Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/Loa1dZRIXPmOE18X6DWOqqOLrAw.roa
File: Loa1dZRIXPmOE18X6DWOqqOLrAw.roa (raw, json)
Hash identifier: Y/gZnFrGlWDTLg2M2E4fgsVPbwrlSBDtIhUeLCxWHNM=
Subject key identifier: 2E:86:B5:75:94:48:5C:F9:8E:13:5F:17:E8:35:8E:AA:A3:8B:AC:0C
Certificate issuer: /CN=9bfea0941a50151c80bd93a71658cb6f9135dbd5
Certificate serial: 12195C64
Authority key identifier: 9B:FE:A0:94:1A:50:15:1C:80:BD:93:A7:16:58:CB:6F:91:35:DB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_6glBpQFRyAvZOnFljLb5E129U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/Loa1dZRIXPmOE18X6DWOqqOLrAw.roa
Signing time: Sat 01 Jan 2022 12:02:48 +0000
ROA not before: Sat 01 Jan 2022 12:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203014
IP address blocks: 185.147.180.0/22 maxlen: 24
2a07:5900::/29 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303651940 (0x12195c64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bfea0941a50151c80bd93a71658cb6f9135dbd5
Validity
Not Before: Jan 1 12:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e86b57594485cf98e135f17e8358eaaa38bac0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:76:bb:db:e7:76:16:fa:dc:90:79:0e:f4:
b6:54:3c:62:47:ec:66:94:1f:cd:22:a5:4b:45:e5:
27:00:36:5b:4a:56:50:a6:a4:52:7f:a0:7c:31:83:
e1:73:69:ab:95:7b:cd:e1:8d:5d:fa:b8:d8:69:9e:
ff:06:69:9f:02:c9:32:dc:89:6d:9b:35:58:b4:35:
5f:c2:ea:03:d1:ac:05:5d:d3:49:4a:c9:16:51:a7:
8f:b9:4e:58:8f:7f:6f:54:b0:6c:bf:59:7d:9e:d9:
2b:2e:f3:68:f3:29:79:04:ab:9a:31:b7:3b:c9:0e:
89:d1:5d:8f:84:47:af:90:57:38:47:b3:8d:70:53:
ef:03:12:e4:27:9e:fb:10:a9:69:ec:6c:2b:73:95:
4f:8a:b8:44:e3:ad:24:fa:a9:38:09:7e:b6:b7:05:
38:d3:3a:26:04:5c:4a:29:3f:67:a8:2e:bf:42:8c:
0f:95:fe:d0:74:0c:c4:b9:e2:1f:35:56:34:de:c1:
16:7d:d6:f4:5f:1e:55:cc:ea:fe:b4:5b:b0:ae:d8:
f6:a3:cf:86:66:f0:a0:b7:40:fb:87:3c:ae:cf:2e:
93:01:a5:ac:dd:76:94:66:5e:04:bd:c9:8f:2e:30:
5f:c6:7e:c3:30:c1:19:36:44:71:96:6f:97:f3:b8:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:86:B5:75:94:48:5C:F9:8E:13:5F:17:E8:35:8E:AA:A3:8B:AC:0C
X509v3 Authority Key Identifier:
keyid:9B:FE:A0:94:1A:50:15:1C:80:BD:93:A7:16:58:CB:6F:91:35:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_6glBpQFRyAvZOnFljLb5E129U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/Loa1dZRIXPmOE18X6DWOqqOLrAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/m_6glBpQFRyAvZOnFljLb5E129U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.180.0/22
IPv6:
2a07:5900::/29
Signature Algorithm: sha256WithRSAEncryption
9b:fa:44:50:77:89:52:8d:b5:ea:c5:30:78:d4:f9:75:f5:27:
a9:72:83:01:de:27:6c:f6:49:a7:40:3d:bd:69:ba:9b:3c:03:
09:83:95:9f:24:fb:92:15:0e:37:84:a0:2e:66:36:08:90:1f:
ec:91:6d:53:f7:6c:21:10:fd:36:74:cd:dc:0e:fb:c3:a0:4d:
eb:d9:d7:c9:48:ef:46:81:4a:6b:4d:7b:f2:63:7f:c5:84:7e:
41:37:9a:f7:5b:9f:dd:9f:e8:d6:24:5b:da:51:a9:46:34:08:
11:bd:ce:c5:83:36:e1:f2:ed:12:6c:ff:14:c5:17:e5:a3:ce:
21:2a:06:50:5c:3d:94:a4:58:1b:3e:93:7d:b4:6a:2e:5c:71:
bb:cd:af:43:a7:a0:45:ef:c5:3c:73:4b:5a:69:c0:b5:02:c7:
57:d7:2a:e5:c0:f4:4c:ed:12:a5:10:b5:d6:bd:09:e1:f6:db:
ce:ad:b3:e2:cc:4a:47:80:ac:5c:17:8e:a3:28:23:f0:ff:49:
85:c7:b8:f1:d8:90:c9:71:5d:7e:0f:17:c9:ca:8e:a5:f7:21:
b7:24:1b:7d:b8:1b:d4:83:68:4c:0f:42:94:bf:35:95:70:7d:
51:ed:e6:ad:63:e0:68:1e:3c:3e:5a:e1:e9:cf:12:21:72:43:
b1:30:13:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:32 2025 by rpki-client