Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LkhQ99BESsctOmkBWS8jib1sE08.roa
File: LkhQ99BESsctOmkBWS8jib1sE08.roa (raw, json)
Hash identifier: RUKzbkSpftzDJHymuiyKMHx7Nx+k6vGE0xUo34lAZTI=
Subject key identifier: 2E:48:50:F7:D0:44:4A:C7:2D:3A:69:01:59:2F:23:89:BD:6C:13:4F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27E1FD03
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LkhQ99BESsctOmkBWS8jib1sE08.roa
Signing time: Sat 01 Jan 2022 16:09:03 +0000
ROA not before: Sat 01 Jan 2022 16:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59577
IP address blocks: 92.253.212.0/22 maxlen: 24
92.253.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669121795 (0x27e1fd03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e4850f7d0444ac72d3a6901592f2389bd6c134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:4e:4c:b7:b0:d9:1a:0b:66:2f:7d:37:e2:
d3:aa:3e:b3:9c:cf:8a:38:4f:95:9d:f5:2d:b5:f4:
b9:60:ec:e5:f1:2c:85:6b:e7:bb:a2:8f:2b:21:d0:
be:6a:54:37:5d:23:a3:e8:c9:09:0a:5e:0e:05:6e:
3b:98:bd:c6:5f:aa:28:1c:85:7e:29:fe:ac:9b:47:
a6:2d:7f:69:d6:68:af:a3:23:87:66:d9:9d:01:cf:
7b:5e:fb:6c:20:4f:df:fb:49:0f:e0:66:ba:68:fe:
a9:79:b5:9e:89:b1:f9:a4:fd:6f:3a:6d:5c:70:ec:
48:fb:33:00:2a:f8:c9:8e:29:23:71:67:9f:a0:a9:
93:27:76:14:33:24:6f:6b:7d:34:45:d4:81:86:e1:
f1:ca:ec:e9:de:a6:15:9e:17:7f:16:6a:82:d4:0c:
e9:38:70:20:ce:69:24:c6:28:71:45:20:ef:af:f2:
d3:39:d4:f2:31:5b:2c:65:79:3d:b9:24:bf:88:e8:
96:5f:79:dc:49:ef:8e:6b:d8:99:e7:c2:52:07:0d:
22:ca:85:79:0e:74:a5:4a:99:be:de:54:86:16:2c:
08:12:67:48:9f:fe:96:74:60:a4:77:95:c3:0a:76:
5d:4e:01:46:b2:16:5b:84:b4:2a:77:9d:21:82:56:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:48:50:F7:D0:44:4A:C7:2D:3A:69:01:59:2F:23:89:BD:6C:13:4F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LkhQ99BESsctOmkBWS8jib1sE08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.212.0/22
92.253.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:77:0e:c5:c7:8c:70:54:d7:21:42:c0:56:74:02:d5:62:2b:
1e:e6:19:49:56:7f:9d:cd:cd:c6:3a:ad:43:79:59:c5:04:c3:
13:33:e2:19:c3:93:e7:d3:34:2d:fd:7c:d4:ef:5f:fe:5d:c1:
53:6f:9e:5d:48:38:20:76:da:79:fa:cb:36:32:cb:a7:02:07:
61:1b:f9:0c:36:0d:34:8c:b8:91:af:88:6c:b0:53:fc:b6:05:
01:89:ce:04:df:e8:28:9b:6e:65:72:ae:14:a2:d2:b8:7c:09:
fb:ce:11:c4:a6:4b:64:78:6c:8d:da:ad:66:76:40:9a:40:18:
2e:fb:9a:0e:27:20:07:09:e0:ef:64:82:fc:4a:d0:d4:25:e5:
4d:e4:d9:87:ea:fc:ef:53:b4:5e:f3:fe:3e:6f:1a:50:4e:a6:
9f:48:02:f8:57:b7:8c:c8:4b:d6:1e:7a:11:c4:a7:ab:e6:db:
b4:4d:75:ab:d6:05:da:da:a4:90:c1:ad:d5:47:6a:4f:cc:9d:
27:b2:88:36:02:ad:c8:31:3c:0a:58:87:4d:41:13:24:b0:dc:
ae:f9:ca:77:10:62:6b:0b:59:70:81:98:68:97:2f:9a:49:8a:
d4:b4:1b:1b:9e:de:e0:b8:65:34:e9:76:44:1d:36:58:1d:94:
9b:68:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:30 2025 by rpki-client