Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/lz5WGT-HSAH31n8Ise78k0AsYVs.roa
File: lz5WGT-HSAH31n8Ise78k0AsYVs.roa (raw, json)
Hash identifier: qwmPynDWTBJUhKrxZKFwW3csiK2PAeaS9CbpeGKFdiY=
Subject key identifier: 97:3E:56:19:3F:87:48:01:F7:D6:7F:08:B1:EE:FC:93:40:2C:61:5B
Certificate issuer: /CN=34035bf7661cbb524900264f432287fd0f7b9fb1
Certificate serial: 03BCA4A2
Authority key identifier: 34:03:5B:F7:66:1C:BB:52:49:00:26:4F:43:22:87:FD:0F:7B:9F:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NANb92Ycu1JJACZPQyKH_Q97n7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/lz5WGT-HSAH31n8Ise78k0AsYVs.roa
Signing time: Sat 01 Jan 2022 08:06:09 +0000
ROA not before: Sat 01 Jan 2022 08:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39775
IP address blocks: 194.93.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62694562 (0x3bca4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34035bf7661cbb524900264f432287fd0f7b9fb1
Validity
Not Before: Jan 1 08:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=973e56193f874801f7d67f08b1eefc93402c615b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:0b:72:2e:f6:db:82:c5:06:c8:91:47:6f:
f5:27:07:de:26:df:df:e4:54:d5:d3:34:72:0a:69:
ca:77:bb:0c:64:9e:96:06:32:52:e0:79:79:cd:04:
b8:84:06:2d:dd:e6:f4:88:ec:e3:6a:4e:0c:c2:e8:
ff:61:5d:0c:43:ac:b4:84:68:c2:5e:bf:ad:bf:89:
af:2b:c0:59:c6:91:86:3f:60:f4:57:f6:f9:c9:b5:
36:5c:b8:ee:72:4e:8e:a4:7f:2e:2e:fb:26:84:b3:
19:e9:d1:84:ae:93:7c:a1:c5:0b:5e:69:fc:b7:ce:
84:46:85:ba:51:ca:32:a9:f6:00:07:35:eb:41:fb:
9e:f9:f5:5e:47:c0:aa:af:c2:85:5c:aa:57:66:74:
dd:c2:75:b7:fd:ac:8a:ff:be:29:29:6e:c5:1a:72:
89:c2:4f:a4:bf:cd:dd:93:f3:d6:02:70:bb:54:94:
10:55:56:08:f2:e7:f2:7c:fc:2a:1a:60:5d:b8:ec:
e5:36:c9:ae:c4:b0:39:5e:a1:67:df:d9:41:40:eb:
ba:a9:ce:2d:f2:46:da:2a:8e:19:8a:bd:cc:08:77:
55:8b:d2:2e:3c:d0:c8:da:d5:43:b4:cf:70:bd:4f:
66:11:21:50:30:63:41:1b:d0:ea:96:f9:6d:b9:c4:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3E:56:19:3F:87:48:01:F7:D6:7F:08:B1:EE:FC:93:40:2C:61:5B
X509v3 Authority Key Identifier:
keyid:34:03:5B:F7:66:1C:BB:52:49:00:26:4F:43:22:87:FD:0F:7B:9F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NANb92Ycu1JJACZPQyKH_Q97n7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/lz5WGT-HSAH31n8Ise78k0AsYVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e2e3f2-a139-43d2-a23a-8391193012a4/1/NANb92Ycu1JJACZPQyKH_Q97n7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.99.0/24
Signature Algorithm: sha256WithRSAEncryption
04:74:b1:f9:a0:c3:9e:5f:e5:8f:d3:ae:91:0e:bb:b6:37:d8:
29:90:43:d6:b8:d2:ba:23:84:f8:fd:4a:d8:72:08:f0:d0:c1:
77:f0:9b:4d:b7:c6:0d:e2:7b:03:67:5b:fe:f2:38:60:52:35:
60:85:49:6b:ea:bf:6f:d3:22:80:73:c5:59:ff:cb:b9:da:bc:
7b:62:8e:70:8a:6e:cf:74:a1:f1:8e:0a:54:d2:1f:14:a1:64:
2d:04:ae:0e:ee:11:9e:89:c0:c2:ec:fc:cb:ce:29:45:d5:6e:
8f:88:65:2f:f0:5e:de:1b:c3:41:c6:da:b4:eb:18:37:d4:12:
c4:46:ff:5d:c2:0f:30:26:af:83:21:bc:d4:77:4f:ae:94:3f:
06:0e:5c:15:61:70:c0:e1:3e:4c:1b:14:08:fd:b3:d1:fd:35:
ce:3c:71:bc:30:51:63:4f:66:a4:3e:87:18:fb:4b:25:96:d4:
88:79:d1:81:92:74:71:d6:44:6c:e0:4f:9e:fa:b3:b5:3b:0b:
db:ad:7a:94:0e:a7:81:8e:eb:85:43:bc:6c:93:ca:2d:38:4b:
5d:e0:2e:94:ee:4c:bc:2c:f1:7b:60:31:ba:06:88:bc:50:c4:
b9:a5:f1:c3:7e:22:95:a3:83:95:4e:bd:05:c9:17:12:c0:4e:
9c:27:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:50:21 2025 by rpki-client