Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/LVuXmcA37l55HV_Lkm-9toxRI9M.roa
File: LVuXmcA37l55HV_Lkm-9toxRI9M.roa (raw, json)
Hash identifier: 4cEtUTeXbvAFpf4H3wm/zzHTiGm8kpN2BRyYg9LJJRM=
Subject key identifier: 2D:5B:97:99:C0:37:EE:5E:79:1D:5F:CB:92:6F:BD:B6:8C:51:23:D3
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 01856F8B798A2FC96FEE8272D3D8BDE8D80C
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/LVuXmcA37l55HV_Lkm-9toxRI9M.roa
Signing time: Sun 01 Jan 2023 22:54:49 +0000
ROA not before: Sun 01 Jan 2023 22:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.27.251.0/24 maxlen: 24
185.27.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:79:8a:2f:c9:6f:ee:82:72:d3:d8:bd:e8:d8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: Jan 1 22:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d5b9799c037ee5e791d5fcb926fbdb68c5123d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:67:61:3b:ad:f3:77:13:bb:3d:a1:4a:26:
fa:f2:89:3d:84:fb:26:cf:80:11:2f:ce:2c:09:ff:
67:2a:ae:6b:1d:16:15:33:f1:30:40:68:0f:14:c4:
54:9a:a0:73:f6:e0:6d:68:77:6c:15:51:d6:bf:65:
af:7d:10:98:e5:ad:8a:1e:0a:e0:ca:3d:ec:7b:49:
ec:14:51:3d:6a:b0:fb:92:fe:25:92:fb:da:79:4c:
f1:d3:91:ba:20:76:c0:9e:d7:0e:6b:9a:ab:25:e8:
b8:3c:21:5c:92:56:e5:5c:6e:83:89:d6:7f:48:28:
04:4d:ff:3b:47:2a:a1:c1:24:9c:e1:ac:e2:67:c6:
e8:a1:64:2d:81:b1:36:5f:d1:7d:c3:d6:4f:29:af:
3a:40:e3:42:eb:5d:9e:7d:d7:e5:2c:e4:b1:be:d4:
af:30:69:b9:b3:39:19:66:0e:64:cc:c9:92:cb:3e:
55:92:e4:81:d2:a2:90:22:30:4d:d6:e5:3f:a9:0c:
86:9f:76:0f:b3:ec:77:60:09:38:99:12:ad:b0:e6:
91:e6:14:57:09:75:91:ec:cc:db:8b:e2:75:d1:49:
2c:06:3a:e1:90:0d:cf:84:e0:a4:c6:b1:ad:3b:d5:
94:8f:5b:da:10:f6:2b:4a:ff:73:e0:16:0e:90:d5:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5B:97:99:C0:37:EE:5E:79:1D:5F:CB:92:6F:BD:B6:8C:51:23:D3
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/LVuXmcA37l55HV_Lkm-9toxRI9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.249.0/24
185.27.251.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d6:00:8e:c1:e8:48:7d:06:02:cd:5e:69:27:42:74:67:2d:
2f:ed:54:07:30:1e:59:05:94:b4:e6:de:26:cb:e8:32:8c:57:
c3:50:a3:0b:4d:14:d4:45:0b:24:59:8b:96:8a:74:06:3e:4b:
91:4c:54:f9:82:76:5e:f2:9f:00:ef:30:a4:9f:35:b9:c9:59:
db:1a:db:ee:30:51:4b:bb:5f:01:dd:bf:72:2e:2a:e4:f1:29:
ad:eb:79:9b:f6:c0:37:f0:dc:4a:3c:a3:55:a0:e9:f1:ce:68:
9b:aa:5a:eb:c4:08:4b:38:59:3b:d1:cf:da:97:97:17:e2:09:
71:58:1e:a6:81:df:b3:36:45:f9:66:e8:3e:7b:ba:98:ae:e4:
88:db:bc:e3:0d:3e:eb:eb:c7:7f:40:42:db:c1:8c:78:2b:67:
4b:cf:8f:21:fe:4b:f3:65:1b:b9:8f:47:14:55:1e:45:bc:33:
47:ba:ac:a8:6f:b6:ad:fe:34:00:37:2a:8e:14:26:71:58:17:
67:28:4a:96:da:56:3d:f6:e3:28:47:a3:98:da:94:2c:fd:bc:
0e:2b:5f:2e:8b:c2:c1:2e:70:62:fd:2c:20:de:b2:fe:5a:b0:
10:7d:5b:6e:90:14:8e:69:8c:4a:42:2c:25:30:de:98:1a:25:
0d:6e:ce:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:37 2025 by rpki-client