Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/lAQuczRYGnewQpXm-9DH2Aa2FJM.roa
File: lAQuczRYGnewQpXm-9DH2Aa2FJM.roa (raw, json)
Hash identifier: cpxHeGSggctdEQY5QxkgjLkTiuh9nHgtIGZfv1ijkMo=
Subject key identifier: 94:04:2E:73:34:58:1A:77:B0:42:95:E6:FB:D0:C7:D8:06:B6:14:93
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 019421B23D313DD5FE9CCEBB7C7C53681C90
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/lAQuczRYGnewQpXm-9DH2Aa2FJM.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205953
IP address blocks: 185.93.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3d:31:3d:d5:fe:9c:ce:bb:7c:7c:53:68:1c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94042e7334581a77b04295e6fbd0c7d806b61493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:94:6e:41:7e:f6:d6:25:6a:5b:4f:84:80:
f9:d6:16:08:a8:7d:de:d8:a5:71:86:08:e6:6c:56:
bb:7a:7b:24:fa:be:e3:f6:49:19:f6:d7:8d:59:d2:
97:e2:18:a1:ea:22:ad:cd:b9:8d:99:ae:d7:d1:19:
db:d4:03:43:b8:09:01:7d:bb:de:7c:78:7c:61:ce:
2b:8c:1b:8e:03:37:ad:df:0b:af:3e:bf:56:68:a0:
bf:7d:ad:9b:6e:9e:70:f6:0b:7d:ee:8b:66:bd:cc:
36:c8:32:2d:93:1e:33:15:96:41:7a:42:b9:eb:4d:
d6:2a:8d:a6:3c:d7:41:93:49:56:fb:90:45:2e:e9:
6a:6f:56:83:77:3d:83:98:64:01:ea:61:00:2b:09:
a0:0a:a9:1e:74:95:e4:29:f3:86:61:70:30:8f:1c:
42:5b:c2:1d:02:c1:da:63:a8:a5:58:4e:69:88:3e:
f1:f8:df:26:71:93:72:6a:1c:59:dc:6d:e2:df:05:
e9:c9:92:ae:22:05:65:3b:40:a8:d6:aa:b3:67:46:
28:b1:13:8b:ac:0a:77:8c:1f:69:48:18:65:51:96:
4d:ba:09:f6:51:d4:19:f3:be:65:13:5c:a2:13:86:
d8:e4:59:52:cd:30:5b:a5:46:af:08:fe:97:4c:3a:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:04:2E:73:34:58:1A:77:B0:42:95:E6:FB:D0:C7:D8:06:B6:14:93
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/lAQuczRYGnewQpXm-9DH2Aa2FJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4e:34:7f:7b:ce:9f:03:8c:61:e6:d6:4c:ad:a5:f6:51:b8:
ad:19:69:38:85:89:b6:6a:57:56:02:fb:67:b3:2d:b5:20:bd:
be:e2:56:24:75:30:c1:41:31:04:e2:54:10:74:23:03:50:c8:
d1:4e:c4:c0:e2:00:e2:3a:42:1d:b1:28:d2:d4:74:92:09:69:
c2:2f:33:3d:22:6a:97:32:dc:1e:ed:77:3f:11:c4:38:81:cc:
b8:6b:53:e7:b3:22:bb:11:69:cf:8f:ac:d2:ff:e9:df:0f:2b:
88:bc:5e:80:fc:fe:83:3a:ea:17:4e:55:63:0a:57:06:c3:85:
c9:49:24:84:2d:82:69:06:5e:3a:8e:ab:64:70:1d:e0:8d:cd:
2b:23:8e:c6:3f:e5:96:7d:ee:64:1d:68:37:ce:09:7f:6c:2d:
a5:aa:28:00:5a:d6:ca:c3:7d:06:fd:6e:e0:de:13:e3:2a:48:
6b:8a:a9:7b:12:90:8e:1e:e4:c3:7f:74:63:46:46:15:de:0e:
58:87:10:7e:ec:32:39:37:8f:b3:c1:4d:02:ef:30:83:37:06:
66:24:3d:d2:e4:59:d9:ac:55:40:57:e1:07:62:aa:40:2c:8f:
22:2a:f7:69:68:98:6d:f6:36:7f:20:04:91:0f:2b:c9:be:be:
dd:d1:a3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:43 2025 by rpki-client