Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/LIB9b_pdsowOb3swO2SXB6u7i2E.roa
File: LIB9b_pdsowOb3swO2SXB6u7i2E.roa (raw, json)
Hash identifier: Fq6gRPatBfRsQ60+MATf+0FMsTpmW0IIa0ZnONXxkmU=
Subject key identifier: 2C:80:7D:6F:FA:5D:B2:8C:0E:6F:7B:30:3B:64:97:07:AB:BB:8B:61
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 018A459D3399A0CACBBBA86DAA93B5EF202D
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/LIB9b_pdsowOb3swO2SXB6u7i2E.roa
Signing time: Wed 30 Aug 2023 08:44:04 +0000
ROA not before: Wed 30 Aug 2023 08:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 185.7.239.0/24 maxlen: 24
185.7.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:9d:33:99:a0:ca:cb:bb:a8:6d:aa:93:b5:ef:20:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Aug 30 08:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c807d6ffa5db28c0e6f7b303b649707abbb8b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:bc:55:1d:0d:bf:b0:46:4c:51:37:27:42:
6d:06:a0:0d:0f:6e:83:bb:c7:7c:f2:06:ae:75:5f:
37:83:7f:63:34:d1:f9:e3:b0:8b:d9:65:d3:bc:f1:
c1:1a:78:2c:a8:bb:55:f3:29:75:20:30:db:5c:10:
c8:be:84:10:7c:7d:87:8f:bc:98:69:b8:d8:b6:bf:
1b:f1:60:af:ec:3c:84:9e:42:28:ef:7e:5e:dd:69:
90:af:ff:72:f3:5b:1c:8a:b4:89:77:a8:2d:73:3b:
75:82:73:aa:8b:b1:cc:11:f5:8e:af:e5:d7:c2:da:
23:29:55:01:c5:57:32:9d:99:67:19:88:2b:98:f8:
71:df:d1:df:51:06:a3:c1:c0:8b:10:7d:68:df:e6:
e6:f9:1a:1b:86:5f:89:b6:80:7d:6b:dd:6b:ab:c7:
3a:2c:33:69:d2:3f:cc:f8:29:ec:d9:21:3f:01:f7:
f4:78:52:6b:dd:77:16:f9:89:5e:f3:e3:cd:04:c4:
ea:2f:b0:9f:49:f8:59:2b:65:5e:3b:ce:a1:a2:35:
f6:22:14:c9:e9:5d:01:f1:22:08:31:59:ee:98:88:
6b:13:b2:65:9e:c3:de:51:d6:4a:81:7d:c7:57:0a:
3f:64:af:ea:5c:fd:9a:a6:66:38:95:d8:44:f1:ed:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:7D:6F:FA:5D:B2:8C:0E:6F:7B:30:3B:64:97:07:AB:BB:8B:61
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/LIB9b_pdsowOb3swO2SXB6u7i2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.238.0/23
Signature Algorithm: sha256WithRSAEncryption
18:64:47:72:67:e8:97:a4:4b:83:86:d5:58:97:cc:00:a7:54:
0e:8d:19:46:65:8f:8f:b7:79:dc:40:0c:00:aa:b6:e9:ab:c7:
8c:4a:01:c3:0b:c4:fc:97:bc:3a:f1:86:95:2d:21:5d:b5:67:
fd:cb:41:e5:35:e8:35:47:fc:2d:5a:61:f6:4f:8c:57:da:bc:
21:18:68:25:3c:19:59:df:5c:65:19:52:fa:28:40:9b:9d:ed:
27:e2:95:ad:10:04:4e:62:13:03:d6:3a:16:f9:85:3b:89:2a:
54:09:7b:20:7d:a5:7b:cc:86:13:11:6a:ce:34:5b:3c:74:de:
d9:0f:81:73:f9:46:e4:7e:fe:09:18:5c:49:46:34:d9:6d:b1:
54:0d:23:b5:aa:a9:21:c0:10:9d:ff:e1:83:90:29:e8:d9:d5:
0d:2d:7f:28:05:d5:fb:06:15:ad:25:70:95:c0:21:c2:f4:aa:
67:9f:12:7f:6a:c3:6a:92:25:42:bf:ce:d9:54:3d:f5:2d:5d:
a2:ed:3c:fa:b0:69:52:10:20:05:10:c7:9d:a9:8a:f4:a3:aa:
a2:55:36:d2:ad:67:cc:a5:b1:ec:f8:5a:df:70:25:fa:fd:ad:
61:98:24:32:4a:73:3f:be:e4:84:9a:44:6c:1d:67:17:3b:fa:
c2:21:6c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:03:23 2025 by rpki-client