Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/LrktV_MNLgMuzH072PMIh7VuEn4.roa
File: LrktV_MNLgMuzH072PMIh7VuEn4.roa (raw, json)
Hash identifier: shYF8grlz0KlYGSJ/aVE66ppgDECTuvjQ5MpA1IvAJ0=
Subject key identifier: 2E:B9:2D:57:F3:0D:2E:03:2E:CC:7D:3B:D8:F3:08:87:B5:6E:12:7E
Certificate issuer: /CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Certificate serial: 019421B24830A5743D54676F634519BD99AD
Authority key identifier: 17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/LrktV_MNLgMuzH072PMIh7VuEn4.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197890
IP address blocks: 185.94.252.0/24 maxlen: 24
185.94.253.0/24 maxlen: 24
2a03:e300::/32 maxlen: 32
2a06:4580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:48:30:a5:74:3d:54:67:6f:63:45:19:bd:99:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eb92d57f30d2e032ecc7d3bd8f30887b56e127e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:66:9b:63:ec:a2:b6:3f:04:76:cd:ba:06:
90:05:a7:01:da:66:92:bd:5e:4d:7f:46:f2:96:15:
12:00:32:12:db:42:84:4c:00:82:54:6c:95:3a:b7:
eb:a2:fd:ad:49:2d:c0:5e:5f:cb:b9:f9:db:f7:dd:
b2:80:9e:ad:a7:78:d3:38:7f:eb:af:a4:2e:78:6e:
a6:30:9a:2e:6c:c4:15:63:0a:f4:ae:a9:0e:b3:3f:
83:14:65:a5:a3:cd:12:04:ef:71:51:a5:ad:f2:5f:
82:05:9f:89:85:a7:72:78:ae:6e:2d:56:22:cc:2d:
c5:cf:c5:9b:13:ff:59:5c:f4:e8:2b:e0:88:50:4f:
07:9a:5a:b9:e7:84:0b:cd:88:80:29:66:51:8a:cb:
65:ca:e7:20:bd:40:46:db:b0:f7:de:5d:ee:b1:79:
ae:c2:68:9a:55:3e:80:1b:80:a0:c8:36:8a:2b:e0:
d8:a2:ff:8f:dd:aa:a9:8b:52:99:9c:96:97:86:32:
d2:d2:53:d2:4f:55:34:b5:86:b2:b3:80:2a:fb:72:
ec:80:8d:c3:92:27:28:02:3c:4f:11:22:63:d5:4b:
15:3e:1e:c2:1c:7d:fe:87:fb:ec:ce:fa:18:87:01:
be:c1:a4:67:31:42:78:8c:34:83:ea:12:b5:04:11:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:2D:57:F3:0D:2E:03:2E:CC:7D:3B:D8:F3:08:87:B5:6E:12:7E
X509v3 Authority Key Identifier:
keyid:17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/LrktV_MNLgMuzH072PMIh7VuEn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.252.0/23
IPv6:
2a03:e300::/32
2a06:4580::/29
Signature Algorithm: sha256WithRSAEncryption
47:23:7e:e5:43:d6:cb:8c:b7:90:2d:b4:90:38:75:b8:27:15:
9e:a9:a1:72:40:5b:6c:2e:1b:99:21:00:d1:dd:9f:f8:9a:b2:
44:ec:75:3e:1b:82:c2:ed:88:7e:33:57:86:01:98:46:8f:bf:
91:a4:6f:50:07:31:c4:16:69:a3:7b:65:c0:82:a5:4b:37:51:
7e:a1:ae:58:7f:02:6a:be:40:0e:4b:f6:40:4f:44:61:f4:ca:
6e:94:05:29:21:59:55:b0:28:8d:e3:0c:b5:90:26:11:0d:26:
18:a9:b4:98:f4:2f:86:cb:85:30:70:42:19:57:9e:63:93:83:
ef:21:cd:33:97:a2:e2:d8:c9:2c:13:9d:86:6b:bc:40:e0:7f:
e1:f5:f3:eb:dc:58:df:9c:69:d0:30:5f:35:78:e1:9f:4c:12:
6d:1b:5c:3c:03:f2:9d:90:2b:67:50:62:1b:3a:57:1c:b9:ae:
d2:f3:d2:d7:25:a1:cb:55:2d:0f:fc:f2:3a:7c:5f:99:bb:20:
4c:fc:2e:ad:32:65:ef:fa:0a:b4:0d:a1:ec:fa:d7:1e:be:97:
06:15:c9:b2:06:6e:5b:2e:7a:ea:2e:8d:ec:17:44:35:e5:4e:
dc:e7:57:50:95:44:82:88:11:42:66:fd:ee:6e:d6:c5:7e:95:
62:c4:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:12:28 2025 by rpki-client