Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/LEXxT1g_8xqMVBxcUgqlZxhwj6c.roa
File: LEXxT1g_8xqMVBxcUgqlZxhwj6c.roa (raw, json)
Hash identifier: c/uDH0daOjhYecH6wdeVnGCCdhlLDdZhd8sxo8YzhTA=
Subject key identifier: 2C:45:F1:4F:58:3F:F3:1A:8C:54:1C:5C:52:0A:A5:67:18:70:8F:A7
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01831C30CB0EB5AE2562CB03058B96A3A86D
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/LEXxT1g_8xqMVBxcUgqlZxhwj6c.roa
Signing time: Thu 08 Sep 2022 08:21:43 +0000
ROA not before: Thu 08 Sep 2022 08:21:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.229.200.0/22 maxlen: 24
185.213.242.0/24 maxlen: 24
185.111.188.0/24 maxlen: 24
185.244.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:30:cb:0e:b5:ae:25:62:cb:03:05:8b:96:a3:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Sep 8 08:21:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c45f14f583ff31a8c541c5c520aa56718708fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:bf:c7:54:12:06:41:ea:cf:b1:8c:25:03:
ff:d2:85:e0:31:ed:0b:bc:35:65:76:43:65:ef:96:
5b:39:6b:c5:12:ba:b2:40:6e:e5:34:b0:f9:16:77:
3a:5d:ef:a7:32:50:22:d8:9e:07:95:e4:30:4c:18:
8a:2c:8d:38:af:d3:18:87:5f:59:39:19:54:cb:3e:
1e:9d:d0:10:92:66:94:6c:0f:3a:8c:f7:72:c0:39:
2b:53:d3:66:df:96:ca:9c:06:0a:a7:b6:13:18:30:
32:84:02:2e:39:33:15:2b:9d:8e:75:9c:da:d2:0e:
83:a1:46:a1:8f:e2:b9:06:92:e0:e4:c2:ac:89:f3:
0d:21:28:5d:c5:1b:42:dd:dd:45:fb:a3:da:58:3f:
34:b9:62:31:b2:0c:a8:a7:f1:63:7f:d9:c6:d4:e3:
a7:92:e4:15:3b:c3:d8:67:d3:90:ac:96:fd:12:8a:
fd:fc:18:d2:50:5d:5d:ba:1c:2c:36:0a:5f:c7:b4:
3d:c9:61:b3:31:fb:79:79:d8:b0:e3:f9:53:ae:5f:
ee:eb:92:c2:f1:db:03:3f:d5:3f:02:36:03:08:b7:
fb:cf:47:3f:54:7f:45:07:f9:cb:6e:4b:58:b9:7f:
f1:f8:3b:fb:9a:a1:bd:31:da:af:53:ec:a5:37:45:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:45:F1:4F:58:3F:F3:1A:8C:54:1C:5C:52:0A:A5:67:18:70:8F:A7
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/LEXxT1g_8xqMVBxcUgqlZxhwj6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.188.0/24
185.213.242.0/24
185.229.200.0/22
185.244.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:7c:33:c3:41:a3:3d:25:66:c2:cb:94:fe:29:f2:e3:a3:13:
56:77:67:d8:8b:52:fe:32:6a:a4:59:65:99:5a:2c:6d:2f:3c:
ac:f1:13:a8:ed:3c:24:28:fa:0b:18:42:2b:a9:93:98:e7:6c:
05:d3:45:6d:80:fc:92:80:28:b3:23:6f:30:48:42:e1:c8:0a:
a5:60:4f:ec:ad:06:d5:de:6c:96:5a:c5:51:a1:7e:e2:bc:0c:
ea:97:ee:d7:39:82:54:f7:9f:66:24:8c:d5:7d:74:e8:05:2c:
5e:07:06:82:55:58:3f:66:2f:5e:f7:14:40:dc:83:15:ed:00:
6d:b9:f4:77:6b:8d:63:96:c7:a4:e5:8e:53:02:55:99:20:3f:
d7:d0:ef:29:c8:43:ea:06:19:6c:73:e1:f5:a8:4f:f3:55:72:
70:56:96:44:25:e2:66:65:e8:32:2e:73:be:ba:ac:d5:9a:16:
9c:59:18:14:e7:92:0e:0f:5a:d2:9c:94:8f:76:cd:6a:e4:fa:
ce:71:6d:1d:cc:30:94:9e:1e:fb:5e:dd:79:b1:46:0b:6e:ad:
1c:b4:82:f8:1e:0f:91:5e:8d:a4:99:7b:86:51:fc:43:62:f1:
81:87:57:0f:c2:71:21:99:c5:0b:72:b3:03:a5:d8:c3:eb:30:
44:60:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:56:24 2025 by rpki-client