Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/LARu-mFR6Z5ZnZshJmks76BLQnE.roa
File: LARu-mFR6Z5ZnZshJmks76BLQnE.roa (raw, json)
Hash identifier: 7S24RoHJF6hDT4sm6MxVWkkWv/dQHym21UzE9DkzPLk=
Subject key identifier: 2C:04:6E:FA:61:51:E9:9E:59:9D:9B:21:26:69:2C:EF:A0:4B:42:71
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0189D2400A6B4FD4B91256CEE2EC1AC662AB
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/LARu-mFR6Z5ZnZshJmks76BLQnE.roa
Signing time: Mon 07 Aug 2023 23:05:59 +0000
ROA not before: Mon 07 Aug 2023 23:05:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.46.248.0/22 maxlen: 24
109.94.144.0/20 maxlen: 24
94.24.64.0/21 maxlen: 24
91.245.216.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
62.122.40.0/21 maxlen: 24
192.64.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d2:40:0a:6b:4f:d4:b9:12:56:ce:e2:ec:1a:c6:62:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Aug 7 23:05:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c046efa6151e99e599d9b2126692cefa04b4271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:f0:be:2e:d0:e8:ee:65:86:8f:ae:7b:e4:
41:d1:0a:9d:0d:06:a6:ce:e9:6c:7d:e9:b6:39:16:
22:11:f2:97:df:cb:61:93:23:85:7d:e8:4b:26:a9:
8a:8f:ad:e6:f8:2b:6b:55:57:25:76:d7:e7:52:0d:
47:3e:b8:a0:19:06:3c:28:43:4e:8b:5e:fd:8b:77:
fc:c0:63:69:ee:72:55:ec:7a:0f:6d:48:45:48:11:
ac:2f:f8:ed:3c:2a:26:5b:bd:a7:89:39:81:77:81:
cf:4a:a3:74:af:30:33:6f:74:0e:d7:84:69:bf:c0:
33:17:0a:c7:57:01:cf:6a:71:e9:3f:b6:e9:ae:23:
c3:d6:14:7c:f8:56:70:00:8a:65:07:37:17:12:83:
22:7d:bd:5c:f7:ce:bb:d2:69:60:55:8c:55:02:3b:
59:bf:53:5e:0c:5b:b6:f2:3e:91:1c:3c:81:64:4b:
d0:96:e7:2b:f1:f7:fb:6a:b4:9e:5f:9a:db:15:bb:
a1:5c:87:ff:72:8e:f0:b5:3c:1b:ef:53:33:6c:e0:
28:e5:1a:c4:e0:97:c8:ab:e0:c0:c6:3a:d4:88:6c:
d4:c7:5e:58:62:90:2a:ad:33:05:16:83:92:c4:27:
1e:09:61:b7:b3:d4:4c:2e:d1:83:b9:7f:f0:39:cf:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:04:6E:FA:61:51:E9:9E:59:9D:9B:21:26:69:2C:EF:A0:4B:42:71
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/LARu-mFR6Z5ZnZshJmks76BLQnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.40.0/21
89.46.248.0/22
91.245.216.0/23
94.24.64.0/21
94.26.24.0/23
109.94.144.0/20
192.64.44.0/23
Signature Algorithm: sha256WithRSAEncryption
da:29:6c:4b:d8:a4:2f:29:cc:f2:08:d6:d4:47:0f:0e:b8:db:
f9:ba:80:b0:04:fc:49:ad:13:30:b6:bb:84:65:05:bd:f7:f3:
88:a7:4e:6b:2f:43:9b:cf:ea:39:41:58:83:7f:80:02:45:8f:
ea:43:78:99:ab:e9:c4:5d:dc:dd:12:c7:54:7e:01:90:ab:05:
8b:79:10:1e:59:85:dc:bd:09:b5:05:8f:e1:1c:9d:94:57:c5:
f2:b1:21:97:8c:d8:8b:59:f0:ad:03:d9:1a:17:11:c5:e6:ed:
53:9f:43:ac:0c:6b:59:bb:84:08:f0:c2:42:af:d2:66:aa:01:
fb:62:29:f1:fb:fd:b3:17:d2:4e:79:12:53:4a:2e:31:3b:1c:
bb:2f:78:be:01:f0:5b:fa:15:13:19:07:1e:a7:2b:fc:6c:57:
8e:65:55:9c:75:09:99:df:48:04:a6:d3:c2:fd:4b:cf:44:d1:
c8:d9:15:68:84:f6:cc:2e:6b:e0:3d:53:79:31:d7:f6:2a:af:
f6:7e:bc:83:04:29:eb:98:54:5d:20:e9:f9:83:05:fa:22:68:
40:66:c7:04:e1:bc:83:c5:70:9f:5c:3c:c6:76:c4:3b:ed:4e:
07:1c:23:ee:58:03:f5:a0:93:18:84:bc:eb:b4:e0:a9:c3:d6:
4a:a5:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:46:48 2025 by rpki-client