Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/LTgbOoMt6_7zpiAr6W4S5V4DN3g.roa
File: LTgbOoMt6_7zpiAr6W4S5V4DN3g.roa (raw, json)
Hash identifier: kZvVLp8yunaTKR+ax0Gg+aGUIzaoUBy8QWccfdyC44I=
Subject key identifier: 2D:38:1B:3A:83:2D:EB:FE:F3:A6:20:2B:E9:6E:12:E5:5E:03:37:78
Certificate issuer: /CN=921c2eb0164c18390030c5e705c4a3479150df9e
Certificate serial: 01875FB221D11545E6116149135209412DE3
Authority key identifier: 92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/LTgbOoMt6_7zpiAr6W4S5V4DN3g.roa
Signing time: Sat 08 Apr 2023 07:08:42 +0000
ROA not before: Sat 08 Apr 2023 07:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197882
IP address blocks: 195.62.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:b2:21:d1:15:45:e6:11:61:49:13:52:09:41:2d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c2eb0164c18390030c5e705c4a3479150df9e
Validity
Not Before: Apr 8 07:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d381b3a832debfef3a6202be96e12e55e033778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:04:73:50:1e:92:55:76:98:ba:ee:bb:cf:39:
e5:fd:17:4a:4e:b4:fa:8d:17:7a:c3:6b:a3:fc:b8:
c2:c2:77:f5:da:db:ff:74:a6:24:71:88:59:21:b5:
a6:1a:19:8e:7e:ff:ed:58:c8:7f:1c:80:ee:ce:11:
47:fc:9d:dc:e8:d5:02:ef:32:75:c1:50:61:a5:c7:
00:40:eb:20:29:17:f3:cf:2a:80:c7:04:1e:1b:45:
7b:06:5f:d1:16:2a:79:de:a7:39:87:3f:c9:1d:3f:
21:82:c3:14:cf:e4:54:12:bc:50:36:20:c5:46:ca:
3b:29:c6:28:a3:50:68:04:e7:66:54:86:a4:d9:73:
b8:42:8f:66:33:c6:ab:be:c6:17:31:96:c8:ec:c9:
4c:d4:49:39:4c:e5:a1:a2:f6:be:b7:d0:8a:7f:c5:
6a:0d:c5:75:6a:05:1e:7c:76:1a:3e:f1:42:dd:a5:
c0:3c:2f:da:d8:4a:8e:5e:5c:45:69:2c:b2:45:9e:
82:d5:10:47:5e:39:8d:c0:cd:9f:15:e7:5d:11:d1:
99:4f:9d:f1:61:61:3f:4a:3a:aa:5e:37:5e:a7:92:
4c:50:a5:69:b4:94:84:bd:fa:dd:01:67:ed:4b:e1:
c3:fd:1a:29:a2:60:56:c1:41:e4:92:66:69:e7:77:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:1B:3A:83:2D:EB:FE:F3:A6:20:2B:E9:6E:12:E5:5E:03:37:78
X509v3 Authority Key Identifier:
keyid:92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/LTgbOoMt6_7zpiAr6W4S5V4DN3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.88.0/24
Signature Algorithm: sha256WithRSAEncryption
03:9a:13:ac:dd:3a:e0:a3:02:2f:af:82:47:59:63:c3:fc:2c:
51:55:fb:56:7a:e9:17:a9:66:81:1c:9b:e8:07:71:ef:fc:41:
37:7f:5a:5c:70:b3:c0:c9:fe:fc:fb:2c:2d:89:2c:40:44:bf:
dd:9f:ca:fb:01:f2:0e:76:9a:b2:e6:0c:6a:b4:5b:44:06:3a:
7d:4b:9f:b3:02:eb:ec:a3:7f:c3:c6:b0:d2:da:18:b6:93:33:
d8:7c:b0:08:72:47:a6:a8:f2:c1:e4:4d:e7:ed:b7:33:40:92:
e7:fc:e8:a7:67:54:61:5f:74:66:45:74:af:44:07:b8:5d:f4:
ba:fe:b2:58:40:f8:c2:97:c2:20:72:b3:75:07:8b:f4:ba:1f:
de:b0:e2:66:a3:0b:11:2c:57:a9:3c:4a:ce:dd:57:17:ca:06:
6e:e4:d9:be:67:d3:44:15:3c:8b:84:33:26:95:88:6f:d1:76:
35:cf:bb:bf:7b:d6:e7:52:0d:b3:f8:f9:a7:50:85:04:0d:57:
d2:d8:df:73:64:ec:5f:cc:a3:f9:72:f4:9b:e6:c6:f6:27:5e:
e9:89:71:e2:08:fa:dd:12:03:85:85:a5:82:07:32:74:d8:0e:
c9:fd:ea:ef:08:66:8f:6a:22:e6:c3:2c:23:e4:65:b7:83:10:
61:a5:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:30:31 2025 by rpki-client