Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa
File: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (raw, json)
Hash identifier: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=
Subject key identifier: 95:90:1A:91:DA:7F:04:B1:BF:AC:F0:A3:D6:8A:3D:8B:8A:4F:BF:64
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 0194221F6AC74063403923F0298A7AF908AC
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.134.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6a:c7:40:63:40:39:23:f0:29:8a:7a:f9:08:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95901a91da7f04b1bfacf0a3d68a3d8b8a4fbf64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:b6:27:b4:d3:2f:ba:47:9e:b3:63:87:a0:
79:f5:f8:65:3a:49:26:70:4c:e6:a9:6b:55:c8:ba:
b1:e8:64:19:57:4d:df:4d:8c:bb:2c:da:86:1e:d5:
29:47:cd:c6:39:65:75:87:b1:b0:ae:8e:31:26:68:
e2:68:9c:d5:a5:fe:8e:93:fe:fe:21:ed:c6:03:8f:
c6:31:2a:8a:db:19:03:89:3d:7d:7d:73:bb:3c:76:
ea:81:f3:e5:e7:ef:11:9e:5f:fe:3f:47:ea:cc:84:
a0:22:fc:9a:8d:b4:33:9c:ac:77:bc:c3:8f:49:ef:
71:5d:7c:b6:af:50:dc:8e:7a:37:fa:e6:bf:92:39:
61:68:cf:7c:95:62:8e:56:4d:0c:bc:1b:21:73:c8:
c3:12:02:fb:55:cd:b3:b0:e2:40:ad:93:38:53:9b:
61:7e:69:7a:de:8f:c3:19:6d:2c:e1:37:77:19:97:
ff:9d:75:c9:9d:71:d7:f5:f2:c1:60:84:1e:92:e0:
a1:ab:1e:62:96:71:29:b7:49:30:fa:b2:16:b2:c4:
26:00:1d:eb:20:5f:67:11:4e:cc:58:f5:7b:54:d2:
54:16:17:62:c9:f0:4a:79:d0:8c:2b:63:59:20:f4:
61:b8:58:bb:86:84:63:cc:19:f8:b2:9d:13:32:28:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:90:1A:91:DA:7F:04:B1:BF:AC:F0:A3:D6:8A:3D:8B:8A:4F:BF:64
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.79.0/24
Signature Algorithm: sha256WithRSAEncryption
95:70:55:7a:45:22:99:93:c7:41:65:4f:91:70:66:be:c8:fd:
49:74:e7:d4:84:6d:53:3d:d4:60:ac:fc:49:4c:aa:8c:30:68:
4a:c2:fe:59:cb:45:c2:ad:e6:06:51:62:e2:89:69:c3:dc:79:
fe:e5:10:0b:0b:93:4c:15:cb:3e:9f:a6:b7:d4:f8:89:c4:05:
45:16:ce:44:4a:d7:19:46:5b:d0:d6:35:f8:ee:74:9d:11:74:
ac:59:6d:84:0e:2f:2c:82:cb:db:26:25:b2:77:7e:48:86:4d:
08:61:b0:2c:c4:e7:93:39:e6:74:7a:e0:b0:36:b3:ac:b7:08:
00:31:87:eb:91:3f:b9:7a:84:03:f7:ff:59:bb:f6:91:07:63:
a2:47:d7:21:8c:9a:e0:3f:92:f9:ba:d2:05:83:0f:78:fd:83:
8a:13:69:8f:86:eb:c7:83:26:de:66:7a:57:19:da:2a:66:e2:
20:9b:d5:7d:aa:cd:4f:bd:22:bd:21:61:ab:fd:3a:c2:91:87:
0c:88:d6:8d:f1:6a:6f:f3:be:97:f7:6d:82:9c:83:83:ea:97:
e9:77:1d:d9:b2:76:ff:77:8b:57:7d:9f:34:65:d1:cf:12:6e:
35:2b:a9:65:f1:26:c3:a8:18:03:d8:c5:7a:2e:44:16:6c:1e:
de:9d:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:50 2025 by rpki-client