Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/LHSJXrq4fzboLah7C-gF4O-Krh4.roa
File: LHSJXrq4fzboLah7C-gF4O-Krh4.roa (raw, json)
Hash identifier: dXC1M1f4xcsgjz8JdVvS5mt/3DkRXhiljl0W1UwisK8=
Subject key identifier: 2C:74:89:5E:BA:B8:7F:36:E8:2D:A8:7B:0B:E8:05:E0:EF:8A:AE:1E
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01942144101A3DF4BB57EB529D1FD5A5F423
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/LHSJXrq4fzboLah7C-gF4O-Krh4.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 95.81.82.0/23 maxlen: 24
95.81.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:10:1a:3d:f4:bb:57:eb:52:9d:1f:d5:a5:f4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c74895ebab87f36e82da87b0be805e0ef8aae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:64:13:43:60:1b:52:71:64:84:89:f7:61:
0b:60:0f:13:ef:81:d9:85:8d:d2:0b:64:e2:2f:2c:
25:c8:3e:b3:98:d3:b3:5d:f1:7c:43:99:d2:9d:e5:
74:f1:0e:06:17:e0:49:bc:ed:a5:7b:d6:3e:a7:22:
36:ac:55:b5:5a:17:e3:8c:ff:1d:f3:7e:cf:67:fb:
07:91:18:54:ba:78:f0:10:24:94:a0:3d:23:3a:ba:
28:5f:1e:b5:5a:01:6a:6e:24:6d:22:4d:5f:ae:96:
31:c4:2c:1b:24:b4:0f:70:7c:c7:04:ed:6a:d0:d3:
3b:a9:dd:69:e3:bc:13:cc:79:2f:b6:88:fe:1f:bb:
57:af:38:ea:ca:75:b5:4d:37:e6:25:20:b6:ad:60:
c6:20:fb:92:23:7d:c1:6a:5b:c5:81:61:ea:6c:ab:
ba:16:55:c2:ed:d1:f1:77:0d:0a:27:84:cd:3e:d1:
78:27:d3:40:97:93:57:ec:dd:5c:75:42:fe:fd:5e:
f9:9d:af:33:1b:0d:7e:91:26:53:4d:ca:20:ab:64:
1b:cd:8a:29:aa:52:ef:bd:e4:af:c6:a3:9c:5f:dc:
f9:01:2f:28:bc:2b:82:9a:cc:87:64:01:76:c3:0a:
d0:31:5e:41:e2:19:c5:24:a0:58:78:da:b8:62:94:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:74:89:5E:BA:B8:7F:36:E8:2D:A8:7B:0B:E8:05:E0:EF:8A:AE:1E
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/LHSJXrq4fzboLah7C-gF4O-Krh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.82.0/23
95.81.94.0/24
Signature Algorithm: sha256WithRSAEncryption
99:87:99:22:2b:39:15:1c:e6:cd:bb:5c:bd:7a:87:5e:e6:40:
41:00:a1:0e:09:e7:e5:9c:fa:56:3a:7e:18:4f:48:94:24:01:
42:b8:cb:0e:58:3a:5e:3d:ec:2e:f1:eb:5c:85:48:8e:ce:48:
64:52:a2:b6:ce:e5:99:a5:87:5e:55:e9:a3:52:a3:68:cd:17:
4d:af:30:c5:a0:29:74:4b:ee:a7:75:ad:8d:82:eb:e6:7c:65:
d6:f2:72:d6:d7:ac:c0:e7:d9:4d:99:3f:af:de:02:1f:19:ca:
06:1e:2f:a7:cd:01:d6:65:08:c1:2c:3c:7d:42:ff:2d:39:cd:
45:2e:0d:12:df:e0:68:d3:89:9a:1d:0b:c3:52:67:b7:f1:9b:
9b:84:85:85:37:da:11:5a:48:0d:7b:89:68:ed:f4:7b:93:48:
9e:c4:19:4b:5e:b3:00:f1:19:2e:6c:2c:17:c0:3c:f9:87:ad:
4b:df:3d:53:8b:dc:76:fc:23:38:c9:a9:4d:5c:7d:49:8f:4a:
43:f5:c5:2b:81:47:7b:46:1e:ab:46:04:52:06:7b:e9:c3:72:
00:71:42:64:5f:0e:22:3d:2b:95:13:6f:cf:0b:b7:d5:89:59:
90:58:9f:b5:76:8f:78:36:01:a5:73:7c:bd:20:69:45:87:65:
8a:e9:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:27 2025 by rpki-client