Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/LfsV7f6LxRRDF8DgEB39eI0JGcY.roa
File: LfsV7f6LxRRDF8DgEB39eI0JGcY.roa (raw, json)
Hash identifier: 57HPzdZv/cmkcVMLJmynj7OnbXGj1b4sWVjtj2VnRws=
Subject key identifier: 2D:FB:15:ED:FE:8B:C5:14:43:17:C0:E0:10:1D:FD:78:8D:09:19:C6
Certificate issuer: /CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Certificate serial: 01942369119D26DCAADC324BDA1790EEDC5D
Authority key identifier: 5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/LfsV7f6LxRRDF8DgEB39eI0JGcY.roa
Signing time: Wed 01 Jan 2025 19:47:55 +0000
ROA not before: Wed 01 Jan 2025 19:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48943
IP address blocks: 195.10.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:11:9d:26:dc:aa:dc:32:4b:da:17:90:ee:dc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Validity
Not Before: Jan 1 19:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dfb15edfe8bc5144317c0e0101dfd788d0919c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:6f:5a:1c:d3:95:6c:aa:c2:f5:f4:04:3d:
39:0e:88:4d:2b:1a:da:bb:90:fc:0a:59:f6:83:21:
29:5a:19:87:1a:52:33:8d:43:82:01:0f:6d:c1:a8:
63:97:ec:7f:d0:a5:9e:03:ee:89:30:ec:f1:8f:a7:
21:90:4b:87:21:2b:ad:b0:6e:f2:e5:c5:8b:0b:04:
5f:cc:a9:8b:61:a7:6e:de:02:0b:58:3a:4b:6f:78:
8b:b0:d5:c5:69:db:f4:ff:15:42:da:ba:59:05:c2:
80:c2:2b:05:2e:79:14:27:08:e3:f6:59:33:4a:b9:
59:10:50:7a:07:de:b4:10:a4:2e:a5:f0:a7:4f:b1:
8d:96:12:31:c3:e1:a3:a5:6b:d5:69:4f:60:b3:d8:
fe:60:ce:2a:c2:8b:0a:ff:fa:8b:e9:09:ae:cf:ec:
aa:6e:a2:f3:4f:a0:2c:37:3b:5a:06:30:12:67:f0:
98:3a:75:51:cc:b8:a6:2a:9c:68:37:ba:fa:cf:2f:
57:f1:f7:54:89:1a:b3:18:10:2a:49:4e:84:e7:29:
41:98:36:28:61:1f:3d:4e:44:32:4b:b4:b1:46:66:
fc:36:b5:0c:60:de:3a:1f:19:0a:fe:28:59:2b:27:
a6:b7:d1:e6:7a:59:3b:df:9a:18:ac:ec:c6:c1:ec:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FB:15:ED:FE:8B:C5:14:43:17:C0:E0:10:1D:FD:78:8D:09:19:C6
X509v3 Authority Key Identifier:
keyid:5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/LfsV7f6LxRRDF8DgEB39eI0JGcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:af:f6:1b:8e:85:89:c0:a0:26:fb:c7:dd:0e:d6:ab:97:a1:
60:c0:da:54:ce:71:1b:e6:a8:c0:cb:fd:47:12:d2:2b:1d:26:
ff:d4:59:6e:9d:df:69:44:ce:a8:00:25:04:d9:fa:86:46:e4:
5d:a6:cf:c0:1b:d3:d7:5f:82:cd:d6:0e:6a:20:10:3a:ac:b9:
c7:05:8f:ba:d2:71:01:d2:e8:42:26:97:4b:12:27:4d:7a:3b:
5d:16:10:7d:e4:cb:92:22:a7:4b:25:66:da:48:96:8f:f1:fe:
0b:6c:6b:1e:6e:22:0e:46:0e:99:70:89:27:c6:07:f9:35:91:
84:49:b3:31:36:fa:7e:b2:33:d6:68:e3:40:8c:92:b9:34:6c:
aa:6b:b9:7d:2f:fb:98:1b:e1:ea:9a:d2:d0:88:60:d8:17:0d:
07:19:6f:b6:23:b2:d1:5a:37:a0:6e:99:c2:c9:b2:3d:55:6b:
26:f5:62:12:54:23:d1:0a:d7:0b:b2:09:b2:77:cf:01:69:e4:
94:fa:3e:60:bf:fe:7f:f1:24:07:4f:ea:1f:14:0d:77:72:0b:
75:46:29:f9:64:03:02:92:76:a5:97:3d:b5:bc:d8:fa:a4:19:
73:7c:44:3a:50:8d:11:ea:78:ee:22:c7:90:51:97:f2:26:8d:
73:30:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:38:41 2025 by rpki-client