Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/lwd1n44_kiRrDhCaYyMt3-2kzoI.roa
File: lwd1n44_kiRrDhCaYyMt3-2kzoI.roa (raw, json)
Hash identifier: c6Z+kUgHwNgt9R6yZqMJDH9gXEkRya5of+vvM+1uKSA=
Subject key identifier: 97:07:75:9F:8E:3F:92:24:6B:0E:10:9A:63:23:2D:DF:ED:A4:CE:82
Certificate issuer: /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial: 018292EFC45C35E30B40CB1B20DD32A23D52
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/lwd1n44_kiRrDhCaYyMt3-2kzoI.roa
Signing time: Fri 12 Aug 2022 16:42:42 +0000
ROA not before: Fri 12 Aug 2022 16:42:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.39.242.0/24 maxlen: 24
93.113.213.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
185.170.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:ef:c4:5c:35:e3:0b:40:cb:1b:20:dd:32:a2:3d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Validity
Not Before: Aug 12 16:42:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9707759f8e3f92246b0e109a63232ddfeda4ce82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:2e:4f:39:86:f1:7c:8c:0b:3a:36:b7:10:
c9:f7:1a:01:e3:58:75:f0:9a:a4:61:c5:43:39:73:
ad:4d:0c:75:22:ee:c4:b5:95:cc:62:08:5c:b4:49:
06:ae:3e:95:9f:90:60:a1:7a:0b:bb:85:15:d4:bb:
ff:b9:e4:8b:58:14:b1:17:9f:96:ef:e7:dc:c6:46:
b9:3e:2e:cf:cc:c6:c7:97:b0:ac:77:d9:32:ed:47:
63:0f:db:e5:ed:37:b4:ad:ff:dc:fc:ea:a9:c9:d8:
76:e2:3c:5b:cb:16:2f:ba:f3:d6:51:84:e9:cb:f4:
a5:ac:02:1f:65:7d:cf:75:a7:bd:0a:63:35:83:54:
ae:89:59:c9:e6:83:c0:82:fd:2c:4c:c0:7b:50:e0:
d0:7a:a6:c6:c2:6f:83:df:29:33:99:b3:da:41:3c:
c4:a5:6a:5e:7f:cc:6a:47:36:76:6e:88:0e:6b:c9:
ee:a2:7a:3b:e4:d7:cb:93:8d:f0:d4:73:82:d7:68:
98:a4:19:3f:a9:1e:d4:05:09:20:dd:55:28:5d:7f:
9b:93:47:d2:7f:40:5d:29:d6:f0:cf:99:99:8d:77:
a9:2d:fa:de:6a:7d:71:57:22:9b:fd:51:b2:a4:f5:
5d:41:c4:6d:53:ee:9f:5b:19:ff:d0:ec:a5:30:42:
ef:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:75:9F:8E:3F:92:24:6B:0E:10:9A:63:23:2D:DF:ED:A4:CE:82
X509v3 Authority Key Identifier:
keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/lwd1n44_kiRrDhCaYyMt3-2kzoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.242.0/24
89.40.35.0/24
93.113.213.0/24
185.170.65.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ef:07:3e:6f:60:ad:78:7b:57:96:e4:6b:61:d7:dc:66:4f:
05:8d:74:4a:31:cf:6f:ec:d5:da:82:89:fd:65:23:89:b0:72:
a2:92:98:44:5c:ce:fa:a6:a2:19:52:6a:e6:b9:f7:ed:10:75:
57:6c:e8:b0:35:77:0f:c4:a0:b2:2b:5e:86:66:5f:4d:a0:0d:
df:90:07:bb:cd:bb:3f:a4:f2:3a:fc:a4:ca:85:83:fc:de:af:
fb:d2:d0:d3:07:e4:cd:27:8b:0b:38:f5:b4:d7:6e:e2:84:74:
bb:6d:2f:de:a7:91:42:15:22:20:ff:f7:59:a0:ca:6d:93:41:
35:1e:0b:dc:8f:20:96:75:a4:c5:fc:d0:97:98:06:2d:d9:89:
1c:9e:45:79:5c:6d:4a:41:d2:2c:4b:29:b6:4d:47:0c:ca:27:
2c:ff:59:c4:cf:0b:d2:76:5b:c0:c5:2a:d6:62:81:40:40:23:
8d:15:55:ff:6c:e8:f6:3f:29:2e:ee:f2:30:9c:d3:e4:5c:b5:
54:9a:3e:21:30:f6:65:42:70:64:b9:e4:ed:67:8e:21:40:1a:
1b:c1:e7:86:a3:e5:77:b8:0c:56:43:b2:f7:6f:ed:53:ee:44:
64:f2:a5:df:81:cd:d8:67:f4:38:7b:87:21:f1:23:c0:b1:49:
65:ef:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:50 2025 by rpki-client