Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/lKfFDqpfvkzC6eXkoMn8VR6grJo.roa
File: lKfFDqpfvkzC6eXkoMn8VR6grJo.roa (raw, json)
Hash identifier: UWCgQ/tbgcYtxIIrKAnFHiRTr7aQrPCq2dPW4a1INNM=
Subject key identifier: 94:A7:C5:0E:AA:5F:BE:4C:C2:E9:E5:E4:A0:C9:FC:55:1E:A0:AC:9A
Certificate issuer: /CN=40064dd8ac6ea56641836d4ed77facca4b22f7e0
Certificate serial: 028E2726
Authority key identifier: 40:06:4D:D8:AC:6E:A5:66:41:83:6D:4E:D7:7F:AC:CA:4B:22:F7:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAZN2KxupWZBg21O13-syksi9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/lKfFDqpfvkzC6eXkoMn8VR6grJo.roa
Signing time: Sat 01 Jan 2022 14:01:34 +0000
ROA not before: Sat 01 Jan 2022 14:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211594
IP address blocks: 185.254.123.0/24 maxlen: 24
2a0c:1880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42870566 (0x28e2726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40064dd8ac6ea56641836d4ed77facca4b22f7e0
Validity
Not Before: Jan 1 14:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94a7c50eaa5fbe4cc2e9e5e4a0c9fc551ea0ac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:ca:ce:53:85:a4:ef:ba:0d:6f:75:65:d2:
45:75:37:e2:56:27:68:b5:ff:38:19:df:5a:f2:8d:
57:48:29:36:96:92:45:34:50:84:13:96:6f:6f:86:
de:39:e3:02:a7:e6:2c:8c:9e:eb:f6:5e:85:49:a4:
4f:1f:e6:f6:a3:04:0b:32:e0:31:74:03:17:c6:69:
58:6e:26:60:0a:86:fa:1b:80:ae:36:5e:30:50:92:
36:47:9d:f4:9a:00:39:51:ca:f9:25:0c:71:99:78:
2c:8f:e0:2b:59:88:b2:0c:0d:df:f8:21:65:7e:18:
f1:15:02:8a:3e:af:9c:5a:4e:f6:65:c0:c8:f0:f0:
92:18:d7:97:c7:8b:25:62:76:18:d8:07:b6:08:1d:
ab:d0:85:42:c6:b1:ef:16:bc:23:e9:5c:8f:b2:8f:
c6:3b:7d:66:0e:62:c1:7f:b0:7d:a6:80:a3:3b:91:
60:dc:20:06:89:76:94:22:c0:cf:ae:98:f1:c4:c5:
ef:23:4a:2e:12:a1:a4:7d:4e:c6:c9:41:b3:59:a7:
ad:37:6f:92:e3:f5:eb:2d:1d:4c:f3:5e:b9:1b:47:
38:da:f9:94:fe:82:2a:fe:27:02:16:35:f2:3c:68:
fd:33:28:7b:5e:95:f0:45:af:b0:ca:d3:31:a4:28:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A7:C5:0E:AA:5F:BE:4C:C2:E9:E5:E4:A0:C9:FC:55:1E:A0:AC:9A
X509v3 Authority Key Identifier:
keyid:40:06:4D:D8:AC:6E:A5:66:41:83:6D:4E:D7:7F:AC:CA:4B:22:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAZN2KxupWZBg21O13-syksi9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/lKfFDqpfvkzC6eXkoMn8VR6grJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/QAZN2KxupWZBg21O13-syksi9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.123.0/24
IPv6:
2a0c:1880::/29
Signature Algorithm: sha256WithRSAEncryption
90:d0:76:93:ff:6f:99:17:be:0d:a9:dc:04:b3:be:a8:cd:8f:
ac:4a:0d:88:8a:62:7b:3f:22:f0:e7:f6:6c:be:48:62:3d:05:
11:c1:c9:bb:da:43:ea:cc:ab:17:9d:6a:0e:10:a5:cd:52:34:
fd:d6:ca:69:24:77:a9:4a:1a:41:9f:8c:36:7f:a4:a5:c0:4f:
cd:9a:d6:e3:e1:2e:15:5d:30:7f:da:5d:55:f6:54:d3:c8:e4:
4d:97:00:52:b4:26:ba:e4:1d:1a:95:c6:7b:ab:18:13:57:cd:
75:81:d6:6e:39:d3:11:6d:72:44:86:cd:37:df:bb:39:f8:bd:
a4:35:70:be:83:fc:5a:37:9f:3f:cc:13:75:90:4f:be:26:55:
0c:d5:a5:b8:61:83:68:b8:8b:39:5e:56:d6:2e:ab:84:82:a0:
a3:47:36:ad:4d:fe:7f:6a:4a:db:46:74:91:98:d7:73:cb:3d:
a1:1a:e0:6f:de:24:6f:21:43:d9:64:03:40:e9:39:a8:c3:ea:
1b:43:44:c7:a4:b3:d5:34:90:af:95:20:74:33:9d:6b:d7:0a:
6d:4e:fd:36:7e:fb:55:53:da:8d:07:ac:ee:e0:32:d8:52:3c:
b2:17:ca:76:a1:e7:10:4b:bf:64:eb:f4:3b:c3:58:21:6e:e4:
12:b3:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:01:25 2025 by rpki-client