Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/lUv8OjHUlBMekakzg-j5fQ_XiFg.roa
File: lUv8OjHUlBMekakzg-j5fQ_XiFg.roa (raw, json)
Hash identifier: f+p/zRgG0RQsMdZYacDCMc3D+9sgqRofkU4BGtH4uqk=
Subject key identifier: 95:4B:FC:3A:31:D4:94:13:1E:91:A9:33:83:E8:F9:7D:0F:D7:88:58
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0195CD50F678BE9D7A2E7F38E27011D6CFAC
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/lUv8OjHUlBMekakzg-j5fQ_XiFg.roa
Signing time: Tue 25 Mar 2025 12:39:49 +0000
ROA not before: Tue 25 Mar 2025 12:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 45.80.228.0/22 maxlen: 24
185.221.196.0/23 maxlen: 24
185.238.88.0/22 maxlen: 24
185.246.216.0/24 maxlen: 24
185.253.24.0/24 maxlen: 24
194.113.238.0/24 maxlen: 24
194.113.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:50:f6:78:be:9d:7a:2e:7f:38:e2:70:11:d6:cf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Mar 25 12:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=954bfc3a31d494131e91a93383e8f97d0fd78858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:eb:cd:63:38:1a:24:62:24:2f:06:b6:71:
a9:67:36:bf:ca:c4:68:11:aa:8e:0a:20:6c:a8:89:
6f:87:36:9e:03:99:4d:01:09:0d:3a:0e:91:0b:10:
92:9a:3f:7a:1f:f3:84:04:c2:ed:26:71:51:60:de:
de:2d:b5:c1:e7:8a:73:69:ec:9a:47:fb:43:01:a7:
53:5c:c5:fb:81:24:1a:ad:bc:be:37:60:fa:c4:35:
5c:51:fa:b2:84:af:b9:53:72:d6:5f:9a:2b:50:82:
c1:84:89:bb:35:50:2f:86:0a:14:7f:34:7a:21:8c:
88:e3:50:f7:3c:7e:c1:69:bc:bc:1d:13:87:be:2c:
9f:f6:57:ef:bf:64:6d:4a:80:8d:8a:ac:d7:8c:c0:
d7:0c:b0:0c:37:06:75:ff:d5:46:a8:6b:02:2c:3e:
ac:fa:2d:59:09:ba:17:b5:25:ea:03:7e:e6:a5:f0:
b3:cd:25:70:21:48:d6:ef:fa:a3:88:e3:51:57:8b:
72:ca:ca:9e:cd:9b:34:c3:04:07:45:e5:be:6d:f7:
af:84:60:c8:77:23:d7:2f:5f:e5:63:8b:38:69:fe:
2f:a8:62:ef:03:df:64:b5:03:58:b7:06:23:13:f4:
34:a7:93:7e:53:3c:ab:59:80:12:ac:61:7f:3f:1c:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4B:FC:3A:31:D4:94:13:1E:91:A9:33:83:E8:F9:7D:0F:D7:88:58
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/lUv8OjHUlBMekakzg-j5fQ_XiFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.228.0/22
185.221.196.0/23
185.238.88.0/22
185.246.216.0/24
185.253.24.0/24
194.113.238.0/23
Signature Algorithm: sha256WithRSAEncryption
43:08:3a:42:95:a6:30:c9:05:e3:2d:d9:a7:bc:4e:d6:04:60:
33:70:41:85:95:8d:39:85:07:36:2d:8b:87:0a:8d:28:9c:57:
01:8a:12:13:7d:38:08:76:70:c6:6b:74:33:e3:f8:a0:44:d0:
eb:f6:fa:62:e6:67:71:38:f1:01:33:a0:db:6e:c2:e7:27:ef:
62:e5:7e:1b:97:eb:b0:1f:f0:62:79:74:11:b0:9c:1d:0e:b8:
01:ae:3c:3e:d2:48:de:06:66:67:e5:6a:63:df:8a:ca:a3:aa:
c2:ae:10:34:c2:45:89:80:e9:4e:7a:89:a9:2b:58:e3:07:3b:
0d:9f:ca:6e:16:ef:d9:63:dc:9e:62:bd:7f:f6:7a:6d:03:17:
1b:23:7c:da:f0:d9:fe:a3:1b:c8:04:a4:15:36:a4:36:a1:53:
fe:0b:09:25:7b:a1:fb:83:17:c1:a2:ac:14:57:3d:e8:8e:b5:
2f:17:61:db:2d:0f:d0:a5:46:77:d3:db:f9:30:69:21:b4:ea:
5f:c8:65:63:28:3c:d0:5a:4f:ac:31:88:9c:db:f4:da:56:bf:
a7:dd:3e:ae:cc:c2:b3:eb:82:c3:aa:ae:d0:32:4e:40:52:cd:
a1:0b:d3:d7:b3:36:8b:16:d2:6b:6a:b4:8b:a7:e3:0f:cb:4b:
c0:3f:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:19:25 2025 by rpki-client