Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/lC-MwQo01Gp82RT3mnQhOnXTNVo.roa
File: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (raw, json)
Hash identifier: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=
Subject key identifier: 94:2F:8C:C1:0A:34:D4:6A:7C:D9:14:F7:9A:74:21:3A:75:D3:35:5A
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA491D62B5EA8ACCA36AE7CCB2ACED
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/lC-MwQo01Gp82RT3mnQhOnXTNVo.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31197
IP address blocks: 81.209.144.0/22 maxlen: 22
81.209.179.0/24 maxlen: 24
81.209.185.0/24 maxlen: 24
81.209.200.0/23 maxlen: 23
82.197.138.0/24 maxlen: 24
82.197.152.0/21 maxlen: 21
83.125.12.0/22 maxlen: 22
83.133.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:49:1d:62:b5:ea:8a:cc:a3:6a:e7:cc:b2:ac:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=942f8cc10a34d46a7cd914f79a74213a75d3355a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:3c:b5:d3:d5:8d:c6:1b:97:48:0f:fc:8a:
03:bd:08:f8:1d:cd:7f:ba:05:fb:30:e9:1c:f2:d8:
cf:d5:13:47:ec:05:da:cf:6a:19:67:95:eb:ca:c1:
90:b0:01:d4:5a:e3:f1:0e:0a:ff:a4:c5:1b:80:22:
1d:14:39:6f:1b:ff:9b:4d:a5:f6:a0:ff:36:ff:c9:
a3:5c:7a:04:85:4e:68:2c:cb:0c:3e:7d:d1:b5:78:
b2:1e:e7:6d:26:76:ce:b2:50:52:c7:2d:74:e8:a1:
ec:db:12:d7:17:6e:31:3c:57:be:68:ee:ff:f2:31:
f3:f4:7b:8a:a0:92:96:b2:13:38:bb:d2:be:67:7a:
e4:29:a6:c9:3e:d9:1d:22:85:7f:34:ff:4d:e5:2d:
72:39:68:ad:a9:1f:83:f0:3f:7b:70:4a:21:3a:d9:
9e:e0:3e:69:26:83:dd:f2:f7:f9:fe:41:91:8d:19:
82:1d:d1:25:ca:46:46:89:ed:37:25:db:62:ca:03:
f2:1d:6b:5d:5e:f0:84:3e:a6:23:7e:f9:70:0b:82:
1f:6f:8e:4e:19:28:8e:12:e0:41:b7:c1:2e:48:ed:
df:7a:a4:09:10:21:74:16:4d:2e:31:ad:d7:00:ee:
05:61:cb:17:d0:75:8e:7e:d8:53:76:c9:76:fe:00:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2F:8C:C1:0A:34:D4:6A:7C:D9:14:F7:9A:74:21:3A:75:D3:35:5A
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/lC-MwQo01Gp82RT3mnQhOnXTNVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.209.144.0/22
81.209.179.0/24
81.209.185.0/24
81.209.200.0/23
82.197.138.0/24
82.197.152.0/21
83.125.12.0/22
83.133.184.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:8e:22:7c:77:5d:dc:5f:4c:ba:0a:3d:04:20:2f:fc:d0:80:
63:d6:4a:f5:16:e3:bf:fb:a0:3e:87:35:32:81:27:dc:0c:38:
2f:02:fd:7c:e5:ee:04:51:f7:b1:04:a5:01:1e:dd:11:10:07:
29:4f:80:09:44:d0:54:6f:b0:cc:c4:3f:e3:8d:10:e9:8b:be:
35:61:33:6f:93:44:2a:5c:98:df:78:26:10:b3:91:c1:89:75:
6f:a1:6b:76:b2:fe:8f:52:b5:62:3f:a9:94:44:72:0b:52:84:
3c:77:c4:34:25:7c:9a:d9:4b:c6:1c:70:51:ba:45:9c:a8:08:
00:9d:d6:53:cd:2d:51:ea:a2:07:7d:40:1f:c2:26:39:6f:1e:
af:bc:10:88:6f:7a:d0:71:af:e6:23:27:9a:83:eb:ff:e1:88:
f2:d6:0c:c8:68:99:76:71:4e:a2:4d:d8:de:bd:bd:75:ed:89:
73:66:16:04:82:cb:22:ee:ab:e2:a5:5d:e7:d5:20:25:dd:8e:
2a:30:c1:59:8b:04:5b:43:4e:c9:70:c1:27:1f:f8:2f:0f:21:
42:3e:fc:d2:12:f7:c2:7e:10:2b:1f:89:6c:56:68:01:93:3e:
c3:e7:84:46:cd:a3:af:48:0e:6d:e8:4a:98:f4:55:47:79:a2:
fe:e6:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:55:26 2025 by rpki-client