Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/LvBpPPlNbR6fZtOPe7mxLcUlk_0.roa
File: LvBpPPlNbR6fZtOPe7mxLcUlk_0.roa (raw, json)
Hash identifier: hlG5+YwJ5bcze73fpav4/01xhkqihIAot0zGs8fTxrk=
Subject key identifier: 2E:F0:69:3C:F9:4D:6D:1E:9F:66:D3:8F:7B:B9:B1:2D:C5:25:93:FD
Certificate issuer: /CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Certificate serial: 018570F0D2598C3A63890109DF48EF970782
Authority key identifier: 80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/LvBpPPlNbR6fZtOPe7mxLcUlk_0.roa
Signing time: Mon 02 Jan 2023 05:25:08 +0000
ROA not before: Mon 02 Jan 2023 05:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62353
IP address blocks: 213.159.16.0/22 maxlen: 22
213.159.16.0/21 maxlen: 21
213.159.20.0/22 maxlen: 22
185.22.14.0/23 maxlen: 23
185.22.12.0/23 maxlen: 23
185.22.12.0/22 maxlen: 22
185.81.8.0/22 maxlen: 22
185.81.8.0/23 maxlen: 23
185.81.11.0/24 maxlen: 24
185.81.10.0/23 maxlen: 23
185.81.8.0/24 maxlen: 24
2a00:5d60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:d2:59:8c:3a:63:89:01:09:df:48:ef:97:07:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Validity
Not Before: Jan 2 05:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ef0693cf94d6d1e9f66d38f7bb9b12dc52593fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:52:bf:1e:e3:9f:a2:83:74:f8:75:0a:89:
bb:28:d1:75:8f:c7:3c:9d:4b:29:40:51:17:38:fa:
f4:fb:8d:8c:37:8d:ba:86:ff:84:78:7c:80:9c:2a:
a8:f4:6c:48:56:62:46:be:e5:42:6f:9a:1a:b6:c3:
d5:2c:6f:2f:69:b0:0f:3e:76:bc:24:58:32:12:b5:
64:1f:90:1a:7b:66:da:4f:7b:b1:f5:29:92:00:f0:
62:c0:69:c9:4a:43:42:d9:c3:a8:46:4a:86:f7:8a:
37:8f:f3:78:f5:bf:6c:67:8b:9a:93:78:39:ce:3d:
42:99:e1:b9:66:62:5b:9b:8c:3d:35:9a:a0:1d:3b:
b9:79:4f:a3:2c:5d:ea:c1:40:75:11:4d:b7:78:9e:
64:94:b8:52:ca:6b:8e:22:e7:16:f6:2f:a0:4d:81:
d3:04:f5:ae:1e:97:54:ee:8b:2c:da:2f:3d:f1:73:
0c:77:9f:23:a7:65:f1:aa:3a:60:18:74:ea:16:9c:
4f:6d:c7:4b:e1:9b:ea:87:23:7f:f3:68:60:c1:65:
72:b8:0f:08:b4:f3:93:47:2a:f7:0d:3e:3c:b1:8c:
6f:8a:7b:be:12:33:b4:3c:89:7b:d4:10:b8:b4:d7:
a3:b3:68:a8:bd:46:a6:e0:a6:35:f4:fb:96:93:df:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:69:3C:F9:4D:6D:1E:9F:66:D3:8F:7B:B9:B1:2D:C5:25:93:FD
X509v3 Authority Key Identifier:
keyid:80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/LvBpPPlNbR6fZtOPe7mxLcUlk_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.12.0/22
185.81.8.0/22
213.159.16.0/21
IPv6:
2a00:5d60::/32
Signature Algorithm: sha256WithRSAEncryption
94:cf:7a:bd:15:52:4e:8d:14:a3:64:fa:cf:43:9e:2c:6b:bc:
a5:db:b3:c1:20:3a:3a:fc:fe:1f:f4:d3:27:7b:d6:58:08:74:
df:65:32:92:6a:90:d8:a9:76:e8:be:72:82:fb:27:ae:ea:3b:
16:5e:e1:36:ee:12:6c:a8:4c:cc:9c:3b:03:e2:c6:df:a8:5f:
89:80:97:36:73:10:7a:99:1a:75:e3:b2:79:83:2d:a4:73:89:
04:d2:a2:3e:f0:fd:42:41:22:9a:fd:5b:7d:09:73:a4:4a:f6:
cc:ee:11:d0:83:81:01:05:29:07:00:6a:18:24:4e:be:c0:19:
2f:d0:88:b2:0c:7c:ec:72:e0:67:28:52:45:0f:57:43:36:66:
e4:0a:f9:e1:be:e6:d0:0b:3e:78:5b:59:55:5c:8c:d2:3b:dc:
d7:cd:9d:7e:5a:4e:ba:d9:0e:ac:bb:0f:1c:76:75:cc:a2:2c:
57:df:02:90:4e:fb:38:6d:01:4e:68:d9:17:e1:de:08:17:80:
83:1f:a4:93:05:b1:d8:11:e5:5f:7e:b6:e9:24:ba:1b:97:fa:
ad:5f:ca:0d:29:32:5a:f4:67:76:fd:1c:0f:34:8e:30:e8:20:
85:9a:33:1d:11:e7:6e:db:bd:e4:c9:f0:bc:d6:b7:40:8f:87:
6a:1a:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:06 2024 by rpki-client on console-ams.rpki-client.org