:e4:33:44:01:41:52:30:be:32:bf:51:25:
65:5e:70:e9:57:8c:97:67:bc:5f:3d:98:2d:dc:4c:
7b:b0:cf:bc:0a:6c:51:37:53:cd:f0:93:3c:68:a2:
9d:5d:80:0b:69:cf:c0:69:c7:37:3a:32:62:45:5a:
03:3e:ed:e9:fd:4e:a7:ce:e7:c5:84:83:20:35:fe:
3d:13:d4:80:88:8c:e6:15:e5:70:7b:b4:4e:d1:09:
ec:da:6c:fe:d4:8e:76:0e:55:0c:ee:8a:1c:fa:da:
e4:4b:9e:92:4a:81:d6:34:e0:9e:aa:ab:db:0e:8f:
32:7e:c7:05:59:d5:f0:7c:15:04:00:40:63:7f:76:
69:fd:92:a1:07:79:34:ae:d9:57:eb:38:96:4b:71:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:C4:BA:14:D7:B2:38:CC:A5:BC:CE:71:A0:8D:EF:04:F2:F9:EB
X509v3 Authority Key Identifier:
keyid:BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/lCLEuhTXsjjMpbzOcaCN7wTy-es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.80.0/21
Signature Algorithm: sha256WithRSAEncryption
34:f9:93:89:4a:26:16:e7:97:d2:db:4a:ab:0d:93:45:b4:2b:
33:09:ae:9b:cf:82:06:a2:38:b7:0c:c7:d3:7a:ab:43:a6:41:
bc:7e:e0:77:df:73:96:b5:ed:98:4c:1a:d2:d2:c0:20:05:13:
80:00:9d:68:66:36:32:66:a8:c6:6a:30:3b:ca:41:b6:fd:3d:
36:45:ec:b5:b4:e7:06:dc:9f:f6:3c:0d:08:c1:21:91:e5:d3:
67:79:93:70:49:b9:0b:d1:0f:eb:c0:34:b4:61:c5:e9:18:11:
ef:9c:45:4d:2b:27:de:67:9a:11:21:49:a4:87:2c:02:55:88:
d9:1e:01:1d:ec:44:13:be:af:83:74:2b:a7:fb:d6:c6:ad:43:
2c:75:e9:a4:9a:ee:8c:bc:86:0d:ec:73:7a:23:7b:a6:7e:6f:
e8:37:52:77:a2:4b:05:1d:a5:02:05:2b:ee:a7:68:1d:c1:1c:
84:fc:5b:15:9f:5f:8e:d9:84:3d:64:3c:eb:25:2b:9d:e9:fc:
53:18:8c:54:91:ff:fe:b7:34:12:63:f9:1a:41:66:dc:07:f8:
b6:92:84:b5:ce:44:6e:1b:81:f9:f7:3c:57:30:84:be:38:d4:
1d:8f:7b:c1:20:dc:ad:b9:ff:ab:f0:61:06:dc:b7:76:4f:ea:
12:ad:1b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:13 2025 by rpki-client