Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/LWTU6PwMwG_9xbWUZxdelA1-yHQ.roa
File: LWTU6PwMwG_9xbWUZxdelA1-yHQ.roa (raw, json)
Hash identifier: +2ZQkc4jPx0Az5oAlvL8paoBzZvuofrvisdta2QuGfo=
Subject key identifier: 2D:64:D4:E8:FC:0C:C0:6F:FD:C5:B5:94:67:17:5E:94:0D:7E:C8:74
Certificate issuer: /CN=bf7e3ac6d7288ed8946bca5389a5057919e971dc
Certificate serial: 01856EC239C5B48F0C45DAD7396789D75F6B
Authority key identifier: BF:7E:3A:C6:D7:28:8E:D8:94:6B:CA:53:89:A5:05:79:19:E9:71:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v346xtcojtiUa8pTiaUFeRnpcdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/LWTU6PwMwG_9xbWUZxdelA1-yHQ.roa
Signing time: Sun 01 Jan 2023 19:15:00 +0000
ROA not before: Sun 01 Jan 2023 19:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206576
IP address blocks: 185.182.200.0/23 maxlen: 23
2a0a:f480::/48 maxlen: 48
2a0a:f480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:39:c5:b4:8f:0c:45:da:d7:39:67:89:d7:5f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7e3ac6d7288ed8946bca5389a5057919e971dc
Validity
Not Before: Jan 1 19:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d64d4e8fc0cc06ffdc5b59467175e940d7ec874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:e5:92:57:34:d5:ca:5c:26:f0:96:96:4c:
13:be:8e:69:ee:af:db:d8:c7:03:c3:8e:f7:56:6b:
68:56:cd:1d:f0:45:e1:fa:43:67:fb:69:36:b8:b8:
47:cd:c1:fe:7c:cf:30:17:aa:24:04:de:37:ce:f8:
99:66:80:9c:fd:e0:9b:ed:90:b4:24:02:4c:3f:20:
35:89:5e:9e:c3:df:ff:b8:e3:b1:20:7f:6e:ad:fa:
f1:ee:fb:91:9b:0a:06:aa:7c:33:c6:9f:dd:5a:65:
45:aa:f2:17:b7:94:c8:4b:f7:43:30:be:5f:0c:48:
78:0b:a2:f9:99:1c:87:98:11:f1:b2:ad:46:b5:21:
7b:2b:13:a6:3c:6f:66:a6:9d:32:f5:9d:33:46:80:
4b:e6:33:3d:42:94:fe:0d:f9:1b:b1:06:50:3b:48:
08:0e:de:8f:3f:b2:b2:ee:ec:64:73:c1:46:3e:4a:
04:26:11:f5:4d:b7:af:bb:76:ed:fa:67:a7:77:09:
6d:de:7f:7c:12:88:37:f1:b9:9d:f7:b2:0c:58:ed:
d5:12:40:f4:79:6c:4f:c8:b8:a0:4d:08:91:d0:d4:
30:c9:40:4b:2f:47:8d:ab:ca:da:bb:80:11:9e:37:
e2:98:b2:bc:e9:5d:fa:b5:26:05:2c:7e:86:fc:d0:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:64:D4:E8:FC:0C:C0:6F:FD:C5:B5:94:67:17:5E:94:0D:7E:C8:74
X509v3 Authority Key Identifier:
keyid:BF:7E:3A:C6:D7:28:8E:D8:94:6B:CA:53:89:A5:05:79:19:E9:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v346xtcojtiUa8pTiaUFeRnpcdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/LWTU6PwMwG_9xbWUZxdelA1-yHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37807d-8e9d-4464-9437-8d358478c329/1/v346xtcojtiUa8pTiaUFeRnpcdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.200.0/23
IPv6:
2a0a:f480::/29
Signature Algorithm: sha256WithRSAEncryption
3a:00:86:09:dc:be:83:de:2a:60:16:a8:85:fb:e6:8d:a4:7f:
65:1d:5b:96:25:fd:a5:71:21:fa:3a:05:54:7e:cd:03:ae:4a:
36:43:cf:55:30:15:40:e5:fe:f7:c8:ec:3f:4d:e7:ba:95:64:
07:91:b4:93:4e:79:b9:d8:ac:d3:01:8f:66:68:d3:80:ad:f3:
d1:02:18:2a:15:36:58:2b:08:e7:d4:fb:76:98:9f:98:57:35:
35:0c:80:78:ea:f6:b5:c1:49:1d:cb:1b:0f:39:3f:9f:6f:2b:
0f:33:c4:ef:c9:5b:25:80:a9:d9:e0:6d:c1:c7:c7:75:5f:08:
eb:4a:21:46:05:25:9d:10:13:18:9d:c7:80:5b:b6:74:57:54:
d8:bc:48:e3:ce:5f:f0:e1:0b:98:2c:6b:5d:56:dd:38:ea:e0:
38:a3:ce:2b:f9:1a:b8:c7:d9:f5:46:5c:af:05:45:04:e2:d5:
dd:8c:5c:c0:4f:10:61:83:9d:ab:b6:5d:fb:e8:08:51:b5:84:
dc:63:84:f9:6b:df:76:33:87:82:14:2e:64:1f:d5:8b:75:00:
f7:d3:d5:31:6b:4c:49:04:b5:b0:ba:44:25:8b:07:c8:ee:52:
ef:24:78:2f:ad:f6:50:ec:b0:05:d7:df:18:6f:48:88:9d:7a:
38:59:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:28 2025 by rpki-client