Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/LHgTxuEBGer7wpivWzR7cY-rDq4.roa
File: LHgTxuEBGer7wpivWzR7cY-rDq4.roa (raw, json)
Hash identifier: jaRT1u9CNM5xcR3BqsLK0np/RQZpj0z6UKNWVRl2QUo=
Subject key identifier: 2C:78:13:C6:E1:01:19:EA:FB:C2:98:AF:5B:34:7B:71:8F:AB:0E:AE
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 1240696E
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/LHgTxuEBGer7wpivWzR7cY-rDq4.roa
Signing time: Sat 01 Jan 2022 04:01:49 +0000
ROA not before: Sat 01 Jan 2022 04:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205403
IP address blocks: 145.14.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306211182 (0x1240696e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 04:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c7813c6e10119eafbc298af5b347b718fab0eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:ab:52:6e:d5:82:31:ce:cd:e2:44:a9:11:
11:95:92:6e:4b:cc:2f:77:c8:9e:46:1f:91:31:7e:
6f:ba:8f:2b:8c:aa:3d:9b:55:da:b0:13:1f:79:0e:
e1:d6:03:a9:5a:9e:45:af:06:7d:66:bd:7d:17:1b:
24:36:c6:a6:0e:89:98:80:f6:1f:e6:aa:09:9d:f3:
50:1c:f2:ec:aa:34:f3:4a:99:f6:e3:76:f0:4b:a4:
2e:d8:8a:16:c9:ba:0e:8f:d4:40:f7:42:c1:3d:e3:
5d:de:6f:af:a9:a8:0b:09:42:1f:c0:53:22:49:42:
33:94:7f:9a:a4:00:40:45:59:d5:d2:71:af:72:5f:
16:33:c9:07:63:8c:7c:5c:15:ee:bf:d7:49:4d:cd:
60:8b:42:81:1f:a2:d3:a9:87:da:43:96:c1:57:e8:
b4:2a:7b:20:d6:63:3f:a0:a1:75:d9:a3:f9:06:ec:
3c:35:62:0f:6e:2a:4a:d2:89:c3:9e:ba:a1:40:18:
98:ce:70:c5:1f:1c:4a:12:02:90:db:0d:79:e8:e7:
10:fc:31:bd:2e:69:f0:19:32:2c:58:99:a8:e4:56:
88:82:63:5a:08:b9:eb:f9:a7:6f:06:7d:06:fc:1d:
3a:ed:e7:3d:79:e1:53:85:78:75:f2:25:cb:7a:d6:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:13:C6:E1:01:19:EA:FB:C2:98:AF:5B:34:7B:71:8F:AB:0E:AE
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/LHgTxuEBGer7wpivWzR7cY-rDq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:55:09:dd:43:85:8b:39:9a:9c:55:6d:6e:85:a7:4f:7e:2c:
ca:9d:22:e6:55:d1:ee:ef:42:02:74:b2:4b:2b:61:36:21:2e:
95:15:62:ce:c3:42:c9:2b:fd:d9:5c:c0:36:fe:67:b0:28:32:
aa:77:8d:2f:21:1b:5e:2e:95:9b:a8:fd:f6:1e:d4:ba:f2:5d:
ee:71:6e:27:d7:3a:7d:40:9d:b8:01:f1:2b:47:f7:c9:a1:cf:
53:3e:7f:d3:d8:f1:ec:7f:a4:54:60:2a:87:52:96:f7:2e:47:
a6:2a:57:2d:3a:21:6e:ae:47:3e:c3:21:41:0b:69:6c:87:75:
22:2b:ce:16:c7:40:d2:d2:fe:ef:0b:48:87:3e:b2:52:93:1b:
56:8a:af:d0:4e:35:d0:b2:27:e3:6d:90:74:9f:24:e7:d9:7f:
79:4f:12:e7:98:09:79:f0:85:dc:2a:c9:ef:68:21:dd:5f:f6:
0d:35:72:a9:e6:86:a3:80:67:87:c9:d4:14:58:28:67:c1:63:
6d:73:1e:d1:28:94:f4:bb:9c:69:7f:04:ae:e0:75:47:7f:07:
1c:5d:3f:76:8d:77:c1:06:69:b7:e6:3f:6e:13:9d:45:6a:01:
ac:42:cc:c0:35:97:a0:0a:e5:ca:28:1f:5e:ee:d3:e7:5a:a1:
0e:65:e3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:28:32 2025 by rpki-client