Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/LnqHoulK3VATGmKEAn72iWxo7SM.roa
File: LnqHoulK3VATGmKEAn72iWxo7SM.roa (raw, json)
Hash identifier: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=
Subject key identifier: 2E:7A:87:A2:E9:4A:DD:50:13:1A:62:84:02:7E:F6:89:6C:68:ED:23
Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial: 019427B5D85709008272AD6725319AF2E406
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/LnqHoulK3VATGmKEAn72iWxo7SM.roa
Signing time: Thu 02 Jan 2025 15:50:16 +0000
ROA not before: Thu 02 Jan 2025 15:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43366
IP address blocks: 185.79.8.0/22 maxlen: 24
2a05:6c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d8:57:09:00:82:72:ad:67:25:31:9a:f2:e4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Validity
Not Before: Jan 2 15:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e7a87a2e94add50131a6284027ef6896c68ed23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:8b:39:8d:9c:0c:b8:c8:25:d9:b2:81:81:
31:67:67:44:ed:53:7a:ab:af:45:1a:e3:01:f7:4e:
3c:dd:d7:03:80:e0:47:19:7e:5f:e9:37:e5:63:3e:
df:d3:7c:9b:ae:a5:5c:ed:8f:45:39:9d:33:31:a6:
b1:24:f7:d6:ef:a6:3c:73:9a:0d:67:50:c5:f8:5e:
21:32:6a:77:2f:9d:88:b5:c5:1b:79:b8:1e:53:ee:
85:9a:dc:16:b6:58:b5:1c:7f:c3:50:bd:95:a7:93:
58:a4:b1:4c:38:31:d1:02:49:07:a9:18:10:9e:50:
ef:0b:18:8b:a7:11:8e:59:c1:61:61:aa:95:72:f8:
0a:ea:19:47:c1:fa:06:ae:0b:5a:6a:00:29:e1:9b:
d5:6b:96:c9:87:8f:31:c3:07:80:fd:03:58:28:48:
e6:dc:d6:2f:e1:5a:1b:aa:a8:c3:ab:d8:a7:4e:01:
70:1d:89:bc:a7:fa:38:49:3d:fb:f5:d1:88:b1:57:
5c:2f:1b:d4:96:d8:ea:ee:6f:ac:f1:1d:0e:7f:6a:
d8:88:ea:f9:79:00:39:81:04:1e:db:0c:29:47:34:
80:b7:28:49:9d:74:96:ab:e8:6e:fa:04:1d:dd:31:
07:e9:05:cb:94:9b:5b:5d:d9:2f:9f:72:a5:86:47:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7A:87:A2:E9:4A:DD:50:13:1A:62:84:02:7E:F6:89:6C:68:ED:23
X509v3 Authority Key Identifier:
keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/LnqHoulK3VATGmKEAn72iWxo7SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.8.0/22
IPv6:
2a05:6c80::/29
Signature Algorithm: sha256WithRSAEncryption
2d:fb:c1:ea:12:c1:32:bb:66:6e:b2:96:61:52:6c:71:08:50:
cb:1d:9d:33:6f:47:1c:5b:82:e1:f9:53:39:a5:46:9c:89:55:
d1:b5:ce:d3:47:11:21:38:27:f8:57:13:6c:4c:ae:20:fe:40:
4b:f6:07:79:a2:cc:3d:d1:d8:b2:77:94:20:63:28:69:22:c9:
f4:a0:c6:1b:5a:3e:09:a6:21:24:ca:32:8b:5e:f3:aa:f4:87:
08:7d:65:25:41:0e:f7:43:d9:bc:c5:ea:8a:32:fd:7a:5b:d2:
56:f0:9f:e6:2c:c1:4c:04:f4:e9:19:e6:99:d6:d9:57:a1:8f:
c6:6c:88:61:8d:c7:3f:fb:ae:72:89:11:d4:d9:fc:10:dc:55:
96:37:6c:21:21:db:50:a9:80:d1:c8:9c:35:c7:7a:63:ba:c2:
6f:fe:45:e7:05:fc:c1:7e:20:fd:6c:14:a6:77:71:2d:f7:49:
b4:4f:97:4b:1d:ac:f5:8d:d1:2c:38:27:df:16:6a:cd:6c:4e:
f9:69:51:f2:37:35:4d:88:5c:e7:cc:dc:17:53:f6:1e:00:7a:
76:30:d4:26:05:1e:99:03:b9:ad:f3:cf:2f:34:5c:d5:f1:f7:
2d:c5:d7:66:25:f4:3c:7b:b1:08:c8:1d:6c:e5:f5:60:d1:ff:
68:ce:74:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:03:07 2025 by rpki-client