Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/LvtCFph-1SPDgtPywHh8W8R1G44.roa
File: LvtCFph-1SPDgtPywHh8W8R1G44.roa (raw, json)
Hash identifier: s2Obm7qYyb2RFR6QDYbXsZE0UR/o9ozCcb4OwBCpdWA=
Subject key identifier: 2E:FB:42:16:98:7E:D5:23:C3:82:D3:F2:C0:78:7C:5B:C4:75:1B:8E
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 01856C0A3011D28D95318DD7DF55367C860E
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/LvtCFph-1SPDgtPywHh8W8R1G44.roa
Signing time: Sun 01 Jan 2023 06:34:45 +0000
ROA not before: Sun 01 Jan 2023 06:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200409
IP address blocks: 194.32.172.0/22 maxlen: 24
77.83.112.0/22 maxlen: 24
2a0c:ea40::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:30:11:d2:8d:95:31:8d:d7:df:55:36:7c:86:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Jan 1 06:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2efb4216987ed523c382d3f2c0787c5bc4751b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1d:93:a6:73:c4:53:be:5e:ec:4f:10:50:d9:
e4:3f:d0:4a:60:d7:40:dc:f0:36:b8:60:0b:c9:3f:
63:34:24:c7:67:bc:57:f8:a5:01:bc:09:62:6a:6d:
33:3b:6f:9e:ee:3c:62:ad:ff:1e:b6:4a:6a:a6:a3:
40:b0:63:eb:d2:0b:14:6d:15:ad:19:53:4a:c3:32:
20:1e:30:c7:34:de:bf:ba:c4:1d:9a:cc:cc:51:50:
5f:6f:98:45:f6:7f:f1:2a:bd:bb:4f:e6:72:8c:34:
3e:c0:9f:61:cc:10:4f:f7:13:ca:92:0b:95:aa:fd:
ae:72:55:61:06:eb:c0:eb:fc:fc:77:3e:e1:ae:5d:
2f:fc:5c:88:4a:95:6b:e9:1e:97:00:11:51:4d:9c:
b2:41:83:f1:ad:af:b3:44:8c:be:34:6d:48:94:c5:
52:17:be:5a:63:c1:9c:cf:c9:1b:b8:a1:cb:71:d9:
b6:2e:88:83:ad:28:f1:4a:e4:4f:91:db:23:f9:f2:
0d:25:51:a6:c2:88:65:0a:9b:f5:81:e0:46:fc:66:
1a:db:81:7e:9c:d7:3f:21:b2:00:ca:73:01:04:aa:
41:3d:95:54:cf:83:60:51:d4:fc:63:09:a1:ba:cb:
a7:07:be:cd:03:17:3d:16:80:46:b0:21:e2:8f:8f:
c7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FB:42:16:98:7E:D5:23:C3:82:D3:F2:C0:78:7C:5B:C4:75:1B:8E
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/LvtCFph-1SPDgtPywHh8W8R1G44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.112.0/22
194.32.172.0/22
IPv6:
2a0c:ea40::/29
Signature Algorithm: sha256WithRSAEncryption
ad:47:ce:53:d0:8f:a7:19:d1:33:62:88:0c:03:3c:d1:d8:31:
b8:5d:6f:35:aa:a1:a4:f3:d1:33:85:9b:c7:79:91:4f:10:70:
0f:32:a1:94:7a:84:62:6e:33:f0:03:62:57:b2:80:75:f0:0e:
9a:39:f6:b2:6f:e2:f2:57:68:da:11:da:90:01:3a:e6:b5:a9:
64:f3:71:44:40:9b:ad:39:0f:ad:2f:12:99:05:96:cc:33:c3:
77:0a:cc:b0:59:0f:54:86:e8:05:2a:98:4e:fc:e9:b0:c6:49:
5d:a0:dc:1a:d9:78:96:3d:d8:73:33:c3:e1:54:9b:2a:be:f4:
e8:59:09:42:b5:cc:eb:8d:34:0c:d2:d6:f7:04:bc:ab:31:75:
95:da:3d:81:b8:8f:ae:3f:3a:2a:0c:24:38:c7:d9:76:0e:9f:
35:07:53:53:b1:cf:7f:48:ab:e9:c8:9a:4a:96:d3:0e:d7:ce:
c6:e4:83:ad:24:ee:0c:26:07:a4:d0:14:5a:6c:70:be:06:96:
37:ce:74:83:a2:2c:05:6a:29:2a:7e:c8:92:ac:34:65:2e:c2:
3c:b3:ab:a0:1b:61:62:6d:b8:6a:6c:03:df:3b:9c:f5:a0:c5:
d7:bd:cb:03:59:e0:64:ec:35:24:e3:da:96:e7:67:ec:07:6f:
b3:2a:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:10 2025 by rpki-client