Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/LougP6vfop8T1SEx3kJvUXqd7Cg.roa
File: LougP6vfop8T1SEx3kJvUXqd7Cg.roa (raw, json)
Hash identifier: dZnOcwy9b1ZPUiuYP2JDTwFYC8hXoy4yK01iTwEH3s0=
Subject key identifier: 2E:8B:A0:3F:AB:DF:A2:9F:13:D5:21:31:DE:42:6F:51:7A:9D:EC:28
Certificate issuer: /CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Certificate serial: 0183F226300DA33058995E2B2A34B44AB6B6
Authority key identifier: E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/LougP6vfop8T1SEx3kJvUXqd7Cg.roa
Signing time: Wed 19 Oct 2022 21:28:52 +0000
ROA not before: Wed 19 Oct 2022 21:28:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208143
IP address blocks: 185.179.34.0/24 maxlen: 24
2a02:6c20:5::/48 maxlen: 48
2a02:6c20:810::/48 maxlen: 48
2a02:6c20:828::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f2:26:30:0d:a3:30:58:99:5e:2b:2a:34:b4:4a:b6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Validity
Not Before: Oct 19 21:28:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e8ba03fabdfa29f13d52131de426f517a9dec28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:97:e4:7c:00:e7:3e:bb:73:8f:01:15:d8:4c:
c9:f3:51:58:11:c8:2b:88:fc:9f:de:4a:5a:85:83:
db:fa:5f:00:92:45:4e:e5:fb:e8:b7:d2:00:a1:ed:
ba:06:e4:1c:b2:ae:83:03:ea:bf:59:65:8a:6f:55:
69:47:7e:41:ad:1b:4e:d2:d5:8e:ee:47:2b:5c:cb:
a5:da:c7:49:51:b8:82:e7:68:cc:22:b3:71:70:ce:
05:b0:a9:eb:68:29:f7:91:4e:ac:d1:35:65:c5:69:
2d:9e:83:b8:66:fd:19:4a:b9:2e:79:e7:79:32:cc:
65:13:1b:2b:97:e1:7b:2f:7d:c9:22:3c:17:ef:24:
05:65:56:bc:72:44:37:6f:8d:0e:86:f9:31:e2:ec:
a2:ed:05:ac:8e:fd:81:a9:dc:40:f8:c1:de:f6:72:
f5:82:4b:12:52:1d:2e:90:ab:4b:bb:a5:f1:45:6d:
75:94:b6:f3:33:de:db:b9:63:29:a3:3f:9a:db:44:
09:40:d0:ce:08:c7:f5:6d:d5:20:69:4f:75:73:b8:
a4:44:2b:40:dc:37:5c:ae:20:77:a8:c7:ab:b0:6d:
e4:ab:10:3b:bf:46:db:84:28:00:72:d3:d9:61:10:
1d:54:09:b4:70:7d:39:53:7a:16:80:a3:e8:62:47:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:A0:3F:AB:DF:A2:9F:13:D5:21:31:DE:42:6F:51:7A:9D:EC:28
X509v3 Authority Key Identifier:
keyid:E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/LougP6vfop8T1SEx3kJvUXqd7Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.34.0/24
IPv6:
2a02:6c20:5::/48
2a02:6c20:810::/48
2a02:6c20:828::/48
Signature Algorithm: sha256WithRSAEncryption
01:8a:7e:9e:25:61:95:6f:c8:45:92:98:92:24:fc:fb:c0:c9:
e1:dd:81:45:9f:f3:9a:bd:fa:c6:55:17:21:1b:2e:b0:b2:b6:
8d:1a:f6:3e:d4:65:50:bc:3b:8e:84:d5:b7:aa:1b:0e:17:10:
a8:ac:54:ef:59:c8:32:00:27:f4:7b:6e:41:ca:60:ce:ec:29:
4a:c2:d4:7f:ab:ee:aa:c6:34:10:6d:34:f2:ba:42:7c:55:16:
54:64:9b:70:27:b8:f2:46:47:f4:7c:d1:49:1a:3a:5c:61:82:
69:d6:51:f6:30:f0:ee:63:74:d3:de:f3:b6:c5:be:29:0a:25:
df:df:5d:ab:3f:e5:12:f0:67:c7:a1:c1:49:55:7c:44:0f:8e:
62:4b:1b:68:1f:11:4d:f8:dd:39:ee:77:d2:09:10:a7:07:59:
bf:5f:cd:08:86:b9:17:c3:f7:10:33:5a:e4:ea:f2:3e:c9:bc:
7e:ef:3f:22:c7:9e:3f:f4:56:f9:67:ba:f0:0b:e7:69:c9:d9:
c1:28:34:d4:02:f8:ac:de:c6:2d:fb:12:0d:63:82:87:57:fc:
41:ef:16:9f:ce:2d:e7:e1:28:c8:c5:98:18:a4:88:5f:78:d8:
21:81:87:9c:17:ff:64:d0:2c:2b:3b:12:d5:2e:a9:4c:9c:39:
0e:24:87:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:46 2025 by rpki-client