Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/LNuPziOYyIrKubsBwXhoqEItKOI.roa
File: LNuPziOYyIrKubsBwXhoqEItKOI.roa (raw, json)
Hash identifier: HVHsB2c8MGUhz2rUlgm+F2HzTtyYnTiTaoLJeI/5tZw=
Subject key identifier: 2C:DB:8F:CE:23:98:C8:8A:CA:B9:BB:01:C1:78:68:A8:42:2D:28:E2
Certificate issuer: /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial: 019421B23C02C2D554D4A96259AF94D26F93
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/LNuPziOYyIrKubsBwXhoqEItKOI.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30801
IP address blocks: 193.93.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3c:02:c2:d5:54:d4:a9:62:59:af:94:d2:6f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cdb8fce2398c88acab9bb01c17868a8422d28e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8e:99:4a:8b:d2:c8:eb:eb:2b:c8:c4:f7:47:
6d:3e:0e:92:36:ff:b4:15:e9:10:32:f9:64:96:5b:
b9:5b:8b:b9:f8:59:fc:9f:b9:8c:19:da:86:45:92:
bf:c9:41:a9:2c:4c:3f:ab:22:d4:10:70:08:7b:4e:
d9:a5:d6:24:cf:e0:87:a2:83:f0:f7:91:b1:f9:85:
e8:1e:d6:03:dc:e5:59:59:05:ba:83:e1:38:bf:54:
6b:b9:e3:b1:3e:51:5f:2a:b5:34:f8:71:47:91:42:
4f:57:b7:0b:07:67:11:22:97:82:85:06:6e:f0:54:
16:12:7c:fe:ce:f6:d2:68:89:88:0c:46:a4:47:c1:
dc:4b:cb:f3:37:3c:0c:ff:99:23:5d:d0:74:96:4d:
4c:79:af:8c:95:2b:42:ac:6d:cc:46:80:20:15:08:
43:e3:26:8c:7e:f5:aa:93:61:27:3f:92:e0:d2:6c:
b3:da:1a:2a:37:6c:68:4a:e4:10:8d:9d:c0:5f:09:
e2:5d:e3:b6:05:a2:89:bd:53:90:48:89:f3:64:38:
1b:33:af:cf:6d:e0:dc:f1:99:46:02:39:9e:c1:41:
95:a3:88:6d:3d:fc:ff:07:13:ad:9a:ef:8f:be:6e:
27:d9:e7:2d:9c:35:f5:53:01:a8:2f:a1:84:f9:db:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DB:8F:CE:23:98:C8:8A:CA:B9:BB:01:C1:78:68:A8:42:2D:28:E2
X509v3 Authority Key Identifier:
keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/LNuPziOYyIrKubsBwXhoqEItKOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.112.0/22
Signature Algorithm: sha256WithRSAEncryption
72:e1:6c:88:61:34:44:37:7c:85:37:59:8d:dc:bf:5c:64:97:
d4:49:30:2c:ec:15:d2:d7:87:f3:ed:9e:88:97:22:2a:37:50:
87:e8:15:2d:2f:6a:85:de:35:f6:b7:e5:73:58:71:fe:26:0e:
be:16:5b:38:97:0d:29:75:17:ac:c9:50:a8:36:62:ef:d5:74:
d8:4d:0a:58:12:41:dc:ad:eb:6d:d0:ab:58:b0:94:47:ef:81:
d1:30:ef:f5:f8:b9:52:44:14:10:4a:65:3d:ae:c2:ae:4f:2c:
98:29:2e:18:99:e9:17:f6:a4:ff:41:82:e8:df:1d:06:6f:36:
ab:da:2f:8d:40:b4:c6:92:12:3f:22:65:50:35:cf:09:ab:5a:
68:c6:70:c4:da:35:e5:37:65:00:95:9a:a4:9c:0e:1e:4d:c7:
49:22:0d:56:3a:1f:2a:f2:3f:65:e4:30:de:ea:27:95:7c:10:
1b:4d:64:a0:71:b8:7c:67:ea:76:de:9f:00:0b:1f:02:30:8c:
8d:8b:1e:f6:c0:8a:48:14:16:3a:ff:0f:ef:1e:93:12:f0:13:
ba:ea:48:8a:94:a5:9b:9c:c2:ad:54:03:e2:4d:9b:51:a4:b7:
41:94:34:df:4c:e0:7a:d2:cc:4d:69:ea:96:35:c5:2b:84:b2:
e2:09:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:17 2025 by rpki-client