Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/LyL-vHk5nmQH5BUFL_MLxK_-CMg.roa
File: LyL-vHk5nmQH5BUFL_MLxK_-CMg.roa (raw, json)
Hash identifier: x/LQ85Ba6X1diSN88n/xPeBpJxAdwtrVHussR4Eyk+s=
Subject key identifier: 2F:22:FE:BC:79:39:9E:64:07:E4:15:05:2F:F3:0B:C4:AF:FE:08:C8
Certificate issuer: /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Certificate serial: 0194468D65A5F8415DBCFD6824214D281D00
Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/LyL-vHk5nmQH5BUFL_MLxK_-CMg.roa
Signing time: Wed 08 Jan 2025 15:34:19 +0000
ROA not before: Wed 08 Jan 2025 15:34:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 195.184.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:8d:65:a5:f8:41:5d:bc:fd:68:24:21:4d:28:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Validity
Not Before: Jan 8 15:34:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f22febc79399e6407e415052ff30bc4affe08c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:26:68:d3:b0:a1:41:01:64:d7:71:ef:36:
0c:ab:04:e0:21:bc:c8:c2:47:5f:04:65:e6:eb:67:
be:bf:d5:23:b7:59:32:cc:48:a0:22:2b:93:a1:0b:
10:12:69:87:a1:1d:b4:67:13:f6:9b:3b:f6:42:aa:
06:de:4f:59:51:b8:9c:f9:74:1d:c6:9a:45:60:03:
51:ab:b9:a7:2c:45:5c:08:25:56:ba:6e:bd:73:65:
71:6c:36:62:08:e7:6a:73:c3:6a:42:6d:ed:a8:ee:
be:3c:bf:9a:70:c6:07:83:b2:7b:09:47:2c:a8:7f:
ac:38:db:71:44:8a:12:6e:3f:a8:62:ab:ab:3d:95:
d4:80:e1:09:75:29:16:28:5a:a8:7f:2c:3f:ea:0b:
c8:d3:1f:c7:ca:15:b5:f2:76:f9:83:9e:94:75:e8:
e9:71:08:9a:60:fa:6c:23:9a:93:f0:03:9e:37:6a:
db:6d:4a:18:fa:91:c8:24:fa:01:74:6e:b6:3f:9f:
0f:8f:a6:19:ad:a4:c1:98:ba:42:bf:13:76:64:c1:
71:04:3a:b3:a6:33:6a:0a:14:ba:94:b8:65:5b:2b:
ce:3f:7f:40:21:cb:f0:27:a2:01:cb:f3:2b:d3:1b:
e7:2a:bb:3b:30:09:d6:11:1d:1d:ce:dc:93:c8:d4:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:22:FE:BC:79:39:9E:64:07:E4:15:05:2F:F3:0B:C4:AF:FE:08:C8
X509v3 Authority Key Identifier:
keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/LyL-vHk5nmQH5BUFL_MLxK_-CMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.249.0/24
Signature Algorithm: sha256WithRSAEncryption
10:33:d3:f4:78:9d:ec:47:97:bf:5f:db:f4:c5:25:93:3d:5b:
20:83:90:15:3d:45:4a:10:25:af:0e:e3:19:a4:2f:53:c8:a8:
fc:43:77:bb:1d:8e:71:94:19:e2:6e:97:d9:a7:1d:d3:6e:eb:
0c:c0:ae:55:cd:a9:06:f7:44:ff:dd:49:95:e9:26:d8:ba:70:
78:1b:29:22:31:69:25:4b:70:0b:85:12:77:7a:f6:78:8d:ba:
ac:4f:80:f2:62:72:45:1b:54:8a:e6:43:88:19:fa:3f:98:af:
f1:fd:10:af:be:3f:52:df:77:79:00:03:0d:00:ef:4d:5c:df:
59:6a:22:e3:13:da:67:92:f9:47:a1:d4:13:20:b8:dc:ea:93:
77:0e:97:72:7b:ae:b8:e7:4b:5c:77:fa:b6:5a:21:85:36:28:
74:8b:ad:18:ad:8e:77:10:2e:e5:3b:be:d9:df:d8:2e:50:06:
65:5e:7c:5a:80:05:58:3e:11:89:15:cd:a0:2f:c7:bd:28:12:
c4:04:06:13:6c:f9:39:d9:ff:85:5f:50:9a:17:1c:36:cc:48:
a5:1b:ce:6f:ec:41:05:8d:c7:17:77:32:d4:db:4d:7b:ec:f3:
5f:a9:83:fe:8c:87:f9:e3:65:87:6f:8f:ec:da:99:de:7c:a3:
e1:93:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:02 2025 by rpki-client