Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/lHwTYMLdPppQjIGCxxbbE7ChdPI.roa
File: lHwTYMLdPppQjIGCxxbbE7ChdPI.roa (raw, json)
Hash identifier: AdFGp8oSyfut37qs3XRrjrGdC0sy7qxul+fWrYsyUd8=
Subject key identifier: 94:7C:13:60:C2:DD:3E:9A:50:8C:81:82:C7:16:DB:13:B0:A1:74:F2
Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Certificate serial: 01942144414BA0A146A0D6864BE78F9ECD3C
Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/lHwTYMLdPppQjIGCxxbbE7ChdPI.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25358
IP address blocks: 109.70.168.0/21 maxlen: 24
185.25.40.0/22 maxlen: 24
193.189.104.0/23 maxlen: 24
195.140.148.0/22 maxlen: 24
2a00:14e8::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:41:4b:a0:a1:46:a0:d6:86:4b:e7:8f:9e:cd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=947c1360c2dd3e9a508c8182c716db13b0a174f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:94:70:78:ff:89:10:59:15:6a:b7:df:ff:
0c:27:f4:73:1d:b9:88:d0:08:d4:3c:06:7e:58:8c:
1c:c1:81:bb:88:68:77:fb:48:01:38:09:69:0a:34:
55:54:ae:4d:16:ef:30:a9:08:5c:42:38:d3:a0:ee:
08:7b:a2:b9:9e:17:95:d1:ee:68:56:e5:8c:1f:8c:
c3:cf:e5:28:a6:92:06:f2:a1:cc:8e:26:05:9c:8b:
6c:22:72:8e:e0:a9:37:9b:68:14:2f:2a:8c:1e:a7:
e6:73:16:fe:ab:78:7d:3d:cf:4e:5f:c1:d7:16:1d:
7c:ae:9c:ae:99:38:e9:7f:1d:a1:a9:0e:44:8c:55:
ba:66:d1:d6:f6:ed:62:03:7a:4a:01:10:5f:dc:ed:
48:bb:c1:f8:36:2a:d9:ed:7c:43:27:4c:29:d6:1e:
c3:28:e5:7e:79:db:a0:aa:ce:e4:20:ff:87:dd:9f:
f6:2e:fc:33:56:cc:b9:69:50:64:05:ac:50:24:01:
69:db:c5:5d:8e:2b:65:28:f4:94:21:2c:84:6f:7b:
05:c0:aa:fe:79:8a:35:92:f4:ae:b3:52:db:df:2e:
4d:63:d3:d7:88:57:6f:0e:82:cc:fb:e5:1b:b8:55:
04:ea:a4:32:c2:f0:68:8f:5a:53:39:78:78:cd:8f:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7C:13:60:C2:DD:3E:9A:50:8C:81:82:C7:16:DB:13:B0:A1:74:F2
X509v3 Authority Key Identifier:
keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/lHwTYMLdPppQjIGCxxbbE7ChdPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.168.0/21
185.25.40.0/22
193.189.104.0/23
195.140.148.0/22
IPv6:
2a00:14e8::/29
Signature Algorithm: sha256WithRSAEncryption
b2:18:92:ce:62:32:07:70:47:30:12:19:7f:5d:0c:72:af:34:
0b:f7:25:f8:c7:03:5b:a6:2e:70:18:4b:d0:5f:5e:4e:75:61:
52:23:0d:8b:ab:0d:37:fb:b6:bb:9e:a3:c1:14:d0:16:18:dd:
61:6d:b0:88:8d:8b:76:dd:de:f8:dc:9d:d0:37:7f:bd:5b:d7:
fe:6b:42:1e:5f:66:2d:5b:61:e3:5e:bd:15:d7:fd:7b:2a:67:
45:c8:40:59:07:8d:cc:ac:0e:2a:6b:0b:bd:09:ff:5a:d7:a6:
4c:9c:01:9a:05:e0:92:aa:71:40:ad:d2:62:d6:0f:c9:45:19:
78:92:00:33:89:ba:24:de:e8:21:69:da:75:b9:74:ea:84:1d:
0e:fb:b0:6b:52:28:18:97:fd:ae:7c:95:fc:31:ce:10:b7:7b:
2f:f5:70:c3:28:da:72:3c:ee:94:85:d9:a3:ee:24:97:ab:27:
f6:58:5d:dc:f4:92:01:e1:d2:64:20:1b:17:88:60:f8:2c:dc:
d4:fa:05:8b:68:3c:c5:bd:d7:3f:0b:48:42:0e:81:a8:5d:70:
94:fd:af:a1:6b:22:96:33:78:b1:0f:5a:38:fc:b7:aa:49:0a:
ce:5c:e5:70:34:61:75:e8:ce:15:58:00:22:6a:4d:a3:d4:ef:
d1:aa:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:53 2025 by rpki-client