Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/L3C3a4wJOyozczUsQa7pzZJtW_E.roa
File: L3C3a4wJOyozczUsQa7pzZJtW_E.roa (raw, json)
Hash identifier: FIhJQMT2zgrhNf1ND8xsGON0EABhi7VSs4gZgypaZLA=
Subject key identifier: 2F:70:B7:6B:8C:09:3B:2A:33:73:35:2C:41:AE:E9:CD:92:6D:5B:F1
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 069BF894
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/L3C3a4wJOyozczUsQa7pzZJtW_E.roa
Signing time: Mon 02 May 2022 03:41:10 +0000
ROA not before: Mon 02 May 2022 03:41:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 93.113.31.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110885012 (0x69bf894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: May 2 03:41:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f70b76b8c093b2a3373352c41aee9cd926d5bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:2f:50:9c:f9:1d:b8:1d:24:c8:4a:47:eb:
0d:e2:20:9a:c3:27:20:f4:a7:aa:f7:fc:2d:0d:a8:
d5:e3:29:5b:3d:55:37:78:47:d7:73:05:c0:59:78:
ca:53:2c:79:5b:8f:dd:38:e9:a3:09:23:09:bb:e9:
58:a7:49:2f:bf:95:02:c1:3d:da:6e:9d:2b:4f:0c:
f8:e9:e4:67:69:10:c1:fc:6b:13:e0:9b:33:35:f1:
a3:b4:de:72:6c:62:54:bf:a1:9e:d5:fa:cd:cd:b2:
b1:e9:3b:ff:ca:15:91:26:45:d8:b4:57:1b:20:77:
69:2b:77:b5:1e:02:a6:be:2a:2e:99:8d:2e:77:88:
3f:c9:61:73:83:1a:f9:ee:bc:57:1d:fa:38:d7:7b:
1a:8a:57:10:8b:75:26:8f:21:b6:1e:82:6a:ab:4a:
fb:09:7f:9a:ef:a1:db:9f:41:2f:22:cd:67:2c:2d:
74:6e:07:1a:c5:75:0b:98:94:42:ca:00:4e:14:f3:
c9:0b:6c:cc:36:21:88:62:e0:3a:39:f6:f2:a5:f8:
89:dd:15:78:58:c8:4c:42:17:fe:ed:9b:7c:6e:70:
90:7a:ff:bb:bd:63:b9:13:fa:a0:db:97:14:46:cb:
07:77:b9:b1:83:ec:89:65:10:72:e2:97:e7:15:c4:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:70:B7:6B:8C:09:3B:2A:33:73:35:2C:41:AE:E9:CD:92:6D:5B:F1
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/L3C3a4wJOyozczUsQa7pzZJtW_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.135.0/24
93.113.31.0/24
93.114.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ca:6f:41:98:29:d3:a0:aa:d3:4e:26:64:82:ac:ab:aa:23:
8f:13:6e:d7:06:f6:f5:ef:f5:f0:31:30:64:9e:bf:b1:95:e5:
f0:bf:94:50:2e:89:74:5d:18:97:ad:5a:95:63:dd:30:b7:97:
35:97:7b:6c:1e:dc:34:c7:37:b0:80:c0:f8:95:31:90:07:a7:
27:7c:da:4f:5a:01:60:ce:f6:df:3d:82:6e:51:13:ab:71:f4:
5b:bd:ea:0a:8f:2e:fe:30:3e:e1:d6:e2:06:ba:68:8b:ea:75:
e3:18:6a:c3:a3:6d:57:d2:04:dd:3c:ee:ca:13:3b:55:e1:ed:
21:f3:d3:11:48:ba:b3:2f:20:30:a1:02:1d:a3:6b:3f:08:26:
71:d0:8f:f9:43:64:3d:96:d9:4e:80:61:d3:a4:3e:19:65:27:
ba:cf:54:2e:11:48:51:67:43:64:bc:03:e7:f3:e3:c6:d2:3d:
4a:a1:e9:a0:d6:47:ee:1b:ad:69:98:fd:f0:d4:0e:6f:a1:4e:
c4:66:d9:fe:fe:23:0f:23:ac:45:2f:6b:f6:38:27:d6:71:c3:
55:93:0d:9e:d6:f1:de:2c:c0:2b:b3:69:ca:3b:76:00:b6:0b:
4d:30:73:3a:5a:9e:31:82:e0:cf:29:ef:af:7e:f4:20:43:4e:
32:14:1a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:43 2025 by rpki-client