Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/l-FnEVjm4vzR7nZdjvvJt1pZ2zs.roa
File: l-FnEVjm4vzR7nZdjvvJt1pZ2zs.roa (raw, json)
Hash identifier: 5l3EYdNhopIaN9Usbmt+j/aedOEhfBOO5kXTBPqFB5g=
Subject key identifier: 97:E1:67:11:58:E6:E2:FC:D1:EE:76:5D:8E:FB:C9:B7:5A:59:DB:3B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D72E40F83752CAEF9315DB07284D55
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/l-FnEVjm4vzR7nZdjvvJt1pZ2zs.roa
Signing time: Wed 01 Jan 2025 21:48:12 +0000
ROA not before: Wed 01 Jan 2025 21:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214614
IP address blocks: 193.124.186.0/23 maxlen: 23
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2e:40:f8:37:52:ca:ef:93:15:db:07:28:4d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97e1671158e6e2fcd1ee765d8efbc9b75a59db3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:98:16:2f:89:2a:47:24:87:28:a3:83:3e:
9f:a9:67:d0:34:f5:a8:97:83:3b:9c:a9:b8:0a:25:
2d:5f:a2:af:d8:a5:94:ae:0b:c1:e1:f0:1e:b6:18:
15:da:1a:86:e0:c0:e9:3e:6b:a2:2d:df:52:af:9c:
cb:10:77:ff:46:b6:9c:12:72:9e:a9:09:85:f6:6e:
2d:0f:bf:98:3f:c1:8b:ae:c0:df:23:f3:db:95:1b:
ea:72:01:5b:8a:f4:66:c1:74:99:9c:f6:b0:62:b7:
f7:8d:f2:2e:56:13:a5:8b:86:e0:be:68:89:43:41:
a7:c7:ae:81:f5:9b:35:bb:be:e4:0d:47:41:e4:c5:
d6:3f:ba:ba:87:d8:ab:35:95:06:bb:5c:ac:07:8e:
6a:99:15:4e:a8:ae:86:65:da:31:5d:c9:22:d1:dd:
84:fd:f3:fe:92:a2:17:c9:8c:ff:ae:65:0d:ec:d7:
1f:b3:c4:57:aa:6b:65:2c:48:ea:0b:25:ab:7d:4b:
35:c2:2a:e1:ad:4b:84:53:14:98:d4:30:0d:fb:c8:
e5:a3:2d:43:24:a3:6b:4c:6a:19:53:d9:05:74:3d:
d6:c3:3c:7e:2f:c3:6d:9d:d1:ba:36:c8:69:7d:ff:
3e:a1:17:cb:34:26:7e:9e:0b:bb:62:53:87:fb:a7:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E1:67:11:58:E6:E2:FC:D1:EE:76:5D:8E:FB:C9:B7:5A:59:DB:3B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/l-FnEVjm4vzR7nZdjvvJt1pZ2zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.186.0/23
Signature Algorithm: sha256WithRSAEncryption
29:8f:4b:6d:c5:5c:f4:49:33:fa:04:46:88:89:ad:e4:53:37:
b3:01:8d:4d:32:ac:9c:40:d3:86:72:93:ef:1f:72:53:c0:62:
6e:ea:df:dd:d6:61:80:a3:79:fe:de:d0:ef:f4:82:62:18:33:
c1:00:8c:7f:d7:17:37:08:32:17:0a:ce:0f:53:a0:bf:74:4b:
d2:ed:d7:52:7d:57:ec:b7:6b:4e:dc:8a:c3:8e:c5:db:e3:23:
8d:1c:ed:65:75:e7:89:e3:03:d5:90:42:6e:61:64:0a:21:fd:
2b:ef:fa:41:f4:3e:36:20:8a:a5:d0:2c:9b:2f:4d:0e:e3:8f:
6f:09:d8:50:1b:e5:9a:bd:67:16:7c:9a:40:4c:f6:b6:26:9d:
98:8a:bc:d9:dc:74:01:c9:1c:1e:01:66:fd:6e:1d:af:39:db:
a6:b6:64:62:de:f6:15:22:73:f7:94:33:d0:b4:85:4e:df:f2:
4e:4d:7a:2c:1c:05:b5:71:92:28:80:fb:b4:cc:26:f5:83:bf:
ae:e0:2b:0e:6f:f3:c0:20:0c:70:e1:b6:6f:2e:18:07:08:c1:
18:bc:19:4d:93:9d:6a:ea:ff:98:4d:5b:c8:81:7d:87:7b:94:
d9:d4:fd:cb:73:ba:ff:d6:a7:a9:a8:80:57:5f:57:c0:4e:0a:
cb:30:c0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:29 2025 by rpki-client