Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/LBvfKWdn-R2aMFyEqcPEt-kWNNc.roa
File: LBvfKWdn-R2aMFyEqcPEt-kWNNc.roa (raw, json)
Hash identifier: S56nAu3JS2gMSFMDKe2RU9hw5gEHRG6fTr3EcjFdl6M=
Subject key identifier: 2C:1B:DF:29:67:67:F9:1D:9A:30:5C:84:A9:C3:C4:B7:E9:16:34:D7
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 0188521A233E4505A56DD44B856FBA6443C0
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/LBvfKWdn-R2aMFyEqcPEt-kWNNc.roa
Signing time: Thu 25 May 2023 08:50:24 +0000
ROA not before: Thu 25 May 2023 08:50:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198482
IP address blocks: 85.187.208.0/24 maxlen: 24
85.187.209.0/24 maxlen: 24
85.187.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:1a:23:3e:45:05:a5:6d:d4:4b:85:6f:ba:64:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: May 25 08:50:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c1bdf296767f91d9a305c84a9c3c4b7e91634d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8a:43:bb:ea:07:a3:b0:a9:e2:01:4d:ad:7c:
57:0b:6e:2f:62:24:0d:ac:0c:a4:71:f9:22:26:8a:
13:74:ec:d2:db:5d:29:a5:49:37:0b:a8:c5:90:06:
23:39:61:87:ae:43:43:67:fa:51:6a:5a:6e:65:72:
78:15:e9:5d:b1:b3:f2:e9:74:a2:d8:b8:f4:c2:9f:
6e:3a:7b:f4:fe:24:b5:ab:b4:73:e5:17:91:3c:12:
73:1a:f5:44:10:88:63:18:f1:71:3f:d1:48:22:29:
82:c1:c3:76:d7:38:c5:88:64:e1:67:31:ab:76:64:
8d:d7:f7:10:d9:c0:3a:9a:42:fc:91:b7:a2:46:de:
0e:ac:09:c1:47:3e:53:d1:b0:09:60:5b:db:79:0c:
cf:6b:33:77:b8:de:4e:7a:92:6d:2f:62:5c:49:6c:
f8:5a:04:0b:8f:92:7b:67:05:61:ae:64:5c:53:b4:
27:fa:31:89:06:8c:c3:26:b1:05:ef:ee:6c:d6:dd:
05:cd:ec:68:7d:fc:2a:14:0d:86:53:06:40:33:00:
06:eb:97:c7:e3:88:04:0a:20:62:b3:20:64:46:cc:
b5:a4:74:49:da:f3:67:26:b6:72:fe:28:ee:08:ff:
5d:3e:a8:20:3d:fa:db:c2:dc:79:8a:ef:12:ad:d1:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1B:DF:29:67:67:F9:1D:9A:30:5C:84:A9:C3:C4:B7:E9:16:34:D7
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/LBvfKWdn-R2aMFyEqcPEt-kWNNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.208.0-85.187.210.255
Signature Algorithm: sha256WithRSAEncryption
55:ca:64:bf:5a:e9:c1:68:c8:df:87:ed:12:1b:06:b2:53:38:
c9:dc:ee:e4:b8:6e:07:8c:1d:30:21:a7:f1:d1:1c:fb:95:69:
e3:a1:d4:1a:8c:9e:f2:2b:c0:b4:35:a0:7c:37:11:f9:ca:e7:
ed:fe:ec:d9:b5:b0:2b:31:e9:7e:e4:fa:63:d0:bb:35:43:04:
58:06:9f:bd:3c:ed:4e:9a:dc:f3:6f:ba:06:83:98:11:bd:af:
bf:7e:83:d6:69:a8:46:48:81:e6:72:1f:1f:8b:4e:c8:31:8f:
7f:9d:02:0c:89:33:85:87:20:78:4d:8b:0b:3d:9c:86:4b:47:
fc:96:a9:c3:c6:d5:3e:10:46:de:60:32:3f:a8:f8:c4:09:80:
e6:45:a2:47:6e:9d:00:d9:98:80:49:2a:9b:87:78:0e:46:1d:
06:b7:6f:6a:ce:27:5d:8e:67:8a:34:2f:e6:89:7c:ae:da:86:
da:40:a5:e0:4d:95:9a:00:c6:5a:38:6c:c6:a5:a3:89:3c:86:
d9:83:80:1f:86:3c:12:6f:62:ba:41:6d:0d:59:f1:7b:cc:d1:
44:aa:83:19:96:49:20:dc:28:28:9b:e8:8b:8a:37:e7:2f:c4:
14:33:bb:bf:a2:da:cb:22:4f:9b:ce:a7:c3:c6:c7:21:f7:5a:
64:a1:1c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:48:16 2025 by rpki-client