Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa
File: lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa (raw, json)
Hash identifier: kCJqfKEC/8AcT5Dn8+T0849c1Ido/6VgqldxnSwXqNg=
Subject key identifier: 94:25:20:BE:1C:81:A7:45:0A:6C:7C:4A:C5:46:24:AE:01:8B:D8:46
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 01942143EA671C85500092B212DB49982836
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21217
IP address blocks: 194.88.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ea:67:1c:85:50:00:92:b2:12:db:49:98:28:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=942520be1c81a7450a6c7c4ac54624ae018bd846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:05:ac:bc:81:fc:f0:fe:c1:49:24:1f:3f:
cd:8d:80:b7:a1:48:19:42:b4:a2:1a:fc:9a:4c:1f:
f5:1f:ed:06:94:12:03:3c:9e:32:d9:99:a4:24:6f:
4b:ee:a2:2d:52:da:53:b8:27:4d:37:ce:1b:cb:a1:
84:6d:71:9c:3f:b2:ab:a2:40:96:00:7d:ea:ef:3c:
d9:b9:b6:cc:1a:47:01:f1:c8:83:00:90:fd:07:ed:
94:e0:65:63:fd:46:56:b7:63:50:f9:1f:79:a0:e1:
2f:8d:ca:12:a9:eb:ed:83:d5:28:87:86:2e:00:85:
29:09:ea:08:70:7c:ca:bc:d4:58:bb:b9:42:5b:e4:
52:1d:89:60:d3:42:94:de:79:e6:6b:6f:3f:4e:13:
e0:61:34:23:c1:08:56:c4:93:7d:55:ce:52:1d:b9:
27:92:18:44:39:d5:7b:c1:60:d2:56:5a:5d:18:1e:
49:17:ce:57:b5:f6:14:db:51:83:0c:03:53:58:1d:
72:9f:91:1b:68:59:7a:50:2a:63:a7:40:f5:03:0b:
6b:82:99:97:77:40:23:71:c4:40:f9:94:2e:23:c6:
0b:3d:9e:78:2f:7f:a9:4d:8a:9c:ac:a1:18:54:2c:
a5:cb:63:e3:09:32:77:49:6f:56:99:29:e8:05:ce:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:25:20:BE:1C:81:A7:45:0A:6C:7C:4A:C5:46:24:AE:01:8B:D8:46
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.9.0/24
Signature Algorithm: sha256WithRSAEncryption
51:76:92:bc:87:ba:54:4d:39:19:6d:78:96:dc:53:49:6d:9e:
a2:fa:d6:3f:64:50:bf:08:b0:46:04:49:d7:1e:e2:6f:29:d7:
96:8e:45:a6:b3:15:ea:b3:c0:64:e1:af:cc:49:e6:46:6a:6c:
79:66:e8:d1:d7:3a:2f:2b:e1:e6:dc:76:2b:ba:d4:63:68:1d:
0e:e7:e8:53:7b:b0:88:00:44:39:21:7f:83:eb:8c:d9:72:b7:
93:0c:f0:6c:6b:4f:01:d5:59:f1:33:ef:31:fb:84:38:df:45:
cb:f7:93:92:65:df:70:db:6a:fc:02:8b:c4:61:9b:b3:09:77:
84:2f:e7:35:c3:6b:5c:15:6f:67:29:9c:a9:9f:23:0c:a2:68:
74:48:b1:9a:59:94:ab:2c:de:15:72:3a:ec:f4:06:0d:80:75:
d6:a5:2b:d9:b7:8e:19:84:6e:57:ae:d4:be:b2:d0:90:08:d1:
5a:e2:26:16:e4:df:00:84:e0:8c:f8:a0:7d:9a:da:9a:e4:ef:
62:6d:0b:33:a0:46:68:d0:8e:75:db:60:44:17:25:9e:f6:af:
51:e4:2c:1c:74:ba:ed:b4:3c:f1:e6:ee:16:04:4a:4d:ac:8c:
11:24:71:7e:94:18:f5:c4:53:a7:01:61:f9:20:86:48:e3:a0:
02:f4:a5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:05 2025 by rpki-client