Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/LAPfN7cwF4yAOLK9vxDQlzpUuQ8.roa
File: LAPfN7cwF4yAOLK9vxDQlzpUuQ8.roa (raw, json)
Hash identifier: InjskXLL4aryDuoYNkrxdjimSII7dQ0s/gNQsDCJL88=
Subject key identifier: 2C:03:DF:37:B7:30:17:8C:80:38:B2:BD:BF:10:D0:97:3A:54:B9:0F
Certificate issuer: /CN=f2f9500a84f2ce90c4214748acb3835d6c56d96c
Certificate serial: 08A3CB10
Authority key identifier: F2:F9:50:0A:84:F2:CE:90:C4:21:47:48:AC:B3:83:5D:6C:56:D9:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vlQCoTyzpDEIUdIrLODXWxW2Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/LAPfN7cwF4yAOLK9vxDQlzpUuQ8.roa
Signing time: Sat 01 Jan 2022 04:03:11 +0000
ROA not before: Sat 01 Jan 2022 04:03:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44188
IP address blocks: 185.165.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144952080 (0x8a3cb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f9500a84f2ce90c4214748acb3835d6c56d96c
Validity
Not Before: Jan 1 04:03:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c03df37b730178c8038b2bdbf10d0973a54b90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0c:75:90:9c:fd:d8:8c:0d:ef:5f:f9:bc:8d:
50:1d:44:2e:d2:e8:b8:be:8a:30:fa:54:53:2f:f3:
28:d2:88:75:2a:1c:fc:b7:16:59:b2:b0:bb:0c:52:
bc:55:42:69:f7:24:06:8c:16:7d:47:45:49:d5:e9:
6f:83:ce:9c:87:1d:aa:af:b6:66:d9:48:5f:50:ad:
85:c1:28:28:31:3e:fb:14:76:4c:b4:a8:69:52:45:
80:46:d9:0f:10:1e:9b:10:19:c7:fb:66:5b:f0:bc:
15:03:57:52:6d:c0:60:86:cd:34:77:6e:06:15:85:
54:9b:5c:31:e9:45:21:40:ae:b0:ad:27:2b:ae:f7:
b0:6b:51:bc:e7:c7:9d:ed:38:a4:ab:d4:c9:1a:f2:
12:34:ea:b3:8f:ad:a6:43:89:05:1f:40:9a:2e:04:
e2:bc:e8:9d:9c:33:bb:b7:24:5b:ce:24:51:c5:5b:
5b:33:69:38:6f:a4:be:1c:6b:02:3c:23:f4:5d:65:
19:71:d9:6c:4e:77:ad:f7:5b:6e:bf:d8:60:bc:72:
0e:e0:22:d1:de:6b:34:63:f8:06:c8:24:6c:7c:53:
f3:4a:ef:21:59:7c:73:ab:d6:61:f5:3a:3f:5d:e5:
3a:80:a4:9b:50:b1:75:35:ea:5b:e2:76:9b:98:56:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:03:DF:37:B7:30:17:8C:80:38:B2:BD:BF:10:D0:97:3A:54:B9:0F
X509v3 Authority Key Identifier:
keyid:F2:F9:50:0A:84:F2:CE:90:C4:21:47:48:AC:B3:83:5D:6C:56:D9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vlQCoTyzpDEIUdIrLODXWxW2Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/LAPfN7cwF4yAOLK9vxDQlzpUuQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9bbe74-ac98-43ac-b18f-625406c2fb0e/1/8vlQCoTyzpDEIUdIrLODXWxW2Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:a1:e4:fe:17:0f:a7:71:d0:3d:51:f4:ba:27:87:f0:09:88:
25:7c:7e:c0:34:e0:f8:07:f3:ec:72:b7:3b:bb:52:44:f3:d4:
d3:46:1c:68:09:9b:91:55:22:c0:c5:1c:6d:51:2b:cf:54:ee:
44:82:c7:0f:cb:f6:16:50:7f:db:f7:db:eb:f7:73:f8:9c:bf:
95:a0:97:b2:f4:90:20:9a:2b:38:56:58:88:77:4a:f4:1c:80:
1f:71:d0:0a:87:58:bc:e9:ac:8e:13:c1:6a:c0:01:62:b9:8d:
c5:f9:c1:3f:9a:fa:74:5a:03:2f:08:47:25:e4:10:52:4c:21:
de:3d:f6:85:e6:41:8a:75:5d:d6:d6:aa:e1:55:6e:7a:33:46:
b7:e1:ab:3b:b1:f5:07:80:d9:43:ac:a3:13:62:d3:ff:00:28:
2e:22:87:de:dd:b6:82:dc:4b:f3:26:50:e9:a7:8f:2f:95:dd:
0b:25:6d:9f:08:8a:97:4d:9f:ab:3c:d8:02:a8:9c:8e:d2:bc:
92:da:6a:62:e8:05:90:19:16:bf:bd:13:0e:c7:ee:98:0c:5f:
24:22:a2:70:0c:62:e9:cc:34:81:ce:40:d7:61:2f:d9:b0:84:
54:3c:fe:f0:8e:65:03:d2:26:9b:59:9c:2d:b9:51:f8:5a:fc:
6e:2f:58:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:09 2025 by rpki-client