Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/lSP4K3mfoxcgowofKtKedL6Fcrk.roa
File: lSP4K3mfoxcgowofKtKedL6Fcrk.roa (raw, json)
Hash identifier: ejPoRQTQJw87tbzyuSoPJnPZJPT0D2gWvsWUm5z3CsU=
Subject key identifier: 95:23:F8:2B:79:9F:A3:17:20:A3:0A:1F:2A:D2:9E:74:BE:85:72:B9
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 0194258FCCA90BE82ECE58A54C24CB6413BA
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/lSP4K3mfoxcgowofKtKedL6Fcrk.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 194.62.1.0/24 maxlen: 24
194.62.29.0/24 maxlen: 24
194.62.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cc:a9:0b:e8:2e:ce:58:a5:4c:24:cb:64:13:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9523f82b799fa31720a30a1f2ad29e74be8572b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:d1:5e:dc:57:b8:5b:1f:8f:8f:2b:46:28:
72:f3:77:7b:54:e0:57:74:82:9f:57:de:14:7e:23:
36:6d:01:b8:5b:9c:b5:11:15:77:4a:86:9e:41:a7:
d1:68:b2:dd:db:f0:85:ed:b8:c4:19:e6:64:78:68:
6d:6f:80:2b:cd:d9:8f:3e:85:1d:8b:27:e0:c6:a9:
46:6b:e5:a4:d5:7b:d4:5d:19:dd:4b:2a:87:e4:31:
68:63:55:e3:21:6f:16:95:9d:72:c1:0c:b6:1c:d7:
1b:99:97:54:c8:54:4e:34:cc:41:3a:a1:60:98:fa:
f0:22:5f:cc:5a:d2:cb:a0:9b:ee:70:4f:71:5e:6c:
e2:42:3c:11:8d:29:f2:12:ae:bd:0d:03:c2:98:cf:
18:66:0d:c4:bc:ca:62:09:48:83:30:17:86:92:d9:
a1:a2:27:73:24:e9:5b:32:a5:90:2d:4e:59:eb:84:
74:bd:2a:62:7e:ba:01:47:35:48:1a:6c:21:52:3e:
0d:d4:0e:5f:62:bb:2b:8a:70:a2:ef:45:62:01:c4:
bf:bc:1e:d3:47:4c:a0:2c:b7:24:ab:68:4b:ed:50:
cf:3b:a7:94:61:be:0e:1e:d7:15:08:d2:47:91:c0:
65:f4:cf:dd:bc:91:ab:a8:59:a2:81:2f:80:6e:7f:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:23:F8:2B:79:9F:A3:17:20:A3:0A:1F:2A:D2:9E:74:BE:85:72:B9
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/lSP4K3mfoxcgowofKtKedL6Fcrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.1.0/24
194.62.29.0/24
194.62.157.0/24
Signature Algorithm: sha256WithRSAEncryption
45:2a:4e:62:23:d8:09:08:0c:3e:b6:8f:ba:b1:7b:0d:a5:7e:
58:12:35:9f:90:d3:0c:df:11:01:bd:06:ee:bf:f9:04:e5:c2:
55:e1:62:46:ac:21:03:1c:e6:66:3a:a6:90:6c:7d:de:be:cb:
6f:ad:af:99:10:48:97:9e:b1:1e:25:ba:3e:b3:81:a1:41:6e:
e1:d2:40:c3:78:24:34:02:44:46:54:d6:b3:d6:05:77:d6:55:
bb:1b:00:e3:69:fd:27:8b:19:ac:1f:85:7f:9b:03:9e:4c:b1:
c2:27:d6:63:a1:7d:f9:cc:91:db:c0:dc:a6:02:13:c4:61:4a:
75:96:bd:bf:5b:83:9f:3a:92:75:06:9b:2d:08:55:ff:07:80:
3f:22:45:23:9e:dd:bd:64:ec:2f:16:b3:3d:2b:02:4f:34:52:
56:ce:65:0a:f1:ec:cb:a1:cc:a2:7c:c7:ec:d2:88:9e:44:9e:
12:d3:b2:1c:54:2c:f3:c7:44:a6:7e:82:15:60:b1:5d:cb:ee:
34:44:82:51:99:c8:2c:d2:7e:6f:7d:c8:09:7a:ab:f5:95:9c:
2d:f5:f2:0c:b9:63:25:99:59:d1:68:d6:e1:1c:e1:18:48:a1:
2c:a4:1a:70:f6:62:ed:b4:63:76:d1:21:fb:92:1b:1c:4b:c9:
07:f8:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:18 2025 by rpki-client