Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/Lvygk7ByCET10A4esDJKH8kj0rs.roa
File: Lvygk7ByCET10A4esDJKH8kj0rs.roa (raw, json)
Hash identifier: 3pxXrc0FWNFjmskFd2kOHgfqjxkYFKBrrQ9XFNk5vpM=
Subject key identifier: 2E:FC:A0:93:B0:72:08:44:F5:D0:0E:1E:B0:32:4A:1F:C9:23:D2:BB
Certificate issuer: /CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Certificate serial: 018449BB6B4DC2F718D954902374FA9FB7EA
Authority key identifier: 31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/Lvygk7ByCET10A4esDJKH8kj0rs.roa
Signing time: Sat 05 Nov 2022 21:38:50 +0000
ROA not before: Sat 05 Nov 2022 21:38:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39591
IP address blocks: 46.17.12.0/23 maxlen: 23
46.17.8.0/22 maxlen: 23
2a02:2870::/33 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:49:bb:6b:4d:c2:f7:18:d9:54:90:23:74:fa:9f:b7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Validity
Not Before: Nov 5 21:38:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2efca093b0720844f5d00e1eb0324a1fc923d2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:fa:11:ce:f0:eb:b1:53:41:bf:01:df:c2:
28:29:97:e7:0c:44:cb:67:c8:d0:4c:19:e1:30:0b:
d6:e5:7b:27:6f:d0:ce:21:d2:30:a8:0b:b0:7d:8c:
93:5d:49:2e:4b:52:02:0e:aa:7b:e4:f3:1d:16:b0:
f1:1d:b5:b4:d6:9a:02:20:68:64:39:98:7f:71:27:
ca:69:fd:e4:4e:09:3d:50:f9:3a:cb:33:3e:87:bc:
a5:4e:f4:01:f0:3b:17:6d:54:da:0f:8b:b4:34:e7:
a8:72:1a:f0:c1:ec:cc:69:11:95:99:c7:51:63:99:
30:ef:51:5e:f6:4d:88:11:fe:75:38:4f:9b:89:f9:
da:20:2f:a1:cf:64:2e:06:c9:a2:79:fe:28:59:f2:
ad:45:c4:ac:20:5d:f1:a2:9d:4b:a2:bf:ca:d5:15:
c8:72:25:a1:e1:34:0b:c9:c9:7b:1b:29:68:e9:1f:
29:b0:80:42:57:c8:52:ca:ad:fc:a7:3a:dd:f5:fb:
67:18:dd:5a:9f:6e:b7:d1:48:2c:f5:15:71:96:e6:
8f:e3:73:d0:92:b6:95:90:a4:58:6f:2f:dd:61:f5:
09:c5:dc:f5:02:04:f9:b1:8e:43:da:32:fa:ee:dc:
05:77:8a:1b:8a:89:09:42:39:9b:a4:f0:2b:a8:bb:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FC:A0:93:B0:72:08:44:F5:D0:0E:1E:B0:32:4A:1F:C9:23:D2:BB
X509v3 Authority Key Identifier:
keyid:31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/Lvygk7ByCET10A4esDJKH8kj0rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.8.0-46.17.13.255
IPv6:
2a02:2870::/33
Signature Algorithm: sha256WithRSAEncryption
0f:d7:0e:f7:5a:4e:3c:20:a8:4a:08:a1:8c:49:ee:f8:df:45:
45:2a:a6:18:5a:74:b2:67:f9:ca:8b:40:0b:8f:4e:05:3d:74:
f8:b5:92:57:30:78:71:04:df:1c:95:c6:4a:8c:a8:61:61:a2:
7b:10:1e:e3:84:d5:63:a3:d1:1e:ff:d4:e9:67:a2:de:df:8a:
e7:26:6c:b8:e8:67:99:27:69:86:c0:47:fe:32:fd:27:f5:f8:
27:12:75:03:dc:45:b0:a2:2d:11:f0:33:ef:d9:0f:22:93:c3:
f6:bf:69:c3:45:2c:31:09:eb:44:12:5f:01:47:26:2a:9e:e8:
4c:6f:3b:ba:4b:6b:1e:2c:de:a5:6b:06:58:d0:c1:24:e2:50:
a6:86:36:f4:d3:d3:39:01:58:5b:c7:11:9b:0b:76:bf:a4:a5:
03:d8:56:db:0a:dd:1b:e4:f4:5d:bc:61:7b:4c:a1:95:ca:65:
f1:a3:46:91:a8:f9:64:42:69:30:a3:34:07:ea:22:0c:bb:10:
6f:89:1e:6b:7d:53:37:31:f7:58:28:00:15:51:5d:e3:40:2c:
c5:1c:e9:3d:97:df:6e:b7:36:43:b8:b2:3b:cf:a8:4c:16:bb:
92:ee:8b:04:b7:f8:e4:bb:58:7f:7b:c7:ae:3a:6b:55:04:69:
48:1a:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:39 2025 by rpki-client