Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lMcRM-V8rQRY0Oa28kwmFNzJNjY.roa
File: lMcRM-V8rQRY0Oa28kwmFNzJNjY.roa (raw, json)
Hash identifier: iOlEA9PHCfCzJqTPu2VEiyvcsu3UylzuWFYbebjcHgw=
Subject key identifier: 94:C7:11:33:E5:7C:AD:04:58:D0:E6:B6:F2:4C:26:14:DC:C9:36:36
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184C796848D312B478A865B040CF0378F72
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lMcRM-V8rQRY0Oa28kwmFNzJNjY.roa
Signing time: Wed 30 Nov 2022 08:10:41 +0000
ROA not before: Wed 30 Nov 2022 08:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 193.29.97.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:96:84:8d:31:2b:47:8a:86:5b:04:0c:f0:37:8f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 30 08:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94c71133e57cad0458d0e6b6f24c2614dcc93636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:3b:c9:4e:30:69:98:05:2f:b0:df:4c:eb:
c4:e0:37:e4:09:49:98:c3:30:21:45:d2:d9:10:d2:
d5:b8:2c:43:97:ad:54:cf:96:e7:28:be:6a:d3:25:
16:3c:7b:e4:c3:16:f7:c9:76:29:20:c8:92:6a:97:
60:59:4d:cb:be:8e:f9:f0:58:9d:ab:15:7e:83:51:
6f:06:99:4b:c5:2f:45:90:c3:68:ed:78:20:c9:a6:
c4:4d:83:44:8e:b5:0f:6d:2e:6c:1e:7d:03:04:10:
4b:b2:02:74:50:99:d2:a4:4d:89:01:8c:41:12:10:
82:b1:1b:5f:9a:d7:57:97:4c:5a:e5:ef:2e:28:e1:
f7:9b:fd:a2:9a:fe:1b:a3:a1:3d:55:7e:70:fa:5b:
25:d7:9e:0d:b3:58:7e:1c:95:88:84:08:5e:e2:b7:
dc:2f:d8:71:a9:73:6a:13:d3:59:3e:77:80:c6:5b:
07:34:b2:1e:0a:7f:5a:47:fe:55:bd:d5:69:45:76:
3b:3c:57:92:b2:33:c5:61:c3:ba:38:e7:63:09:aa:
91:e1:50:29:bc:92:ec:bb:7a:ea:6c:07:9c:cc:e0:
cc:a1:fb:2b:50:5f:d0:65:95:2c:0a:b4:24:b0:8c:
1d:69:00:85:b6:77:72:0f:a0:2d:d8:52:b9:ab:9d:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:11:33:E5:7C:AD:04:58:D0:E6:B6:F2:4C:26:14:DC:C9:36:36
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lMcRM-V8rQRY0Oa28kwmFNzJNjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
193.29.97.0/24
194.113.226.0/24
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:5b:a9:10:b4:71:20:8f:82:7c:c9:4e:15:cd:00:8a:e5:1c:
5d:01:fa:57:87:0a:5c:12:14:f5:8b:f2:11:be:b7:0b:89:6a:
59:2f:d1:f7:1c:98:c8:bf:39:92:46:87:85:f6:15:15:d0:29:
a1:f8:61:e9:5c:d4:7b:03:2e:0f:20:c9:43:91:98:68:cd:68:
e0:1b:5c:bc:9b:84:16:7f:f8:83:30:78:49:97:d7:16:0d:40:
48:0e:c1:d0:60:5d:4e:32:63:f2:94:ef:24:03:9f:6e:3d:02:
52:08:09:48:b4:8d:19:25:cd:17:69:49:32:bb:92:23:45:a0:
00:ad:e7:54:6b:54:0a:5c:ba:dd:a7:27:b2:3d:af:d3:9d:57:
c5:48:e6:75:4b:a0:71:1e:48:7a:92:20:11:65:a6:f3:bd:91:
4d:90:9f:00:4a:ad:23:80:7c:1e:f7:ed:fc:5c:2d:8e:75:1c:
27:93:ae:86:a7:fd:84:c7:06:ae:e8:f0:3b:c2:04:86:dd:06:
8d:0c:4a:05:15:24:c1:69:a0:60:d0:03:cf:a5:26:5e:16:16:
b7:73:66:80:2f:f2:4c:bf:b6:8c:43:f8:4d:78:72:85:d6:ec:
17:15:4d:a1:90:28:61:ad:85:31:02:70:7a:8c:34:5d:91:89:
05:20:86:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:45 2025 by rpki-client