Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ldq8usz3PnNARvmmWblqhX7rMtY.roa
File: Ldq8usz3PnNARvmmWblqhX7rMtY.roa (raw, json)
Hash identifier: EREaJui3Cwoz2ItUQ4Ub6RzhOwiQewVfH27Lvt7qUVU=
Subject key identifier: 2D:DA:BC:BA:CC:F7:3E:73:40:46:F9:A6:59:B9:6A:85:7E:EB:32:D6
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 018CB4BE958DD37A5466A7BD40921FE53CE0
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ldq8usz3PnNARvmmWblqhX7rMtY.roa
Signing time: Fri 29 Dec 2023 08:43:58 +0000
ROA not before: Fri 29 Dec 2023 08:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 85.239.144.0/24 maxlen: 24
85.239.147.0/24 maxlen: 24
85.239.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:be:95:8d:d3:7a:54:66:a7:bd:40:92:1f:e5:3c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Dec 29 08:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ddabcbaccf73e734046f9a659b96a857eeb32d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:38:30:f2:ac:29:82:7f:4d:d0:17:6c:33:1a:
6d:48:61:4e:7a:09:c4:77:8d:d5:36:9b:9e:bd:1e:
08:19:8e:13:92:ab:1f:ff:6c:b7:b4:f1:7b:21:06:
9b:99:26:7f:4c:18:c0:53:21:d5:70:3e:02:4b:48:
b6:8d:31:a8:e2:36:b3:0e:1b:d8:17:5d:86:99:9c:
04:dd:f0:45:11:a8:3c:28:57:ca:76:8b:ea:7e:f3:
b5:f1:40:e6:d6:d1:97:dc:21:04:66:9d:67:23:38:
0a:34:9b:7c:5f:4f:8c:a3:92:fc:04:08:79:3c:a7:
ec:1a:09:f7:21:c0:46:87:05:9b:e7:48:bc:6b:bb:
4c:a9:e6:e2:ec:32:4c:f7:1a:ab:43:00:ad:78:a7:
f3:79:8a:df:e4:f4:96:27:f5:de:c6:2e:f8:3f:44:
c4:91:8d:cc:56:30:2d:57:34:0a:ff:43:1b:57:7d:
a6:3d:32:7d:9b:9d:8a:ee:e7:69:72:fe:42:91:ea:
ce:87:98:4b:81:68:ae:bd:c3:8d:7f:90:eb:c5:1d:
8b:48:f5:cd:11:e7:b3:e6:c5:d5:80:46:4f:35:d2:
0b:4c:9f:f0:f6:96:ed:17:d7:95:3e:46:a4:c0:d2:
03:f7:7d:cb:2b:0e:5f:33:41:c4:f5:92:cb:c0:7a:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DA:BC:BA:CC:F7:3E:73:40:46:F9:A6:59:B9:6A:85:7E:EB:32:D6
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Ldq8usz3PnNARvmmWblqhX7rMtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.144.0/24
85.239.146.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:81:f5:77:68:7c:46:93:be:56:bf:5b:ce:5e:a9:75:0d:d9:
b3:80:b9:1c:b7:98:9d:ff:db:36:33:3f:60:83:c9:d7:cd:f5:
06:f7:09:b7:2a:6a:64:fa:14:6c:c4:1f:1c:82:66:d5:5f:a6:
6d:40:5b:0b:78:c4:ca:12:b5:52:89:3d:9f:13:ac:1c:d3:df:
e3:22:4c:87:54:67:09:80:b7:5d:58:9c:c0:f3:60:c5:73:b5:
0f:ea:98:92:23:c0:c1:a7:bd:02:ae:aa:2a:8b:6d:cb:02:a6:
f4:aa:ab:bb:c2:09:0c:ca:e0:8c:32:cd:8d:1d:9e:56:d0:52:
00:e6:53:4d:5f:c2:bd:79:82:a2:4a:51:de:45:2b:9d:cf:64:
17:02:49:1e:f0:7a:00:f7:f1:9a:af:fe:7e:91:f5:17:89:56:
be:80:e0:86:58:46:b8:71:8b:39:ae:e9:09:40:af:c0:66:cf:
68:23:62:85:7a:42:d6:f7:15:bc:bf:b0:94:4c:c3:fc:d8:fd:
3d:43:0e:97:bf:36:50:e3:47:4f:df:f6:73:47:cf:8f:5a:da:
28:b3:1c:8e:fe:f6:8e:5c:66:a8:5c:5a:be:e2:61:a1:75:cf:
f6:16:1e:c2:3c:62:07:23:29:6c:31:f0:9b:f0:d7:d4:d3:6d:
4b:98:39:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:22 2025 by rpki-client