Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/LHuOpc9w8HhzPL9yiYB8-l1MSk0.roa
File: LHuOpc9w8HhzPL9yiYB8-l1MSk0.roa (raw, json)
Hash identifier: NewrhXzCqOBZSb9c8mgOp360kFy3cwsw4IEslaHOZEk=
Subject key identifier: 2C:7B:8E:A5:CF:70:F0:78:73:3C:BF:72:89:80:7C:FA:5D:4C:4A:4D
Certificate issuer: /CN=0f6122c3d7c5c5ff8352e4ed23f8b3d7dff48f71
Certificate serial: 08FD195A
Authority key identifier: 0F:61:22:C3:D7:C5:C5:FF:83:52:E4:ED:23:F8:B3:D7:DF:F4:8F:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Eiw9fFxf-DUuTtI_iz19_0j3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/LHuOpc9w8HhzPL9yiYB8-l1MSk0.roa
Signing time: Sat 01 Jan 2022 13:59:39 +0000
ROA not before: Sat 01 Jan 2022 13:59:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62455
IP address blocks: 185.233.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150804826 (0x8fd195a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6122c3d7c5c5ff8352e4ed23f8b3d7dff48f71
Validity
Not Before: Jan 1 13:59:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c7b8ea5cf70f078733cbf7289807cfa5d4c4a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:93:64:77:7f:69:52:7f:93:02:b4:aa:eb:
46:dd:85:7d:a5:0f:97:75:e3:9b:6c:88:fe:a6:b0:
80:ae:53:94:a7:22:77:0b:e5:23:20:e8:3b:d2:56:
37:44:39:40:80:ca:2b:40:b1:74:30:5b:94:d5:e0:
4b:83:91:ab:e4:b4:e8:c9:d6:e4:70:de:14:81:31:
87:ac:58:b5:c3:1f:d8:2e:3f:3a:93:20:27:f4:d4:
5c:f8:5a:a3:3a:4c:2d:64:8b:e3:c9:d1:65:62:69:
6b:6d:b7:34:82:42:f6:e3:8f:67:66:f4:d5:5e:ef:
3e:61:53:24:45:cf:89:57:df:d6:14:42:d6:aa:3d:
25:81:42:68:05:54:27:2d:7f:09:d1:19:0c:01:7d:
c4:bf:17:28:25:e2:23:0a:40:8c:63:f6:2f:46:61:
f9:d4:d1:45:96:6f:60:b0:1c:d7:eb:e0:24:24:82:
df:1b:66:48:0b:b2:c1:3c:6b:39:64:c8:eb:7a:14:
a4:be:ac:68:1e:ec:17:67:e0:55:55:bb:71:9d:58:
68:6b:73:b9:8a:a7:31:32:c9:93:fc:b9:a3:a5:ef:
88:f3:1b:de:1e:b6:b9:4f:42:18:43:34:8f:41:b2:
ee:49:e3:f1:3d:6b:35:31:20:6d:fe:db:fc:35:28:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:8E:A5:CF:70:F0:78:73:3C:BF:72:89:80:7C:FA:5D:4C:4A:4D
X509v3 Authority Key Identifier:
keyid:0F:61:22:C3:D7:C5:C5:FF:83:52:E4:ED:23:F8:B3:D7:DF:F4:8F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Eiw9fFxf-DUuTtI_iz19_0j3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/LHuOpc9w8HhzPL9yiYB8-l1MSk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/D2Eiw9fFxf-DUuTtI_iz19_0j3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.176.0/22
Signature Algorithm: sha256WithRSAEncryption
43:aa:34:3c:46:6d:7f:37:67:f6:2e:74:20:cd:f5:fc:0e:bf:
d5:39:81:03:80:5e:d3:4f:af:99:e1:ab:a1:89:3a:a6:70:fd:
a5:72:f3:f0:69:8e:ec:cc:f4:be:40:3d:a3:12:15:aa:d9:16:
e8:28:d6:97:81:20:24:41:2b:f5:b4:eb:e9:d4:99:2a:9d:bb:
6f:e5:52:6f:5a:96:9a:eb:67:f7:93:64:52:b1:c2:c1:af:a8:
56:08:cc:cc:31:1e:7c:1d:47:0d:db:82:ca:e5:d1:59:cb:87:
c0:39:7b:5a:d2:54:c5:f7:f4:ae:e5:6d:cf:39:23:ef:71:87:
3f:4d:53:02:e4:db:98:c1:7f:cb:7b:c1:88:5a:9b:f1:ee:b7:
99:56:78:87:53:b8:bc:0b:31:88:88:53:dd:10:ef:c8:96:29:
e4:5e:0a:a1:c6:d8:7c:e1:f1:75:22:78:ab:e7:43:e2:20:5b:
86:33:d0:a6:41:b1:66:06:24:9f:88:a2:ef:48:33:19:f7:be:
3d:aa:31:5e:4c:12:9c:7d:72:60:e7:42:bc:56:af:79:ad:07:
09:a7:da:36:bc:3a:66:96:4a:b5:74:5a:10:50:69:1a:1e:f3:
11:f9:11:d4:b8:24:91:ff:c4:8a:aa:cf:84:41:7c:62:5e:38:
15:32:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:35 2025 by rpki-client