Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/LyrSZghOpJhh90psgTjyFWDA7Y0.roa
File: LyrSZghOpJhh90psgTjyFWDA7Y0.roa (raw, json)
Hash identifier: iFR90m9a9mI0Jc2koEid/hUq8LuiZbmtQYMq5EQCqFQ=
Subject key identifier: 2F:2A:D2:66:08:4E:A4:98:61:F7:4A:6C:81:38:F2:15:60:C0:ED:8D
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 0193C6BD6A74544854A5A66BD7E01478BF7C
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/LyrSZghOpJhh90psgTjyFWDA7Y0.roa
Signing time: Sat 14 Dec 2024 19:55:22 +0000
ROA not before: Sat 14 Dec 2024 19:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 93.127.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:bd:6a:74:54:48:54:a5:a6:6b:d7:e0:14:78:bf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 14 19:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f2ad266084ea49861f74a6c8138f21560c0ed8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fb:74:da:f1:47:7e:ed:ab:35:e6:9c:23:b9:
44:54:eb:59:f8:9f:10:2d:7d:e5:5c:80:d7:e8:db:
b0:ba:68:ce:59:ed:59:9c:89:2d:b5:9f:39:5d:31:
2a:5c:b8:9e:24:a6:ea:59:08:df:91:a9:03:d2:5d:
c1:f1:e0:65:c4:ab:12:8e:0e:e3:d7:aa:54:c6:d4:
58:7c:f2:de:7c:9b:09:6a:8c:98:58:0e:a5:b4:d6:
fd:60:dc:85:fd:01:1a:93:38:00:b0:dd:0e:5b:1f:
2b:ca:2c:7a:0c:d5:29:e3:6d:07:ef:7b:42:d3:df:
2b:7c:1f:59:85:2e:f9:98:16:8f:b2:22:25:e6:23:
81:77:9e:00:e3:54:16:b7:55:07:cc:e9:58:2b:47:
35:dc:bd:da:87:d8:ac:dd:a0:9a:9b:58:86:5b:21:
50:00:71:a0:4c:c4:d2:bb:66:cc:02:79:d8:2e:30:
69:32:a7:b7:e9:29:64:d4:18:4b:13:5a:24:6e:14:
fc:00:05:28:6f:8e:f9:f9:2c:00:66:f0:28:c6:30:
ac:49:7c:8c:1e:14:01:a4:94:68:cb:0d:b4:5c:ca:
2b:24:cd:d2:56:f4:8e:23:71:3d:f6:76:f9:de:61:
11:b4:b4:25:76:9b:0a:c9:ac:08:54:42:0f:a0:57:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2A:D2:66:08:4E:A4:98:61:F7:4A:6C:81:38:F2:15:60:C0:ED:8D
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/LyrSZghOpJhh90psgTjyFWDA7Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.150.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:a1:47:95:e6:9c:49:71:1b:15:65:97:d5:5a:50:9a:dc:94:
3c:ba:44:ca:dd:5d:15:41:63:da:c0:1a:d1:18:ef:d0:1b:87:
4b:1a:3c:b6:27:87:74:e5:80:1c:85:1e:72:db:75:4a:b1:03:
61:d7:48:df:bd:0d:f2:13:36:04:d9:c5:26:95:27:29:29:e7:
51:f8:19:1d:14:ef:74:6e:74:d9:a5:1e:1e:38:c0:ab:ea:e3:
a5:f8:cf:ca:cd:c3:06:54:14:1a:11:27:44:20:df:51:29:3e:
46:46:53:c5:c9:1f:fe:b9:87:d0:52:0f:84:13:39:18:ab:1d:
0c:ae:e1:e0:27:86:93:22:6a:b7:d8:2b:a7:03:2f:51:92:e1:
27:fa:4c:4a:f9:b6:eb:49:49:c8:a8:1a:ec:10:e2:82:21:17:
cb:20:7a:d5:28:28:7a:35:16:e9:d1:43:92:af:33:2f:56:37:
89:c5:de:cb:5b:37:74:6c:d9:1c:90:e9:b6:8d:4e:0e:cf:b9:
62:c4:00:b8:a5:35:5e:ea:ed:fb:19:cf:43:bc:6c:63:cd:ad:
94:de:c7:19:66:ef:55:e9:eb:de:f8:69:70:88:ad:43:18:ca:
e3:dd:59:4d:f2:fe:be:5d:2b:52:1a:3a:2d:a7:fc:40:18:de:
fe:79:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:19:16 2025 by rpki-client