Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LPoSPdDVeJIzrOnbABGjOBrA1Is.roa
File: LPoSPdDVeJIzrOnbABGjOBrA1Is.roa (raw, json)
Hash identifier: xLTQaXp/nqMa0ZyQNng7eHuSwpyQNLbTTPy0GMosZfw=
Subject key identifier: 2C:FA:12:3D:D0:D5:78:92:33:AC:E9:DB:00:11:A3:38:1A:C0:D4:8B
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018C826A7E4C4586A9DD30D72372AEF045CF
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LPoSPdDVeJIzrOnbABGjOBrA1Is.roa
Signing time: Tue 19 Dec 2023 14:11:06 +0000
ROA not before: Tue 19 Dec 2023 14:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
95.82.32.0/21 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:6a:7e:4c:45:86:a9:dd:30:d7:23:72:ae:f0:45:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Dec 19 14:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cfa123dd0d5789233ace9db0011a3381ac0d48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:59:3d:5f:54:16:76:d3:2f:e0:55:91:ce:
ac:f0:3a:20:8c:d2:be:88:57:85:4a:5e:81:bc:07:
67:fd:5d:ee:e2:d4:7e:be:59:bf:88:be:03:8d:e3:
0a:c1:c3:f7:9d:77:fc:8f:e9:b9:a5:f5:a1:26:8b:
b1:4d:f1:c4:01:40:71:4b:cc:a8:ea:41:46:e6:2d:
de:b4:10:93:2f:4f:7d:4f:1d:a8:3c:ed:5e:f5:36:
cf:d7:3c:6a:9f:0d:e2:79:45:fb:7a:76:c5:9b:e2:
f8:c7:0b:17:db:7a:66:bf:15:2a:73:52:f6:a2:6c:
2c:fa:f4:d0:18:cb:d8:a3:35:77:41:3b:b3:2b:e6:
b2:98:10:30:b9:82:51:9a:77:73:88:c4:44:f3:0f:
4b:ff:fa:4d:85:2e:e7:d9:e7:5b:16:44:6b:74:08:
c2:de:5f:6e:91:97:7d:36:24:62:20:23:22:c3:64:
51:17:00:36:48:2a:27:77:01:62:f9:a7:1f:47:89:
3a:59:83:a3:39:0d:60:f8:c6:16:e4:a7:6d:b3:34:
85:d1:13:dd:7c:c9:f4:88:6f:07:28:54:24:7a:9b:
17:a3:07:a6:4e:3f:4e:65:9a:20:7f:58:22:a0:78:
3d:df:53:d1:a8:09:4f:9c:27:d8:d7:84:7d:a6:21:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FA:12:3D:D0:D5:78:92:33:AC:E9:DB:00:11:A3:38:1A:C0:D4:8B
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LPoSPdDVeJIzrOnbABGjOBrA1Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.32.0/21
109.111.32.0/20
176.221.16.0/21
Signature Algorithm: sha256WithRSAEncryption
14:47:06:7f:e7:11:d7:9f:d8:bc:15:8d:39:e5:30:6b:52:d3:
43:eb:87:4d:cf:e8:e8:28:a6:26:d6:83:93:36:e1:ad:01:75:
08:47:c3:e9:a9:34:1c:15:d4:d6:46:a0:c4:b7:8e:b3:dd:a4:
63:f5:7b:c6:57:fa:b1:e0:10:31:c6:3f:92:63:1e:2f:76:02:
c0:d0:d0:f3:7f:48:b4:46:b3:7e:11:0a:03:6d:8d:bd:02:17:
73:af:37:5a:19:f3:e0:31:df:d9:8a:db:16:40:73:20:48:9d:
14:3a:71:42:d5:da:00:fb:78:10:a5:b9:16:d2:8d:92:e9:eb:
15:21:90:4b:68:66:d6:34:c0:86:4c:3a:a1:39:44:79:fd:52:
ec:ee:38:fb:b0:36:75:60:1f:41:f8:66:db:af:eb:1c:77:14:
af:61:af:42:0d:83:b3:c7:d6:5e:35:86:40:3e:c8:f9:fa:3a:
57:c4:52:44:be:d0:9f:86:c6:00:92:a3:40:ba:22:9a:ba:0c:
af:83:ee:6d:8a:23:c0:49:76:39:3f:4e:aa:78:0b:63:52:76:
19:fb:55:c0:a8:d3:2d:a0:03:7e:65:cb:ab:98:33:b2:83:fb:
8d:23:a6:1d:c2:04:89:fb:7f:88:6f:64:45:93:a1:75:f1:0d:
8b:86:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:37 2025 by rpki-client