Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/LdsSfCPLnEB_NCg1ytZZYK3de9A.roa
File: LdsSfCPLnEB_NCg1ytZZYK3de9A.roa (raw, json)
Hash identifier: xDlE5AumyspeWi6omvwOfeKxcezm5RcBxQqKUT0C45I=
Subject key identifier: 2D:DB:12:7C:23:CB:9C:40:7F:34:28:35:CA:D6:59:60:AD:DD:7B:D0
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 01942068587D933A086278B946CD25E3055C
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/LdsSfCPLnEB_NCg1ytZZYK3de9A.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6903
IP address blocks: 62.113.80.0/22 maxlen: 22
62.113.86.0/24 maxlen: 24
62.113.89.0/24 maxlen: 24
62.113.90.0/24 maxlen: 24
62.113.95.0/24 maxlen: 24
62.113.120.0/21 maxlen: 21
62.113.124.0/22 maxlen: 22
195.2.64.0/23 maxlen: 23
195.2.68.0/23 maxlen: 23
195.2.72.0/24 maxlen: 24
195.2.77.0/24 maxlen: 24
195.2.82.0/23 maxlen: 23
195.2.87.0/24 maxlen: 24
195.2.88.0/22 maxlen: 22
195.2.94.0/23 maxlen: 23
213.189.192.0/24 maxlen: 24
213.189.196.0/23 maxlen: 23
213.189.198.0/24 maxlen: 24
213.189.200.0/24 maxlen: 24
213.189.207.0/24 maxlen: 24
213.189.208.0/23 maxlen: 23
213.189.211.0/24 maxlen: 24
213.189.212.0/23 maxlen: 23
213.189.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:58:7d:93:3a:08:62:78:b9:46:cd:25:e3:05:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ddb127c23cb9c407f342835cad65960addd7bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:39:6b:b2:1d:29:a2:52:0f:35:17:51:65:
24:ba:63:2e:57:49:d9:19:d2:d0:36:03:e6:06:85:
7b:62:42:77:c8:36:d6:7b:1a:e4:87:90:0a:ca:4e:
6a:93:1d:a4:2a:93:ef:a0:41:78:10:fb:3e:b7:08:
d4:81:7a:ab:54:4b:68:64:f2:51:99:b1:03:b8:4a:
54:94:55:ef:1a:28:a2:13:4c:fa:e1:e7:4f:4f:2a:
8b:3e:a8:34:ca:0a:3d:6d:76:6b:60:64:a8:14:24:
fd:2e:fd:22:15:ac:17:e0:64:ee:b0:74:eb:4b:4e:
21:cf:0a:bc:5c:ef:de:15:03:3b:d3:56:2b:90:e1:
7e:e9:51:76:5d:30:e9:62:e7:83:54:aa:a8:e2:21:
ae:2a:64:fc:f7:c7:65:b9:67:6e:e8:29:a7:17:9a:
79:5a:b5:63:6c:51:76:f3:9a:d1:4e:2c:a6:2b:03:
af:ea:6f:72:ac:44:7f:cd:c1:39:66:9c:50:a2:30:
5c:3b:99:18:ec:b2:d3:42:ca:78:7c:d6:70:c3:ec:
b2:5a:ec:29:e4:4f:63:37:78:42:62:3c:57:65:88:
22:dd:fb:d9:99:63:eb:d1:f5:9f:dc:e0:e9:0d:f9:
e0:3f:57:a0:fe:73:34:a2:f4:fa:54:b5:15:9f:53:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DB:12:7C:23:CB:9C:40:7F:34:28:35:CA:D6:59:60:AD:DD:7B:D0
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/LdsSfCPLnEB_NCg1ytZZYK3de9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.80.0/22
62.113.86.0/24
62.113.89.0-62.113.90.255
62.113.95.0/24
62.113.120.0/21
195.2.64.0/23
195.2.68.0/23
195.2.72.0/24
195.2.77.0/24
195.2.82.0/23
195.2.87.0-195.2.91.255
195.2.94.0/23
213.189.192.0/24
213.189.196.0-213.189.198.255
213.189.200.0/24
213.189.207.0-213.189.209.255
213.189.211.0-213.189.214.255
Signature Algorithm: sha256WithRSAEncryption
be:49:20:78:18:5e:9a:51:4b:0e:e3:5f:e3:0e:ae:b0:52:47:
a2:74:9d:87:5e:4c:77:0f:22:60:48:4f:b8:4a:0b:c3:4a:0f:
27:64:51:a0:4d:4e:a3:b2:14:da:cf:80:8d:24:61:11:66:8c:
f2:e6:25:0f:6b:36:3e:f7:c8:be:f6:8d:27:7c:5d:ea:68:ca:
5f:a7:9e:a1:20:86:bc:62:3e:a3:40:d6:5e:ec:21:68:c3:34:
7d:1b:22:5d:20:12:87:28:24:ab:a4:db:42:82:ff:f5:6b:f2:
e3:ba:5f:48:c4:30:8f:cf:2e:a0:5f:57:a5:6a:f6:12:87:86:
b0:25:09:d3:40:91:39:b4:46:c8:18:1c:dc:48:69:34:4b:f1:
15:82:2f:c2:8e:72:b0:78:1b:d7:8a:8e:3e:44:c7:a4:09:8f:
c6:a7:e6:20:ac:bd:9b:c8:a3:e0:d9:28:3b:90:8e:06:fe:d2:
6c:56:d0:13:f4:b5:16:87:40:56:c6:d2:33:81:9b:b9:74:9c:
21:f4:24:4a:b7:4a:a6:14:b4:69:d3:96:78:6d:e6:db:85:21:
6f:ab:e7:c5:cc:94:e7:a1:a0:2f:99:c1:f3:26:92:8e:7c:7c:
a0:3c:d2:bb:2f:7d:42:87:0c:0b:8d:81:52:08:f3:d3:35:ae:
40:63:5d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:11 2025 by rpki-client