Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/LDEj4SMDPkDTj_T48Pog_l047Mk.roa
File: LDEj4SMDPkDTj_T48Pog_l047Mk.roa (raw, json)
Hash identifier: ZOUfqs6+VP+YNID8F0iXnzhEI983AicKfCFMg+KMyNA=
Subject key identifier: 2C:31:23:E1:23:03:3E:40:D3:8F:F4:F8:F0:FA:20:FE:5D:38:EC:C9
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 0A19DB58
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/LDEj4SMDPkDTj_T48Pog_l047Mk.roa
Signing time: Sat 01 Jan 2022 00:54:05 +0000
ROA not before: Sat 01 Jan 2022 00:54:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48281
IP address blocks: 185.126.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169466712 (0xa19db58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Jan 1 00:54:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c3123e123033e40d38ff4f8f0fa20fe5d38ecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:d6:23:11:2e:93:c5:c7:f6:96:64:e4:73:
8b:7d:a0:89:aa:4e:b3:fe:df:e7:cf:64:5d:57:d7:
6f:b6:2c:86:a1:33:2e:d6:10:7d:4a:01:a9:0e:f4:
5e:f9:00:2c:98:28:e9:6c:04:2c:04:6f:48:54:a8:
bc:a8:60:9a:26:65:4a:80:51:07:76:6e:8d:c3:d0:
94:1c:f0:ee:e7:7e:69:20:86:1e:7a:71:89:2a:ec:
37:d8:8a:43:57:e7:c0:16:86:31:d4:af:ee:15:85:
65:2c:91:ab:ea:74:6d:4b:96:ee:4a:98:4c:a0:43:
f8:52:7d:c8:54:51:99:d4:97:bc:12:10:af:0e:80:
80:50:5d:a8:0a:b1:ad:94:59:69:58:ce:58:61:4b:
97:f8:60:52:8b:9d:a9:10:b1:71:55:40:8b:54:09:
d8:8d:09:cb:cc:0f:89:1a:57:3b:0f:81:ab:2f:96:
c4:5c:f6:d0:a2:28:71:e1:28:fb:4d:c2:2c:72:0f:
27:eb:07:41:22:6f:7b:62:8d:95:eb:8e:84:dd:b6:
35:77:d7:8b:8a:90:e0:38:2a:b0:aa:c3:90:cc:34:
d4:25:1c:9d:c7:96:34:d7:ec:52:cb:82:1d:94:a8:
6e:68:6f:8e:85:c1:8c:8a:d1:3a:68:69:a4:0b:fc:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:31:23:E1:23:03:3E:40:D3:8F:F4:F8:F0:FA:20:FE:5D:38:EC:C9
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/LDEj4SMDPkDTj_T48Pog_l047Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.132.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:50:79:38:79:02:29:fa:04:dc:a2:85:fc:54:4a:1f:7f:87:
fa:cb:10:5e:02:17:7d:0f:fa:15:f2:76:47:9e:33:f3:f4:db:
34:ad:0f:7b:42:10:18:c9:d4:a4:c7:33:54:df:9f:9a:a9:49:
28:51:dd:d7:68:84:ae:b6:80:dd:82:1e:c4:0e:5b:6e:d0:c9:
0e:56:87:36:4e:7d:4e:3a:2e:2d:9f:99:5f:62:f5:51:f0:eb:
98:a6:ee:eb:22:c1:7f:e8:62:7b:64:e4:00:39:fe:e1:db:4c:
e7:be:a3:f0:ea:b8:ea:cb:3b:52:d1:de:1b:42:76:8f:61:7b:
1e:ed:9b:d3:85:f1:13:64:89:12:de:b6:91:0a:10:08:3c:d3:
0b:2b:bf:d9:b5:69:8c:ea:a0:da:0b:27:50:e5:b6:a9:a4:37:
9d:74:f7:91:0e:ae:33:12:6d:49:44:08:6f:e7:f1:6f:5b:3b:
ba:56:23:5d:a2:b4:e0:c5:f3:e8:54:82:c9:20:c5:04:80:36:
61:a5:a0:a5:cd:37:2a:6b:66:d5:43:c1:68:d5:a0:3d:dd:cc:
c4:4c:ef:70:49:0f:2c:55:cf:41:86:65:58:b6:73:81:d4:82:
64:53:f2:3f:e3:d5:01:33:c4:63:2d:e8:34:eb:21:26:77:0e:
87:32:a7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:03:12 2025 by rpki-client