Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/LIOiMNle0vsipx0T1V6aKGTU24U.roa
File: LIOiMNle0vsipx0T1V6aKGTU24U.roa (raw, json)
Hash identifier: 1KJvdL1wmyRojBeJyRsEQwf+KBGdNnm/q4xYqP+PnmE=
Subject key identifier: 2C:83:A2:30:D9:5E:D2:FB:22:A7:1D:13:D5:5E:9A:28:64:D4:DB:85
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 0194206801998B7E9BDF8B17DF13840C1B18
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/LIOiMNle0vsipx0T1V6aKGTU24U.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8601
IP address blocks: 195.138.160.0/19 maxlen: 19
195.138.160.0/22 maxlen: 22
195.138.164.0/24 maxlen: 24
195.138.165.0/24 maxlen: 24
195.138.166.0/24 maxlen: 24
195.138.167.0/24 maxlen: 24
195.138.168.0/24 maxlen: 24
195.138.169.0/24 maxlen: 24
195.138.170.0/24 maxlen: 24
195.138.171.0/24 maxlen: 24
195.138.172.0/24 maxlen: 24
195.138.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:01:99:8b:7e:9b:df:8b:17:df:13:84:0c:1b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c83a230d95ed2fb22a71d13d55e9a2864d4db85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:9c:8b:b4:75:2b:37:50:bd:31:ab:db:cd:
19:a8:af:fd:68:2e:56:45:2d:11:b0:e1:a2:2a:11:
28:fd:84:31:e7:82:e9:4c:44:dd:5b:53:2c:ba:1b:
b0:31:11:90:9c:51:45:96:11:67:0d:52:0a:e6:21:
b4:27:cb:ad:c2:f7:4b:c4:39:bd:ff:69:30:3d:00:
be:79:2b:a9:69:de:3f:e2:11:58:e6:30:21:aa:a5:
4f:dd:f2:06:dc:12:20:ff:e1:79:e5:07:c8:b8:79:
87:99:38:c2:1e:0c:b7:f7:47:43:62:ef:9b:f1:67:
da:7f:c5:f7:02:01:f7:71:9d:12:13:72:d8:3b:a7:
53:68:e1:2d:d7:25:0e:8e:ec:98:a3:ba:04:96:c9:
df:4d:35:ea:dd:68:ba:09:f2:04:86:72:62:45:92:
72:a7:8e:5a:05:d0:05:a4:89:f7:07:1a:0b:4c:a9:
fd:36:6b:12:b8:b3:35:b8:de:cb:3a:5d:fa:23:31:
b8:3b:84:8f:16:82:b0:22:4e:f7:c7:6c:d0:6d:97:
05:14:e0:4e:cd:23:4a:5e:0f:02:68:30:72:73:13:
44:44:30:6a:4f:92:5b:2e:87:c6:76:1d:24:e4:eb:
ad:68:04:ba:4c:41:6f:30:3b:3d:78:3c:5e:db:2d:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:83:A2:30:D9:5E:D2:FB:22:A7:1D:13:D5:5E:9A:28:64:D4:DB:85
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/LIOiMNle0vsipx0T1V6aKGTU24U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.160.0/19
Signature Algorithm: sha256WithRSAEncryption
99:21:ce:4f:5f:e3:d2:ae:37:ff:76:21:33:33:8c:48:17:0f:
1a:98:36:f7:91:8e:21:46:3f:a3:b0:ac:fa:47:53:ea:68:0a:
c3:12:76:a9:63:3d:07:53:24:e8:80:1e:b6:1e:9b:3d:af:28:
13:ad:35:ef:44:43:70:ee:1f:cb:bb:df:11:e8:c9:9b:a4:af:
57:eb:44:62:c7:49:04:f8:7e:58:3b:ef:86:b6:ed:d1:1b:3f:
c0:45:4f:3e:78:a2:ee:ca:4e:93:bd:ee:25:ff:53:a2:db:74:
3b:7f:0e:15:a2:d1:fc:5e:3c:46:74:73:36:3e:db:1c:8b:11:
1e:73:68:50:f7:31:ed:e2:ca:4c:5c:24:25:5b:c0:33:21:ec:
bf:04:fa:f3:46:02:bc:4d:87:ea:59:5c:dc:72:97:93:a3:a7:
8e:f4:76:c9:48:94:d5:35:d9:6e:06:c0:eb:d6:83:0e:a3:ba:
c8:94:49:18:87:cf:47:80:68:48:14:ae:c1:dc:75:40:dd:ab:
2c:2e:6b:68:53:34:c6:db:05:fd:96:ab:b9:51:06:3a:5c:25:
b5:f8:06:b0:d8:fe:8b:3e:22:e4:88:e6:3a:b1:9e:2e:a3:e5:
70:85:a3:92:2d:ba:94:38:f1:ac:76:57:69:a2:7b:fa:36:da:
b4:1f:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:41 2025 by rpki-client