Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/lujMbkofOGRsIM1VXJ4CfEXMg2Q.roa
File: lujMbkofOGRsIM1VXJ4CfEXMg2Q.roa (raw, json)
Hash identifier: Qib+A/tN2onoYTWCymRAOqNVb4UiUv5Hw0BlcfVz84o=
Subject key identifier: 96:E8:CC:6E:4A:1F:38:64:6C:20:CD:55:5C:9E:02:7C:45:CC:83:64
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 01856E6F90D0605925BFC6E37CE8D1EF572D
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/lujMbkofOGRsIM1VXJ4CfEXMg2Q.roa
Signing time: Sun 01 Jan 2023 17:44:43 +0000
ROA not before: Sun 01 Jan 2023 17:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20983
IP address blocks: 193.109.244.0/23 maxlen: 24
195.242.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:90:d0:60:59:25:bf:c6:e3:7c:e8:d1:ef:57:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Jan 1 17:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96e8cc6e4a1f38646c20cd555c9e027c45cc8364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:72:ab:69:36:26:7f:46:31:b9:fd:7b:62:
fd:9d:bf:f1:bd:e5:40:4b:88:0b:76:4a:08:b7:5f:
3f:82:62:5f:0c:78:b2:c3:30:68:b6:39:85:2f:4e:
69:da:d7:e7:9a:f0:b0:ce:d0:d0:59:74:2a:a1:bd:
70:fc:c9:3e:b2:5b:ed:36:21:45:13:f1:58:c3:7a:
dd:14:2b:79:52:21:29:8e:82:56:2b:d8:ea:b5:a0:
a6:ba:6b:fc:93:6d:c2:c0:70:f3:7f:7b:36:d5:5f:
f8:9c:25:98:d9:dd:45:70:57:a0:1d:f3:7f:e7:fa:
fc:b7:2c:63:8e:1e:6d:62:eb:19:b7:81:cd:18:5e:
da:84:4f:b6:ed:2f:be:88:22:3f:d0:9f:7c:da:ea:
b3:a3:10:79:4c:9f:2c:49:88:2a:ad:06:ae:96:14:
7f:16:f5:44:c4:67:04:8a:b7:2f:c5:8c:08:02:25:
a9:6c:1c:01:1a:34:41:1a:f1:70:11:f9:66:71:b7:
a9:66:a7:11:b0:c1:fc:65:c7:4c:f7:e6:ce:e9:24:
68:14:70:17:ef:e1:c7:f1:8d:5f:5b:09:9a:e2:fa:
b0:c2:d8:16:3f:b9:8e:1b:ad:f1:89:7f:65:8e:1d:
11:84:e5:ff:da:e3:87:9f:b5:e2:88:f9:4e:cf:59:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E8:CC:6E:4A:1F:38:64:6C:20:CD:55:5C:9E:02:7C:45:CC:83:64
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/lujMbkofOGRsIM1VXJ4CfEXMg2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.244.0/23
195.242.183.0/24
Signature Algorithm: sha256WithRSAEncryption
25:bc:a0:c7:bf:4d:56:6d:fb:a5:90:4e:9c:28:4e:64:a8:34:
27:31:c8:36:a0:5f:d0:81:ae:d3:dd:0b:58:96:ea:e0:32:08:
f2:29:bb:09:99:02:e5:08:09:74:fd:1b:20:fd:bf:5f:f9:af:
24:4c:80:f1:f6:87:6a:e5:66:54:ff:66:a2:53:b5:d7:7d:8b:
6c:60:01:b6:ba:62:0a:f6:cd:c0:d8:8f:2c:a6:c3:a5:bc:d2:
64:b0:c2:55:27:e9:fd:dd:60:c6:e7:58:e8:76:65:88:d1:29:
5f:5c:00:73:ae:ee:9a:f6:39:ea:d5:4d:50:c6:54:85:7d:19:
73:68:52:3f:b2:1e:38:fc:92:96:2c:d7:17:92:e0:24:f8:8b:
a6:bf:8a:f1:72:4f:c1:ea:a6:c3:71:bf:76:5a:1e:e7:ba:e4:
ec:9f:72:59:a1:dd:54:75:f5:86:32:cc:19:11:02:b1:5c:c5:
da:7a:59:5e:04:cd:33:36:ae:3a:1e:96:06:6a:da:44:ce:53:
34:30:9f:24:52:f1:3b:f5:b5:85:fb:ef:52:f7:b5:4a:31:7a:
ee:3a:49:01:14:e7:c9:5f:af:a0:75:6d:36:d6:43:90:91:e1:
26:15:e9:7e:08:b1:50:b0:12:df:13:b7:82:c7:73:4d:17:73:
b6:42:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:27 2025 by rpki-client