Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa
File: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (raw, json)
Hash identifier: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=
Subject key identifier: 2F:52:6B:F4:DB:70:73:CA:CB:D1:5C:81:30:60:4F:05:E3:0E:49:B5
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 01941FFA92EAE15230176B2F48AD42F966F0
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30801
IP address blocks: 82.98.0.0/18 maxlen: 24
82.98.0.0/19 maxlen: 19
82.98.32.0/20 maxlen: 20
82.98.48.0/21 maxlen: 21
82.98.56.0/22 maxlen: 22
82.98.60.0/22 maxlen: 22
85.203.64.0/18 maxlen: 24
92.61.128.0/20 maxlen: 20
178.16.240.0/20 maxlen: 24
217.67.144.0/20 maxlen: 20
2a04:1e00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:92:ea:e1:52:30:17:6b:2f:48:ad:42:f9:66:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f526bf4db7073cacbd15c8130604f05e30e49b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:f5:64:f8:80:bd:c2:2b:04:dc:2d:28:cd:
60:4e:4b:c1:90:27:76:2c:77:f3:8c:03:28:86:25:
43:45:f9:73:6b:e0:3b:5c:ba:aa:38:fb:c5:27:3d:
00:3f:ce:88:82:b4:12:17:ca:98:44:c3:76:05:22:
1e:0c:6f:5e:ca:2b:24:b7:4f:38:3b:f9:77:79:cc:
07:75:fe:b8:08:8c:de:10:80:2f:2f:2d:22:87:e6:
84:db:87:1b:ce:b3:00:5b:04:e8:ad:36:d2:96:ef:
41:65:44:86:e7:a5:4b:59:1d:1b:12:0a:91:b2:58:
30:5f:9e:48:69:32:d8:48:56:14:21:7c:93:fc:68:
bc:30:ab:18:8e:86:c6:a5:75:95:90:ac:1d:42:4a:
ec:b7:6b:2a:60:e9:1e:9c:60:95:f0:6c:cd:e1:d5:
8a:3d:df:ec:ca:24:e3:d3:05:59:c7:b0:e8:3e:c9:
39:e1:59:90:c1:2a:d9:9f:74:14:7a:ec:23:ea:58:
3c:25:d2:cc:ad:5a:b7:24:d1:b5:30:e5:1b:ba:72:
8a:f5:28:87:52:ef:4e:95:20:c1:d9:a3:8a:0a:e0:
89:69:c2:76:71:6f:95:a4:17:3e:74:ba:fb:a1:d6:
01:d3:85:b6:e8:9d:cb:9a:05:0d:53:5e:45:38:25:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:6B:F4:DB:70:73:CA:CB:D1:5C:81:30:60:4F:05:E3:0E:49:B5
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.0.0/18
85.203.64.0/18
92.61.128.0/20
178.16.240.0/20
217.67.144.0/20
IPv6:
2a04:1e00::/29
Signature Algorithm: sha256WithRSAEncryption
4d:82:84:d5:b9:59:d6:5a:3d:1a:08:c2:a0:3c:e3:9f:54:89:
6d:c3:2a:9c:44:01:4b:da:04:59:03:90:4f:3a:32:f4:e9:7c:
60:16:f1:48:7e:7d:64:cb:66:db:77:f2:7d:b4:3b:94:28:04:
09:19:d7:64:6a:c3:d1:eb:43:c3:5b:2e:a4:81:15:64:5f:cb:
bf:9d:48:7a:0d:e5:11:a5:27:73:82:34:a2:64:cf:75:73:39:
e4:59:1c:d1:96:b4:15:7a:71:37:f4:fb:81:52:69:ab:2f:f1:
6c:41:ae:57:af:4f:10:d3:65:48:fe:fd:b1:2d:a9:ce:39:44:
d8:de:17:c4:fe:3b:16:bb:6d:4a:ec:6d:6d:3d:64:d0:81:fe:
b1:f7:c8:d2:ed:ba:d9:7b:cf:98:19:17:0d:6c:06:7f:3d:58:
8d:18:9a:cc:6e:2e:a8:04:d6:68:95:0d:8b:e9:0a:e7:78:ce:
01:86:5a:3d:a2:cf:dd:17:e0:81:a3:ca:7f:17:6e:66:69:ad:
57:88:f4:b3:b5:d4:3d:3e:88:23:8f:a6:59:f1:fd:01:94:04:
82:5d:93:4d:b6:97:fc:4a:59:c8:a4:31:46:72:f8:ba:e7:98:
94:b7:8d:d6:7b:15:e6:f6:c4:68:91:f3:b5:27:3c:83:24:84:
86:6f:37:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:08 2025 by rpki-client