Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/L98PTTP-L8CxZVDFYeHglWC50_M.roa
File: L98PTTP-L8CxZVDFYeHglWC50_M.roa (raw, json)
Hash identifier: LUANSMfxOArAAmOu+3dpCKn7NK4081d6N3/hI2dDS6s=
Subject key identifier: 2F:DF:0F:4D:33:FE:2F:C0:B1:65:50:C5:61:E1:E0:95:60:B9:D3:F3
Certificate issuer: /CN=ad12daa384888b5247df712965803f0d3fa8989d
Certificate serial: 0185718C4842A6FA313D0A30EEE3C6204B62
Authority key identifier: AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/L98PTTP-L8CxZVDFYeHglWC50_M.roa
Signing time: Mon 02 Jan 2023 08:14:57 +0000
ROA not before: Mon 02 Jan 2023 08:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42263
IP address blocks: 185.182.32.0/22 maxlen: 22
185.115.48.0/22 maxlen: 22
185.32.80.0/22 maxlen: 22
185.116.244.0/24 maxlen: 24
185.116.244.0/22 maxlen: 22
192.70.192.0/22 maxlen: 22
185.173.240.0/22 maxlen: 22
185.145.196.0/22 maxlen: 22
2a00:c320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:48:42:a6:fa:31:3d:0a:30:ee:e3:c6:20:4b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad12daa384888b5247df712965803f0d3fa8989d
Validity
Not Before: Jan 2 08:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fdf0f4d33fe2fc0b16550c561e1e09560b9d3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:62:bf:3f:d7:e3:9a:1f:81:7e:b3:5b:5b:
b2:7c:43:b9:b2:c5:81:eb:1a:ed:cc:9e:08:e2:18:
a4:ce:43:e3:89:f3:c8:cb:93:97:cf:38:f6:39:f5:
ac:ba:30:d6:2f:c0:6e:fa:8f:30:e2:71:31:0e:6e:
92:9d:92:4a:50:b9:f2:1a:de:6c:16:fb:5f:e9:a1:
cb:bd:90:f0:5c:7c:5e:02:15:2c:f5:28:55:30:02:
91:49:30:d1:2f:d9:9c:a7:a6:84:c4:b0:e6:cf:82:
cb:29:93:43:3b:84:55:be:9e:ae:10:e2:7a:7b:ef:
b7:de:85:31:58:3e:c5:6f:61:fd:3b:5b:31:8f:ea:
6f:1a:5d:45:76:4d:a0:37:5b:ff:d2:b6:95:05:73:
e2:25:85:97:7e:e4:c8:54:74:1f:17:12:67:14:7b:
c0:5f:eb:98:44:09:31:51:1b:33:b8:d8:c4:66:9b:
bd:57:c1:a5:66:d2:93:8e:3f:e8:3e:83:e9:5d:74:
31:dc:6d:13:40:c3:5a:2a:cc:f4:82:7c:b5:d0:fa:
0b:8a:d5:36:bb:2a:1b:75:e9:37:5b:38:80:9e:c2:
fb:0a:63:e9:9a:25:fe:1d:54:04:68:3d:bd:34:07:
55:c5:96:cd:97:4a:b2:46:ec:0f:3e:f4:d8:29:e2:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:0F:4D:33:FE:2F:C0:B1:65:50:C5:61:E1:E0:95:60:B9:D3:F3
X509v3 Authority Key Identifier:
keyid:AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/L98PTTP-L8CxZVDFYeHglWC50_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/rRLao4SIi1JH33EpZYA_DT-omJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.80.0/22
185.115.48.0/22
185.116.244.0/22
185.145.196.0/22
185.173.240.0/22
185.182.32.0/22
192.70.192.0/22
IPv6:
2a00:c320::/32
Signature Algorithm: sha256WithRSAEncryption
20:bf:d9:d8:cf:4c:04:9f:f6:bd:ef:a8:f4:3d:7f:9d:f0:56:
55:b5:33:b4:13:7d:8c:69:90:ed:27:84:77:6f:e1:a0:f6:fa:
11:69:f6:57:b8:50:f3:3f:dc:24:23:5b:a9:20:f3:4c:e5:c6:
40:f3:96:1d:f0:95:aa:13:49:1e:0b:b2:6b:e0:9e:bb:55:c2:
7f:b6:f5:e1:34:66:b1:21:70:23:ba:87:bf:aa:4b:c8:f6:e2:
ef:44:3d:12:5f:9c:71:8e:a8:f2:1a:e6:93:17:20:39:32:88:
3b:b5:39:4a:f3:15:56:1c:e5:1f:e3:45:e0:cb:93:89:a7:43:
ad:c9:8a:08:62:c3:cf:0d:d9:45:33:c8:10:ed:da:09:0e:43:
22:b8:37:81:b3:18:9d:b6:56:13:e5:58:4a:6e:fb:78:53:b2:
02:53:22:68:7b:3f:c7:9d:ad:9d:a9:fe:9a:55:a2:6d:40:f3:
d3:34:34:e8:a8:d6:ad:bd:85:04:c5:73:8c:ff:9f:33:54:5f:
3e:e8:16:ca:50:9f:8f:74:f7:77:d3:50:fb:50:79:19:4b:68:
a3:46:b0:60:10:8e:8c:7b:ee:de:04:34:d6:bb:7f:8e:5b:ef:
83:fe:85:00:23:8c:2e:3d:56:66:b2:cd:f5:de:bb:53:4b:90:
e0:3a:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:38 2025 by rpki-client