Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LxFgHEdV-I8olplK0cqCCg1IJrY.roa
File: LxFgHEdV-I8olplK0cqCCg1IJrY.roa (raw, json)
Hash identifier: twWgkvET77IwJrYTixrTjJE34aYPrUKSRyssYxyu40Q=
Subject key identifier: 2F:11:60:1C:47:55:F8:8F:28:96:99:4A:D1:CA:82:0A:0D:48:26:B6
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE995FD00FAE8BFBDFF3A4F7F47AA1
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LxFgHEdV-I8olplK0cqCCg1IJrY.roa
Signing time: Mon 02 Jan 2023 09:44:51 +0000
ROA not before: Mon 02 Jan 2023 09:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 85.237.208.0/24 maxlen: 24
85.158.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:99:5f:d0:0f:ae:8b:fb:df:f3:a4:f7:f4:7a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f11601c4755f88f2896994ad1ca820a0d4826b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:14:ef:05:4f:42:b0:f9:5d:e4:7b:3e:f2:
03:7a:2d:ce:94:b6:ae:d7:b9:97:50:fb:1f:0f:cd:
3f:c2:0c:d7:f3:9f:76:23:08:a8:74:54:45:8e:2b:
8e:b1:5c:f5:f3:91:3c:5d:7c:47:04:93:ad:cc:f3:
d5:3c:a9:19:73:9e:9e:60:78:b6:d8:75:1f:1a:b6:
24:be:56:99:28:d0:3e:1d:0c:91:f5:54:94:36:4c:
e2:9c:c4:22:0e:06:dc:10:d5:b9:40:f6:5b:55:02:
6a:30:0c:52:36:6c:53:2a:9f:21:60:dd:6f:00:27:
25:e2:6d:fe:47:84:ce:12:0c:79:63:dd:f7:9d:73:
2a:d3:18:7e:80:70:0b:4b:3f:31:40:17:2a:0e:16:
0d:07:fa:6e:32:fd:e1:b6:7d:76:96:55:77:33:d2:
31:d5:1c:0c:46:ed:1c:62:64:28:86:09:5c:1d:d1:
0c:79:61:30:8c:9d:6f:ad:b6:0c:f7:9f:f7:db:35:
7f:95:95:f4:93:78:5e:a0:09:de:83:72:59:e5:5d:
5a:aa:25:a5:5b:29:c7:c7:d8:10:c5:ac:67:0d:47:
36:79:a0:20:ba:36:c5:7c:25:a4:24:eb:07:73:0b:
f5:65:f4:3f:0e:ab:d5:09:b7:9f:45:90:c9:61:c3:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:11:60:1C:47:55:F8:8F:28:96:99:4A:D1:CA:82:0A:0D:48:26:B6
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LxFgHEdV-I8olplK0cqCCg1IJrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.61.0/24
85.237.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:11:d7:79:09:f9:1f:f4:e8:e7:c1:f3:1a:88:10:e4:62:79:
55:e5:5d:80:47:5f:91:48:67:21:32:c5:53:ce:39:69:16:b1:
6d:b9:35:2d:ff:fb:95:7e:06:71:f4:32:7d:0d:7d:f6:3a:fa:
bc:fd:0f:d8:2b:30:75:0d:da:b1:82:7f:4d:57:bd:3e:f4:76:
00:e7:4d:b6:f3:89:bb:b2:c1:ef:6d:20:27:e2:61:35:6c:62:
05:fb:cd:4c:15:f3:5a:7b:b5:e7:d8:2d:53:f7:b4:37:64:e3:
77:17:a5:a9:53:38:15:89:76:c9:24:d8:6c:bd:07:cf:98:91:
1c:9d:e1:05:87:55:dc:3a:e8:74:75:95:3b:27:c9:6f:da:2d:
fa:49:dc:2e:ff:c8:6e:17:4b:a4:29:5e:82:4b:11:cd:0d:b0:
3b:e8:71:6e:3c:9e:e1:79:21:46:c5:7d:e4:c2:d6:be:99:89:
23:12:6a:46:ad:b5:bc:4a:db:a0:f3:06:bc:2c:c6:b3:d5:54:
4b:46:8c:88:75:5f:46:1c:68:be:88:74:f9:59:a6:73:40:f9:
94:cd:be:3a:ff:04:6a:a2:ee:b7:d1:87:88:c2:84:12:2a:78:
a4:39:67:55:76:96:0a:0a:d3:99:c8:7c:1e:bc:38:66:af:cc:
a9:1f:30:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:07 2025 by rpki-client