Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d7fd79-76d3-45fc-971f-a8fb254d9def/1/LbV3wwRgKUGyxmFALZ5bXR3kebw.roa
File: LbV3wwRgKUGyxmFALZ5bXR3kebw.roa (raw, json)
Hash identifier: HXjxgHL7HJ/qoEZtPATJXeXB37Qc/ZdoIhy9bhsVpo4=
Subject key identifier: 2D:B5:77:C3:04:60:29:41:B2:C6:61:40:2D:9E:5B:5D:1D:E4:79:BC
Certificate issuer: /CN=441e37e6a0f95511b588ccd3cfe9b86dc3ebc756
Certificate serial: 11ABE055
Authority key identifier: 44:1E:37:E6:A0:F9:55:11:B5:88:CC:D3:CF:E9:B8:6D:C3:EB:C7:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB435qD5VRG1iMzTz-m4bcPrx1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d7fd79-76d3-45fc-971f-a8fb254d9def/1/LbV3wwRgKUGyxmFALZ5bXR3kebw.roa
Signing time: Sat 01 Jan 2022 07:57:39 +0000
ROA not before: Sat 01 Jan 2022 07:57:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44942
IP address blocks: 185.157.216.0/22 maxlen: 22
92.63.226.0/24 maxlen: 24
92.63.225.0/24 maxlen: 24
92.63.224.0/20 maxlen: 20
92.63.224.0/24 maxlen: 24
92.63.228.0/24 maxlen: 24
92.63.227.0/24 maxlen: 24
92.63.233.0/24 maxlen: 24
92.63.232.0/24 maxlen: 24
92.63.231.0/24 maxlen: 24
92.63.230.0/24 maxlen: 24
92.63.229.0/24 maxlen: 24
92.63.235.0/24 maxlen: 24
92.63.234.0/24 maxlen: 24
92.63.239.0/24 maxlen: 24
92.63.238.0/24 maxlen: 24
92.63.237.0/24 maxlen: 24
92.63.236.0/24 maxlen: 24
92.246.104.0/22 maxlen: 22
92.246.111.0/24 maxlen: 24
92.246.110.0/24 maxlen: 24
92.246.109.0/24 maxlen: 24
92.246.108.0/22 maxlen: 22
92.246.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296476757 (0x11abe055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441e37e6a0f95511b588ccd3cfe9b86dc3ebc756
Validity
Not Before: Jan 1 07:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db577c304602941b2c661402d9e5b5d1de479bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:0c:ee:f4:83:55:6a:9d:c8:4b:00:01:34:
f4:3a:1f:c1:c0:2c:dd:f0:55:5a:ce:f6:1f:e6:69:
6e:e3:2a:46:98:ec:bd:a0:5b:30:d4:6a:d9:e0:15:
8d:13:74:e5:55:57:d4:f2:f5:33:cf:d6:f2:60:c2:
bd:24:88:8b:91:df:b4:3d:29:c2:22:36:d5:3a:10:
0c:5b:51:98:13:a5:96:62:0d:ac:47:31:0a:a6:69:
42:53:48:2a:70:32:4c:84:a0:7c:36:6e:69:57:d5:
3f:d6:40:6d:7a:5b:41:d7:82:fc:d8:1b:54:0f:72:
bd:1b:90:66:23:81:99:c4:00:30:18:fe:a7:95:a1:
d1:99:00:7d:e4:23:73:41:85:48:1b:42:a3:7d:10:
ab:cd:5b:dd:f1:10:c0:c8:95:1c:88:c1:82:b0:00:
91:61:22:ab:3c:17:f2:50:0e:4b:f3:17:48:cf:c7:
f1:dd:7e:91:c1:23:e7:bd:ab:38:8c:68:37:54:bf:
0b:fd:ac:bc:00:7c:3f:be:58:95:59:9e:c1:fa:f4:
ec:db:5e:64:2d:b2:97:78:9d:f1:da:4a:5a:8e:5a:
5c:05:1f:d0:6f:92:36:e5:05:4c:c9:f6:5e:2d:2e:
bf:fe:90:56:b0:5e:cf:66:6c:0c:4c:cd:62:ae:1f:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B5:77:C3:04:60:29:41:B2:C6:61:40:2D:9E:5B:5D:1D:E4:79:BC
X509v3 Authority Key Identifier:
keyid:44:1E:37:E6:A0:F9:55:11:B5:88:CC:D3:CF:E9:B8:6D:C3:EB:C7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB435qD5VRG1iMzTz-m4bcPrx1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d7fd79-76d3-45fc-971f-a8fb254d9def/1/LbV3wwRgKUGyxmFALZ5bXR3kebw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d7fd79-76d3-45fc-971f-a8fb254d9def/1/RB435qD5VRG1iMzTz-m4bcPrx1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.224.0/20
92.246.104.0/21
185.157.216.0/22
Signature Algorithm: sha256WithRSAEncryption
88:32:af:60:15:6a:96:2f:6c:47:0f:40:c5:2b:2d:d9:f8:95:
3a:46:86:bd:5a:b3:f4:77:23:b2:61:69:0e:03:02:71:e4:c7:
af:7a:b7:df:47:ed:46:ab:d1:73:2e:2d:22:e0:01:07:d0:62:
aa:11:9c:88:c0:9f:71:bf:1e:e3:f8:13:c7:5b:17:fc:0e:38:
c7:76:0c:7d:05:28:b4:da:db:de:8f:5b:07:67:1d:86:03:ca:
fb:e7:8d:db:ee:8e:20:a4:b8:93:eb:48:2d:c7:d9:07:e7:23:
b0:7a:dd:43:ab:50:d7:94:b0:39:68:03:2e:cb:07:c1:b3:f8:
8c:9f:fd:9e:bd:61:fd:f8:3b:86:be:d4:86:e6:f1:3a:fa:23:
22:23:e4:de:58:50:22:b4:fe:1b:89:4e:32:ae:6a:94:83:9a:
2c:6f:4f:08:4e:e1:cb:75:3d:71:0a:f1:31:c5:9d:db:11:64:
af:0e:a8:53:05:00:15:fe:a8:e0:9b:bb:7d:04:6a:c0:dc:b1:
8f:32:8c:56:08:45:ad:af:01:74:a1:f4:b9:ce:e6:56:05:63:
5e:01:e8:28:11:26:94:ea:21:1a:3e:58:39:a7:5b:81:2e:3f:
60:85:6b:83:27:ed:41:a6:58:5f:47:44:be:c5:16:b3:2c:03:
48:e5:70:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:47 2025 by rpki-client