Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/LLChfyWMjj31tcS8CFktptrTU1A.roa
File: LLChfyWMjj31tcS8CFktptrTU1A.roa (raw, json)
Hash identifier: OO4mjM3Ev0MOuYWNBKEzBzf66tnf9kkDFHoXmPJYb2I=
Subject key identifier: 2C:B0:A1:7F:25:8C:8E:3D:F5:B5:C4:BC:08:59:2D:A6:DA:D3:53:50
Certificate issuer: /CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Certificate serial: 01856D93EF2283CC281E9AC2555E1B57B890
Authority key identifier: 81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/LLChfyWMjj31tcS8CFktptrTU1A.roa
Signing time: Sun 01 Jan 2023 13:44:49 +0000
ROA not before: Sun 01 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205951
IP address blocks: 185.14.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ef:22:83:cc:28:1e:9a:c2:55:5e:1b:57:b8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Validity
Not Before: Jan 1 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cb0a17f258c8e3df5b5c4bc08592da6dad35350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:1e:e8:c4:6e:e7:27:8e:23:23:9f:8a:98:
5e:6e:0b:93:ae:d3:a7:83:92:6e:80:b4:94:fc:9a:
7f:b8:6e:6b:e5:b6:b0:60:f4:ff:62:eb:ec:e2:0f:
29:2a:e6:7b:9f:20:e9:90:81:6a:f8:67:d9:b2:d9:
db:e0:23:ce:0f:b6:c5:a3:0d:db:8d:a1:75:16:0c:
5e:86:98:9c:24:c9:c4:2d:78:ce:d0:67:28:05:49:
f8:ea:aa:76:48:15:55:cf:fa:a1:b7:4a:17:cb:04:
68:bb:b3:bc:13:2f:aa:75:78:de:66:e4:de:7d:0d:
06:96:7a:3d:75:f7:bc:2a:83:7d:5b:56:8d:50:86:
cd:c3:84:3f:6e:42:ee:4a:bd:e9:50:c5:64:a4:0b:
2f:a4:f7:bf:43:e8:75:a2:33:de:04:49:e0:6e:d0:
44:00:6a:99:61:c1:03:86:65:bc:37:d6:60:39:6f:
56:b9:f2:ab:6b:c3:10:36:5c:83:df:4b:b4:45:00:
30:38:58:bd:33:22:fe:26:cd:fb:d3:53:12:b6:bd:
3f:81:4b:1c:f5:c2:eb:b8:db:3f:a8:1f:ba:32:17:
ed:2b:6b:58:48:60:e3:c9:e5:e0:c5:e3:0d:07:bb:
a7:0a:04:23:44:22:81:7f:79:82:99:ca:5e:4c:e6:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B0:A1:7F:25:8C:8E:3D:F5:B5:C4:BC:08:59:2D:A6:DA:D3:53:50
X509v3 Authority Key Identifier:
keyid:81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/LLChfyWMjj31tcS8CFktptrTU1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/gXJOewyyM65-fy6zdmlZ_Ggn-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.172.0/22
Signature Algorithm: sha256WithRSAEncryption
65:27:d6:c9:11:ac:6f:79:06:e5:cd:fc:78:78:17:49:b8:63:
2a:4a:a6:a0:95:67:e3:58:d1:3d:fc:0e:7b:0f:dd:27:5b:66:
6a:6e:93:b1:3e:00:79:fb:fc:e7:ac:8a:44:8b:5e:8d:e4:8f:
e1:2f:da:71:82:a9:37:da:ab:a4:ef:39:e2:d0:22:69:6c:b3:
2a:31:f1:52:4b:4a:f1:01:0f:a4:6c:7f:df:f0:62:2a:49:e2:
56:18:81:67:af:0c:45:e9:69:42:c0:07:2b:18:38:77:87:30:
8b:56:06:32:28:49:62:a8:a7:45:73:90:75:90:9c:e6:d7:17:
10:49:ec:19:d4:55:73:49:20:fb:4a:ce:f7:0c:ce:e4:b5:96:
e2:67:72:08:29:88:c9:26:41:21:bc:b8:f8:f2:df:0b:25:e8:
c6:78:d0:b1:b5:eb:b8:9c:90:d9:53:3e:07:2b:6e:96:07:a9:
ff:2b:57:56:ce:e0:6d:e5:5f:66:fb:93:8a:e4:09:5d:76:c8:
bb:70:cb:56:86:1f:3c:14:14:18:87:a6:be:f0:d8:ac:b6:c1:
8a:cd:2c:85:ee:f8:6f:f7:03:6d:b0:34:ee:82:be:7f:e5:05:
9c:37:76:aa:16:54:59:04:79:0e:69:9f:04:39:92:f5:ee:9b:
06:f5:54:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtk+8ig8woHprCVV4bV7iQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNzI0ZTdiMGNiMjMzYWU3ZTdmMmViMzc2Njk1OWZjNjgy
N2ZiMWIwHhcNMjMwMTAxMTM0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2IwYTE3ZjI1OGM4ZTNkZjViNWM0YmMwODU5MmRhNmRhZDM1MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvIe6MRu5yeOIyOfiphebguTrtOn
g5JugLSU/Jp/uG5r5bawYPT/Yuvs4g8pKuZ7nyDpkIFq+GfZstnb4CPOD7bFow3b
jaF1FgxehpicJMnELXjO0GcoBUn46qp2SBVVz/qht0oXywRou7O8Ey+qdXjeZuTe
fQ0Glno9dfe8KoN9W1aNUIbNw4Q/bkLuSr3pUMVkpAsvpPe/Q+h1ojPeBEngbtBE
AGqZYcEDhmW8N9ZgOW9WufKra8MQNlyD30u0RQAwOFi9MyL+Js3701MStr0/gUsc
9cLruNs/qB+6MhftK2tYSGDjyeXgxeMNB7unCgQjRCKBf3mCmcpeTOZ2/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCywoX8ljI499bXEvAhZLaba01NQMB8GA1UdIwQY
MBaAFIFyTnsMsjOufn8us3ZpWfxoJ/sbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1hKT2V3eXlNNjUtZnk2emRtbFpfR2duLXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zMzE2NTktMzBjYS00YTg4LWEyNmMt
NDQwODQ4YzBjZjcxLzEvTExDaGZ5V01qajMxdGNTOENGa3RwdHJUVTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zMzE2NTktMzBjYS00YTg4LWEyNmMtNDQwODQ4YzBjZjcx
LzEvZ1hKT2V3eXlNNjUtZnk2emRtbFpfR2duLXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQ6sMA0G
CSqGSIb3DQEBCwUAA4IBAQBlJ9bJEaxveQblzfx4eBdJuGMqSqaglWfjWNE9/A57
D90nW2ZqbpOxPgB5+/znrIpEi16N5I/hL9pxgqk32quk7zni0CJpbLMqMfFSS0rx
AQ+kbH/f8GIqSeJWGIFnrwxF6WlCwAcrGDh3hzCLVgYyKEliqKdFc5B1kJzm1xcQ
SewZ1FVzSSD7Ss73DM7ktZbiZ3IIKYjJJkEhvLj48t8LJejGeNCxteu4nJDZUz4H
K26WB6n/K1dWzuBt5V9m+5OK5Alddsi7cMtWhh88FBQYh6a+8NistsGKzSyF7vhv
9wNtsDTugr5/5QWcN3aqFlRZBHkOaZ8EOZL17psG9VTp
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:40 2025 by rpki-client