Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/LVAgqy5zjoIQR8VrBpc5FEMaJsw.roa
File: LVAgqy5zjoIQR8VrBpc5FEMaJsw.roa (raw, json)
Hash identifier: +jwNCbkx/U1Uxln54LZuGg+CXeiJMFbQTEwKWnAsNu8=
Subject key identifier: 2D:50:20:AB:2E:73:8E:82:10:47:C5:6B:06:97:39:14:43:1A:26:CC
Certificate issuer: /CN=e783c010ee0b0739fbf91ac8d31c0dd30c4a1ea0
Certificate serial: 018570C2CEF0088D1B61FA41E9468F1325C5
Authority key identifier: E7:83:C0:10:EE:0B:07:39:FB:F9:1A:C8:D3:1C:0D:D3:0C:4A:1E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54PAEO4LBzn7-RrI0xwN0wxKHqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/LVAgqy5zjoIQR8VrBpc5FEMaJsw.roa
Signing time: Mon 02 Jan 2023 04:34:53 +0000
ROA not before: Mon 02 Jan 2023 04:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 81.16.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:ce:f0:08:8d:1b:61:fa:41:e9:46:8f:13:25:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783c010ee0b0739fbf91ac8d31c0dd30c4a1ea0
Validity
Not Before: Jan 2 04:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d5020ab2e738e821047c56b06973914431a26cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f6:39:4f:86:97:2e:66:84:6c:69:98:1f:b2:
9c:60:43:b6:66:66:be:72:b8:cd:dd:93:98:da:ab:
94:eb:02:6f:f3:69:90:86:9c:c5:8e:3a:36:55:5e:
29:d5:4e:e9:d9:b8:e6:49:7c:9c:52:38:a3:7c:50:
4e:77:e1:d9:87:35:ca:f3:81:32:b9:2a:1b:1d:91:
27:35:71:c6:ad:6d:57:df:8c:61:b2:7e:82:61:ea:
ac:80:49:0d:0c:11:b6:04:39:e1:e1:11:dc:5f:70:
3d:aa:9e:47:a2:d5:4d:41:70:59:cb:38:5c:56:e7:
04:15:25:ca:77:2a:bd:d8:d1:9b:ae:e4:ab:d4:58:
43:66:1a:6d:1a:46:42:c1:ac:ec:3a:07:90:71:87:
2b:d2:3b:61:cc:76:61:06:06:a3:69:0a:ff:57:8e:
53:4c:2a:dc:dc:6b:df:45:b4:00:67:d7:b5:20:7b:
19:71:2b:ce:be:37:42:2a:02:b8:fa:19:e5:84:76:
48:6d:25:85:d8:19:57:b1:5f:7c:72:f2:29:46:60:
8c:f8:0a:47:d8:c4:e2:70:8b:18:35:ae:89:4f:4d:
ff:af:47:7a:e7:9f:04:82:23:df:fd:b6:bf:70:78:
77:d9:6e:ff:0d:bf:5e:20:fa:7d:f1:f2:dc:a2:df:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:50:20:AB:2E:73:8E:82:10:47:C5:6B:06:97:39:14:43:1A:26:CC
X509v3 Authority Key Identifier:
keyid:E7:83:C0:10:EE:0B:07:39:FB:F9:1A:C8:D3:1C:0D:D3:0C:4A:1E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54PAEO4LBzn7-RrI0xwN0wxKHqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/LVAgqy5zjoIQR8VrBpc5FEMaJsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/54PAEO4LBzn7-RrI0xwN0wxKHqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:ba:81:fd:80:2a:dc:a7:51:cc:ff:4b:f4:c2:10:4f:dc:c6:
d5:af:69:49:5c:e5:27:ce:50:04:33:b7:62:01:dd:f5:56:20:
b2:c3:08:fd:b0:ca:47:9b:49:11:b1:bc:3f:12:83:4a:f0:25:
fb:3c:85:8e:70:ab:be:1a:10:e1:c5:51:66:74:26:97:a7:dc:
55:2d:38:da:c1:9f:bf:bf:ae:f1:d5:81:1d:d7:c8:a7:59:fd:
21:bd:79:37:05:82:bb:48:18:ae:a2:fa:bc:0f:a8:6e:76:85:
76:08:ff:c6:cd:6d:6a:cd:52:c1:61:af:b7:4a:b2:54:fb:1d:
36:6d:9a:4e:78:37:de:f7:16:03:8d:4c:d0:6a:fc:6b:e3:d7:
7f:aa:39:27:f1:32:73:1b:97:0d:a8:20:ba:41:67:45:ec:1c:
11:c5:18:c1:4b:df:f0:84:a8:0f:de:55:06:6b:1d:2a:ae:24:
99:39:fe:bc:6a:63:b1:6a:84:8e:62:b5:4d:10:87:e0:ac:f4:
eb:25:74:12:e2:c7:01:68:19:05:df:fa:8f:f8:ef:53:ab:05:
ef:0d:16:06:46:8f:0a:fd:72:8e:df:a5:bf:70:94:44:8e:13:
e8:a7:ff:07:3e:36:9f:62:7f:1b:06:73:ca:13:c0:de:5a:84:
5b:d1:c1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:36 2025 by rpki-client