Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/l11Ov9UjlVOwEN9wGIEM7Dgyf4Q.roa
File: l11Ov9UjlVOwEN9wGIEM7Dgyf4Q.roa (raw, json)
Hash identifier: mfhCG+ewTISHTcy1YXAuS1Nzlhjw59NrfEXcEnnvFeI=
Subject key identifier: 97:5D:4E:BF:D5:23:95:53:B0:10:DF:70:18:81:0C:EC:38:32:7F:84
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 35BD826F
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/l11Ov9UjlVOwEN9wGIEM7Dgyf4Q.roa
Signing time: Sat 01 Jan 2022 12:06:29 +0000
ROA not before: Sat 01 Jan 2022 12:06:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2198
IP address blocks: 195.221.84.0/24 maxlen: 24
194.214.55.0/24 maxlen: 24
194.254.189.0/24 maxlen: 24
193.51.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901612143 (0x35bd826f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 12:06:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=975d4ebfd5239553b010df7018810cec38327f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:f8:40:dd:0c:6c:f4:22:85:2a:98:c9:fe:
89:e7:4d:ac:80:00:d4:b7:81:8e:76:b3:f1:e7:ca:
d9:f8:4b:76:fd:d4:6a:8b:dc:45:4b:89:a4:c2:d1:
39:a6:8f:4e:95:e3:63:08:c3:4c:24:51:6d:41:aa:
2a:5f:47:fb:c3:44:6e:ea:98:8e:bf:d9:52:55:6b:
df:72:86:7f:e6:ed:2c:b0:1e:2a:01:53:b7:ba:66:
c1:22:9b:a6:42:1d:04:e2:03:2b:c3:3d:10:19:b9:
00:72:6e:77:34:b1:c7:a7:7e:5b:eb:c6:b1:38:7e:
58:c6:44:59:c7:5c:05:3f:4c:27:00:ac:68:da:7e:
5e:68:48:0e:94:62:67:2f:8e:16:4c:ba:5f:70:94:
24:9f:9d:7c:88:b6:d9:dc:e6:2c:68:1b:a3:03:10:
ad:ba:a9:1d:14:c0:4f:41:72:35:e9:8d:72:29:2c:
bb:94:13:b3:80:6f:4e:ed:de:7e:e9:b2:f0:c9:f4:
24:9a:00:26:8b:17:66:63:bb:06:cd:c0:4b:a0:22:
fb:b1:94:db:69:6f:bc:41:1a:63:97:16:3d:02:07:
ba:e2:00:7b:d9:75:e1:0c:de:f0:f1:61:0c:99:b6:
81:2e:66:75:6f:b0:36:35:06:29:e1:2e:43:35:7a:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5D:4E:BF:D5:23:95:53:B0:10:DF:70:18:81:0C:EC:38:32:7F:84
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/l11Ov9UjlVOwEN9wGIEM7Dgyf4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.51.249.0/24
194.214.55.0/24
194.254.189.0/24
195.221.84.0/24
Signature Algorithm: sha256WithRSAEncryption
43:85:29:8d:29:e3:5a:48:d5:6f:be:74:4b:06:a8:7b:62:43:
53:9f:f0:fb:e8:8f:b1:f6:8e:a9:4a:cd:47:0d:be:08:b5:ea:
c6:15:80:4e:ee:09:e6:ca:f8:f2:04:00:78:11:82:be:59:d1:
d2:13:b7:8d:ac:2b:d4:12:a1:5b:3d:0a:11:af:ac:cc:eb:7a:
2c:20:2e:c6:ab:5d:4f:6b:bd:b8:af:ef:71:90:eb:83:87:65:
06:88:10:be:8e:86:b7:3b:93:b8:67:3b:68:d6:8d:09:ec:5a:
54:4e:f0:63:94:c8:05:66:3d:12:ae:cf:e2:08:b1:0a:18:1d:
3f:fa:e0:6c:70:fd:45:0e:1a:93:d4:39:1c:64:69:e8:35:47:
ce:47:13:70:2c:36:14:58:c6:1a:3b:8d:7f:b9:43:9a:88:7c:
df:80:4f:1b:28:1e:5c:00:4e:15:4d:c9:2e:19:d6:2a:a7:05:
d0:e1:30:dd:71:bf:e6:1e:5a:f5:9b:3f:9b:ea:4a:cf:36:73:
f9:b5:06:10:55:db:1f:e1:dd:a3:c5:87:a6:af:a7:48:c8:35:
e6:92:98:af:b2:29:1b:58:57:cf:44:a2:34:e6:fe:78:02:08:
8e:32:94:e4:3f:56:4b:14:68:4a:3d:d1:0e:51:ee:cb:f0:3b:
fb:fd:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:48 2025 by rpki-client