Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lhl88C76_EfEockAuanN0DZJodI.roa
File: lhl88C76_EfEockAuanN0DZJodI.roa (raw, json)
Hash identifier: QhjfMjU1WKrcMCAP9l1yexAr8JUMhwmRoKt9ACCWlnk=
Subject key identifier: 96:19:7C:F0:2E:FA:FC:47:C4:A1:C9:00:B9:A9:CD:D0:36:49:A1:D2
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C206D5EDAA5FA18C3CCCAA959D634
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lhl88C76_EfEockAuanN0DZJodI.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41496
IP address blocks: 85.122.56.0/23 maxlen: 23
85.122.88.0/21 maxlen: 21
85.122.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:20:6d:5e:da:a5:fa:18:c3:cc:ca:a9:59:d6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96197cf02efafc47c4a1c900b9a9cdd03649a1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:90:5a:a3:f8:4b:d9:ab:41:4f:1c:fb:d5:
f0:dc:59:2a:1e:73:07:bf:6f:4b:fe:02:2d:e8:1b:
2c:04:90:3c:8a:6a:8a:80:c0:c4:ce:63:d4:5d:cb:
c0:c0:23:33:e8:09:7b:97:c2:a4:47:8f:5a:cd:3b:
72:6b:05:34:4f:8b:8f:a8:9e:08:19:43:ab:5d:b6:
5e:43:35:45:58:b6:52:9e:43:e5:62:bf:5b:73:1f:
8f:40:5d:52:18:1a:c9:ed:01:fa:4f:39:51:dc:f5:
55:b6:6d:1c:a5:8b:be:0e:4a:e1:3e:ca:6e:e2:6f:
75:0a:9b:ba:f1:8c:62:30:39:39:cf:15:74:ed:0a:
e1:54:6f:83:ea:1b:69:60:90:ca:c5:22:d0:69:7b:
b8:0b:c7:0f:b9:ee:42:43:4e:f6:90:de:f1:91:59:
fc:46:b5:a6:98:bd:52:46:61:10:58:66:7a:74:70:
6e:4b:38:82:c3:14:30:35:5d:a3:66:21:36:90:74:
d1:d9:c9:ea:67:e0:9e:73:5a:2e:85:47:19:0b:69:
7d:43:77:ca:44:47:f2:f1:3d:69:91:cd:4d:ae:05:
67:65:96:a5:78:33:09:89:1d:9a:bc:14:cb:78:14:
32:48:ca:96:30:cf:ee:78:bd:79:2b:07:d8:5a:42:
a0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:19:7C:F0:2E:FA:FC:47:C4:A1:C9:00:B9:A9:CD:D0:36:49:A1:D2
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lhl88C76_EfEockAuanN0DZJodI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.56.0/23
85.122.88.0/21
85.122.136.0/21
Signature Algorithm: sha256WithRSAEncryption
20:ff:c8:3a:69:ad:79:90:83:81:d2:1b:f9:f8:e6:ed:2f:fd:
5b:c3:b9:b8:15:ca:56:33:45:5d:08:ea:aa:66:80:36:60:8d:
d5:0a:05:8e:2d:87:d1:d7:fd:34:40:26:ba:f2:4b:1c:ef:c1:
f8:89:06:c5:58:58:ef:3a:41:8b:8f:24:a0:99:22:f3:69:16:
12:af:3e:7d:59:52:54:7c:5c:e8:48:07:28:d0:aa:e0:f8:28:
b4:8c:2b:61:56:8d:35:dc:79:1e:63:fb:01:e2:b6:1b:38:50:
d3:72:44:23:e8:af:f3:6c:9b:a9:50:0c:9f:f6:23:10:e5:bd:
2b:4d:22:8e:f7:e4:76:f4:a1:7c:8f:aa:fc:5e:e2:e2:4b:85:
5c:4a:35:0a:a2:ee:f4:25:db:68:ef:71:91:2f:ba:c3:11:e7:
cd:fe:e2:3a:3c:2c:2d:d3:5d:54:18:e6:40:77:83:6b:2a:e0:
de:a8:96:e0:3c:1a:15:9d:96:b6:f8:ae:02:e0:4d:96:5f:ca:
3e:e8:ba:fc:31:78:cb:fe:bd:45:71:ea:03:71:e2:1e:9d:06:
55:33:13:35:93:1e:b5:72:20:fb:ae:f0:40:a6:0a:e3:5a:87:
97:b3:8a:b1:20:f3:3a:ec:30:1b:a3:4a:f9:5f:5b:ce:10:1b:
bb:d4:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:24 2025 by rpki-client