Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/lqRpbscM182PANHFGsqMxFenQsU.roa
File: lqRpbscM182PANHFGsqMxFenQsU.roa (raw, json)
Hash identifier: KSrFDxAg8q5YynrUWiOm6jdQGqkWKL+PdBqVLGCQ1I4=
Subject key identifier: 96:A4:69:6E:C7:0C:D7:CD:8F:00:D1:C5:1A:CA:8C:C4:57:A7:42:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019421B18711C273A7A8460252EE8D44491A
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/lqRpbscM182PANHFGsqMxFenQsU.roa
Signing time: Wed 01 Jan 2025 11:47:50 +0000
ROA not before: Wed 01 Jan 2025 11:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47108
IP address blocks: 195.190.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:87:11:c2:73:a7:a8:46:02:52:ee:8d:44:49:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Jan 1 11:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96a4696ec70cd7cd8f00d1c51aca8cc457a742c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:aa:01:80:6b:e0:c1:d3:05:56:b5:e6:f0:
36:c3:0e:66:cb:d2:59:40:97:97:77:ea:b8:30:1a:
06:eb:40:59:2e:ab:cf:6d:27:6a:0a:df:5f:18:ba:
56:06:e7:c7:8e:8f:05:64:22:4f:9a:92:70:0e:e2:
93:1f:a5:a1:09:49:2d:81:53:4b:a8:2a:7b:12:12:
66:a7:48:e3:67:f0:6a:02:18:cd:5e:06:72:09:1e:
8a:cd:dc:28:9c:ee:96:7e:c9:19:42:3a:42:d2:0d:
b7:95:64:fb:d5:6f:60:70:54:1b:c4:86:4a:4a:77:
85:c6:df:c7:93:82:4e:89:0b:f9:ee:03:dc:9b:15:
9d:9b:0c:af:39:57:54:66:eb:a9:49:1d:e2:78:3d:
2c:d4:fb:ec:8c:92:92:69:90:6f:f1:d8:61:a6:08:
c4:14:66:a8:b6:5b:c9:0d:23:6f:17:2b:e3:a0:3e:
7c:73:c3:a7:3a:97:35:56:fb:35:a7:be:66:ec:7b:
67:d0:c1:81:5f:c7:da:8a:50:7e:fb:7a:36:32:f5:
4f:6f:c6:39:5c:d0:ad:9c:8d:ab:7b:39:e8:ce:7d:
76:96:72:68:2f:01:b9:20:69:b7:31:d4:ba:40:32:
78:0d:84:c1:32:2c:6d:4e:29:b4:13:e2:6e:65:45:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A4:69:6E:C7:0C:D7:CD:8F:00:D1:C5:1A:CA:8C:C4:57:A7:42:C5
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/lqRpbscM182PANHFGsqMxFenQsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.7.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6b:91:e2:ec:2f:4f:fb:8f:53:4d:84:5b:ae:40:c3:0f:bd:
4e:4c:38:ba:81:67:e4:3e:dd:3f:6f:bf:b3:7e:8c:7a:f5:05:
b3:e4:28:ef:94:13:45:4b:4d:f0:35:5f:0f:34:1f:44:73:a7:
cf:5e:5a:f2:5a:3f:7e:f2:92:15:b9:74:e3:51:10:df:68:37:
4b:17:86:e8:c6:1a:fa:8b:e9:aa:fb:c3:fc:24:84:0b:dd:3a:
00:ab:c6:52:99:d4:8e:d3:24:3b:ed:db:57:38:39:e2:88:f9:
a2:e3:6b:a5:88:ca:91:76:6c:d5:66:78:56:df:6b:06:6b:1e:
8d:15:4f:bf:a0:75:6e:0b:13:13:c0:a7:1f:47:7d:4d:87:6c:
39:e8:86:60:b6:96:52:f6:99:0c:77:13:2a:2e:b5:6d:59:11:
92:20:7e:df:89:a7:71:3c:58:21:5f:33:a3:d9:15:14:bc:9b:
01:52:d8:43:4c:f5:b8:39:84:cf:c6:51:5a:98:8b:4f:2c:90:
1f:19:46:19:e0:f6:56:84:7e:a0:ed:a8:c0:4e:0d:76:f3:70:
2f:5a:94:88:47:ba:00:b5:a1:96:d8:d9:83:74:96:83:56:97:
fb:21:b0:ac:1f:f2:6a:94:f2:5f:cc:c1:34:68:db:0d:bd:81:
35:cd:7e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:21 2025 by rpki-client