Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/lrinFZObhZGfc1162OW4cGhpyFU.roa
File: lrinFZObhZGfc1162OW4cGhpyFU.roa (raw, json)
Hash identifier: vPwojb/wgcSm6giu4fADfyjwWPUNFIPRDyI7Tyilnak=
Subject key identifier: 96:B8:A7:15:93:9B:85:91:9F:73:5D:7A:D8:E5:B8:70:68:69:C8:55
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 019425214277E3DD222058D01417834B81FA
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/lrinFZObhZGfc1162OW4cGhpyFU.roa
Signing time: Thu 02 Jan 2025 03:48:44 +0000
ROA not before: Thu 02 Jan 2025 03:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 93.177.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:42:77:e3:dd:22:20:58:d0:14:17:83:4b:81:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96b8a715939b85919f735d7ad8e5b8706869c855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:5c:f9:83:cc:63:70:6f:75:56:e9:01:0d:
2d:55:a3:17:f4:77:b4:aa:1b:93:e3:91:4f:69:e1:
ba:1c:e6:62:29:bd:53:0a:cc:49:d7:17:e1:e7:82:
6a:8a:f3:72:9c:ab:66:d3:eb:cb:4e:0f:3d:d7:38:
3c:0f:10:d5:4d:96:2f:0e:17:2a:d2:55:6f:71:9a:
48:25:2d:1f:07:a5:c0:fc:5f:c6:13:f0:c9:a0:cf:
27:d1:28:2f:2e:63:e4:2d:52:c0:22:1f:90:52:c3:
91:81:4f:14:7a:ae:69:80:1a:61:d6:cc:e5:54:38:
9f:7e:62:3c:e2:2a:2e:c3:80:00:b2:11:9f:9d:7d:
26:1b:8a:8f:b1:f3:85:91:bd:08:cd:1e:f0:1f:f8:
22:82:7a:f7:8e:46:90:ea:b6:a8:15:63:0c:4d:ad:
5b:38:72:65:fb:b4:0b:28:29:8d:18:50:b9:54:a7:
31:51:74:8a:62:44:ee:7c:32:35:4b:d2:4c:c8:03:
0b:6f:6b:d1:d6:61:8b:b7:d6:e7:67:48:5c:7a:4e:
2c:df:35:81:52:e6:35:c5:f6:10:4c:e9:0b:3d:ea:
53:bb:5d:59:4c:8f:1f:8f:f0:5c:81:c2:50:ab:8b:
88:00:95:c6:8e:0d:86:46:55:6a:f9:18:9f:bd:3e:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:A7:15:93:9B:85:91:9F:73:5D:7A:D8:E5:B8:70:68:69:C8:55
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/lrinFZObhZGfc1162OW4cGhpyFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ab:65:e3:c0:ee:18:3b:ae:ad:6a:ed:1c:d8:16:d5:fc:1d:
57:7e:b6:19:4b:42:79:0a:7e:20:8c:17:de:23:1a:dd:64:60:
0a:88:11:c2:02:74:81:b5:37:27:6f:ea:bf:ef:97:fe:03:04:
e7:a7:12:2e:6f:fd:e3:12:9b:25:ce:45:a3:ef:fb:57:37:0e:
90:b4:d3:39:4b:46:81:e0:e9:1d:21:cc:a4:67:93:a9:84:95:
2d:af:be:22:77:b1:0b:c9:67:fc:98:7d:d5:b1:5f:47:73:2f:
4d:c2:58:30:2f:e8:12:e1:0e:2c:57:20:ec:e7:01:d3:d7:0a:
cf:3e:b5:fc:e2:70:f4:dd:d1:a2:0c:ed:c5:99:2c:1c:29:10:
f8:84:e0:28:37:1e:9a:5e:c5:0e:c5:df:65:26:a8:89:d7:5d:
d3:23:b2:8d:11:c2:b0:93:ef:9e:b7:51:36:55:6d:ef:73:53:
8c:a4:61:94:e2:59:04:c0:e5:ca:06:cf:a4:a1:ed:f5:92:df:
66:78:5a:2a:99:b1:f0:5b:ba:92:1f:34:38:ef:f0:7e:7a:3e:
bc:04:d0:f9:b2:11:f7:d2:c1:ff:f2:2a:c4:55:20:95:24:ac:
4e:c8:26:21:a3:92:54:5e:d5:47:29:96:c0:ed:25:0e:3c:94:
41:54:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:36:06 2025 by rpki-client