Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/LLTeY6Uh6JFZQvOx89I2a2JqCQY.roa
File: LLTeY6Uh6JFZQvOx89I2a2JqCQY.roa (raw, json)
Hash identifier: C4ihniRGaG7SThJ9hesLB7U8xYULXDFpswRr8jyUMW4=
Subject key identifier: 2C:B4:DE:63:A5:21:E8:91:59:42:F3:B1:F3:D2:36:6B:62:6A:09:06
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183EE54AAB80C4AF328DB4A8AD6D6082627
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/LLTeY6Uh6JFZQvOx89I2a2JqCQY.roa
Signing time: Wed 19 Oct 2022 03:41:09 +0000
ROA not before: Wed 19 Oct 2022 03:41:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 45.149.187.0/24 maxlen: 24
152.89.250.0/24 maxlen: 24
152.89.248.0/24 maxlen: 24
152.89.249.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
176.105.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ee:54:aa:b8:0c:4a:f3:28:db:4a:8a:d6:d6:08:26:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 19 03:41:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cb4de63a521e8915942f3b1f3d2366b626a0906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:28:99:34:e4:4c:a5:78:fe:9f:17:7f:9e:
7c:81:8c:74:56:f3:60:8f:31:91:7d:b9:85:a6:6e:
68:09:e4:ff:07:ff:f7:71:9f:a3:46:57:03:34:a5:
e9:83:29:59:3b:f7:c0:02:1f:1f:68:1c:6c:7a:22:
3c:aa:6c:10:3b:a8:24:58:7f:14:ae:76:d7:26:09:
f9:6b:29:80:42:75:6c:f3:c9:4f:f6:f5:ff:8c:5b:
38:8d:41:e7:cf:de:5f:e3:27:1b:36:39:e9:e8:9a:
9c:2b:c1:90:1f:74:e3:72:d7:ad:45:52:24:22:53:
5e:ac:2f:8e:ff:f6:bf:3a:04:2b:cc:62:ce:3e:27:
22:41:60:70:fd:26:b3:30:3d:47:8b:dd:11:c8:ab:
74:0a:5b:ac:11:e3:59:a5:c2:cb:f9:93:0d:18:a5:
e9:20:a0:4a:ce:65:57:e3:97:1a:0e:77:02:34:10:
b2:39:ce:d5:03:4d:77:bd:dc:01:bf:76:8c:d2:41:
f2:b1:e6:f7:de:26:7d:cf:a4:40:37:75:cb:90:12:
82:cc:20:da:aa:3d:b4:73:6b:03:c3:82:fb:f5:53:
90:55:8d:ed:69:90:df:4c:77:24:d4:d7:51:13:0a:
61:b2:f2:45:2a:68:86:12:de:c6:58:73:50:75:71:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:DE:63:A5:21:E8:91:59:42:F3:B1:F3:D2:36:6B:62:6A:09:06
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/LLTeY6Uh6JFZQvOx89I2a2JqCQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.187.0/24
152.89.248.0-152.89.250.255
176.105.224.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
21:4d:01:0a:a2:7b:50:1f:86:24:0a:ab:09:35:3b:06:03:cd:
f1:76:da:63:1a:fa:7b:66:ae:90:98:5b:21:1d:dc:64:67:c6:
1e:c2:53:78:be:38:62:b5:82:2f:4b:99:5d:6b:1e:df:b2:de:
63:c0:6b:19:7d:60:f6:d2:0d:b2:d7:b1:cc:03:3b:c6:2b:55:
59:79:82:46:fe:d5:da:77:e9:91:7e:b6:9b:ed:39:bc:c4:c9:
a5:40:9a:2d:c2:08:3f:67:d3:b8:de:86:4e:e3:12:d6:5b:a9:
c0:bd:c2:92:02:0b:8f:fd:59:b6:32:98:05:61:77:e0:35:fa:
f9:b0:ff:3d:95:f2:1f:6a:e6:22:ed:06:a4:5d:13:a6:a1:6b:
d7:d9:ec:8e:da:fb:17:51:1b:da:93:77:1f:d9:d8:df:18:a4:
cb:8a:d5:bf:8d:16:77:0e:e8:d1:88:d1:aa:be:9e:5a:82:df:
d4:39:1e:9e:3e:42:90:65:8b:de:17:03:a0:b5:27:54:3b:a9:
54:35:e4:02:ad:16:bc:16:12:09:b0:4a:a0:01:e9:36:a3:7c:
5d:30:d2:9d:3b:a3:45:fc:81:f6:98:55:1c:55:94:a0:56:18:
61:b2:32:87:d1:1c:9b:df:bf:cb:4f:5b:f2:6c:66:32:c2:df:
b0:e3:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:23 2025 by rpki-client