Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/leNx016N_dkYChafjBIEq47VD6U.roa
File: leNx016N_dkYChafjBIEq47VD6U.roa (raw, json)
Hash identifier: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=
Subject key identifier: 95:E3:71:D3:5E:8D:FD:D9:18:0A:16:9F:8C:12:04:AB:8E:D5:0F:A5
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 019427486FD739CFA14D2E3E1952541FE4D7
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/leNx016N_dkYChafjBIEq47VD6U.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 185.243.243.0/24 maxlen: 24
185.245.40.0/24 maxlen: 24
185.245.42.0/23 maxlen: 24
185.245.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6f:d7:39:cf:a1:4d:2e:3e:19:52:54:1f:e4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95e371d35e8dfdd9180a169f8c1204ab8ed50fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:13:8c:aa:a2:f3:59:93:67:ae:01:b2:c7:
dd:d8:f7:f1:8d:75:e0:a4:81:a5:fb:9b:c2:0d:c3:
97:6f:35:ff:e1:5b:08:3f:d1:c5:28:39:66:69:e5:
48:f5:aa:99:64:53:0c:57:a9:60:7e:16:fd:1b:0e:
a5:5c:68:dc:91:31:bf:03:83:79:00:eb:c3:3c:b4:
0d:21:69:0d:56:de:61:1e:76:cc:a5:68:14:5c:1b:
9b:d8:f1:f7:86:6a:30:71:3a:37:53:4b:72:67:44:
39:dc:b9:15:33:62:ed:2f:85:34:ea:92:4c:d1:e3:
b9:76:4d:38:38:43:4d:cf:6c:cf:d3:bc:b8:0f:a3:
0a:56:4c:42:6c:b3:f3:89:e5:ad:28:34:5b:5a:01:
d2:bc:7e:cd:b6:79:4d:e2:d1:a8:97:58:e4:aa:8e:
7b:a4:b5:9e:e5:12:5e:cc:fa:61:cc:3e:b4:ba:c8:
17:96:6e:a1:b5:fa:78:e3:a1:41:19:09:bd:8c:4a:
6d:ff:fd:35:67:33:22:12:e2:de:97:cf:ec:0f:69:
f8:82:30:6c:1d:a5:b3:a1:f2:ab:d4:fd:3a:17:94:
e1:c9:de:15:09:38:9f:ba:39:b7:f0:80:1b:ca:66:
a6:7f:9d:fc:14:2b:99:68:17:47:f5:5f:cb:a8:1e:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E3:71:D3:5E:8D:FD:D9:18:0A:16:9F:8C:12:04:AB:8E:D5:0F:A5
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/leNx016N_dkYChafjBIEq47VD6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.243.0/24
185.245.40.0/24
185.245.42.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:79:6d:19:8a:b6:23:14:00:60:0d:4a:2c:fb:99:2b:0f:a5:
13:8c:31:84:79:23:47:51:9f:b6:22:72:f4:14:fa:c3:59:10:
eb:23:4f:1e:a2:bf:84:86:f4:04:e2:4e:93:29:f4:8d:de:c0:
7f:8c:e8:a1:12:02:3d:14:e2:74:02:2b:50:1d:75:b9:ad:6b:
05:17:e0:33:99:1d:56:13:66:8b:5d:83:72:c2:e5:25:5d:fe:
d2:52:bd:9c:28:32:81:c7:17:1b:ef:9a:c8:e1:3b:73:a2:89:
c8:f7:40:b2:f1:47:ea:f8:82:8d:01:27:dc:5f:95:66:15:1c:
f1:6f:44:5a:a6:be:bf:8e:dd:e5:12:62:6c:f4:af:fd:ec:d0:
d9:07:9c:52:34:6e:63:88:9a:ad:79:a8:14:3a:a8:34:5c:6d:
7a:e7:08:2a:d6:5c:61:98:35:96:54:e6:6c:da:eb:a5:12:c5:
f6:75:e5:11:a3:97:96:45:93:15:67:95:8a:7b:f9:d1:0b:4f:
80:dc:58:f1:f7:50:ed:2e:b3:8b:13:35:7b:54:d2:79:f3:bf:
b0:cc:b2:25:8f:38:b2:ed:49:eb:0d:be:53:03:eb:1a:48:4f:
aa:22:7e:49:62:13:06:63:3e:2f:2b:53:c7:a8:e3:8b:09:cd:
60:0b:7c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:47 2025 by rpki-client