Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/LLA4IvVGtRI6yA90ov_lLpcYo6k.roa
File: LLA4IvVGtRI6yA90ov_lLpcYo6k.roa (raw, json)
Hash identifier: 7JmnUHmpGf8b/M1tDswRWUSaT/rNeM/CbbqIQS+ZYgw=
Subject key identifier: 2C:B0:38:22:F5:46:B5:12:3A:C8:0F:74:A2:FF:E5:2E:97:18:A3:A9
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019426D9F17D2A5B2F1A43D1DB1F8E575BE4
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/LLA4IvVGtRI6yA90ov_lLpcYo6k.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 93.89.219.0/24 maxlen: 24
93.89.221.0/24 maxlen: 24
93.89.222.0/24 maxlen: 24
93.89.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f1:7d:2a:5b:2f:1a:43:d1:db:1f:8e:57:5b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cb03822f546b5123ac80f74a2ffe52e9718a3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:ea:69:50:52:f8:89:62:3e:be:39:88:9c:
2a:5b:d8:2d:bb:e3:aa:d5:3d:f2:6f:f7:45:ff:10:
e2:34:8f:0e:d7:49:27:50:00:1c:3a:11:15:5a:94:
d7:0f:e9:6f:9b:59:5e:13:11:d7:de:37:f9:7a:41:
72:2d:c9:91:34:1e:da:53:44:b7:e3:64:88:2c:99:
d4:32:4c:b5:be:79:35:2e:c5:bb:ee:9a:83:28:18:
ef:5f:80:03:1b:a4:57:5e:b3:91:f6:17:11:11:e9:
66:76:6f:4a:db:a2:07:d8:0e:ea:fb:7d:30:ad:98:
06:ba:10:68:5b:ac:1f:5c:16:bb:9b:7d:77:38:36:
23:0d:b9:ee:57:60:b8:3a:4f:cd:17:9e:68:81:3c:
ef:a7:b1:1a:d2:38:e9:3c:8f:cc:a1:45:50:6d:46:
05:d1:5a:e3:52:e7:56:f8:e3:2d:4a:0d:fe:40:10:
b7:52:46:68:56:f0:90:da:97:63:b6:f8:56:5a:82:
db:ab:27:1d:8d:0a:13:1a:52:4d:2e:65:e4:80:aa:
de:de:f3:53:26:a1:46:75:db:be:6d:69:36:b7:9d:
18:55:3f:87:3d:1a:b8:01:49:de:17:42:ef:5b:6a:
48:8a:fd:00:95:20:e4:c1:aa:3f:e5:42:4b:df:a1:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B0:38:22:F5:46:B5:12:3A:C8:0F:74:A2:FF:E5:2E:97:18:A3:A9
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/LLA4IvVGtRI6yA90ov_lLpcYo6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.219.0/24
93.89.221.0-93.89.223.255
Signature Algorithm: sha256WithRSAEncryption
9f:36:6a:8d:81:8f:30:a9:94:41:54:b0:6d:b1:03:32:a3:d4:
58:f6:c8:1a:76:4d:7b:22:1e:c8:b2:32:d8:90:33:64:12:d8:
77:bb:84:77:25:9a:b0:89:ee:8e:81:07:3b:e6:fa:82:bd:ca:
29:73:ff:9b:ad:3e:6e:83:c7:ce:14:a3:2b:be:74:dc:43:72:
4b:27:8e:90:46:75:65:60:4e:8c:61:3a:30:9f:b0:d4:dc:a4:
6f:26:af:f6:8f:14:9d:03:c5:0d:ef:1e:c5:02:f0:c0:40:43:
ab:be:50:7e:ad:0c:54:ce:d7:c0:2e:62:87:75:90:02:3e:4f:
1e:6f:c3:8d:ff:aa:45:78:79:bc:8e:a3:38:b2:2e:ac:cc:50:
2f:42:85:0d:19:97:b3:e3:f9:aa:cb:17:61:51:56:e7:bd:ce:
6d:17:64:10:21:2c:c7:05:11:68:ed:6f:f5:c2:5a:e7:64:a6:
28:53:de:59:6c:e7:72:00:43:63:d7:ee:43:80:85:d0:8d:35:
cb:b0:e8:12:ed:33:63:51:01:b1:a5:d4:d0:7e:94:4e:22:e9:
a5:1f:67:6c:e4:b9:af:3e:12:ad:bc:b3:10:60:94:dd:6b:ec:
f4:65:3a:50:df:06:de:93:5e:be:48:d4:1f:04:9c:dc:36:d1:
55:49:71:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:14 2025 by rpki-client