Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/Lfpr_zOjD5YwnM8YgTsiLnWpDfA.roa
File: Lfpr_zOjD5YwnM8YgTsiLnWpDfA.roa (raw, json)
Hash identifier: OmRDjkPQ+18qn+UxGR2uk7w6di8Xz9C4g7ccgSrHYC8=
Subject key identifier: 2D:FA:6B:FF:33:A3:0F:96:30:9C:CF:18:81:3B:22:2E:75:A9:0D:F0
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 019426D8FCEAE6235AF8601373563B74A674
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/Lfpr_zOjD5YwnM8YgTsiLnWpDfA.roa
Signing time: Thu 02 Jan 2025 11:49:02 +0000
ROA not before: Thu 02 Jan 2025 11:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25795
IP address blocks: 185.139.32.0/23 maxlen: 24
2a07:12c0::/29 maxlen: 29
2a07:12c5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:fc:ea:e6:23:5a:f8:60:13:73:56:3b:74:a6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Jan 2 11:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dfa6bff33a30f96309ccf18813b222e75a90df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:71:5d:f3:e5:6c:2b:02:f0:de:60:51:75:
c8:16:6a:51:98:05:71:84:ad:9a:c1:78:bc:3c:b3:
fe:9a:28:e4:e2:fc:a9:a3:0e:09:84:80:34:85:a4:
fa:83:07:4b:4d:ae:b1:4c:47:be:e2:bd:19:3b:ac:
68:aa:d7:86:61:99:88:cc:29:fc:71:b0:ee:f9:67:
69:d8:c9:d3:66:34:df:73:a1:18:0e:5b:75:da:c4:
e6:e7:69:08:be:30:90:c4:f7:4c:f6:99:14:47:12:
e0:c2:a2:b4:99:b0:ad:4f:ff:8a:c6:e0:1d:f5:33:
ea:e8:62:c7:02:09:57:64:6e:c8:07:a6:17:1d:92:
28:1b:49:8a:cf:fe:15:f0:39:8e:ed:ba:96:aa:7e:
07:51:3c:c9:e1:ad:05:3d:61:f6:96:a4:a1:36:7f:
9d:44:bf:1b:6f:bb:f6:0d:8e:7f:ea:5f:c6:e7:9c:
05:f8:94:71:e4:11:a1:7c:66:24:cb:ff:5f:01:6c:
7e:b9:c8:48:75:5f:1f:2f:a5:d5:3e:8f:af:c2:6d:
15:01:80:75:22:ae:f5:d3:6b:55:c7:64:34:ba:af:
2b:6e:84:80:5b:d5:70:71:5b:b5:eb:fc:74:e5:87:
74:f1:0d:95:04:f6:fa:fc:4d:bc:10:ab:42:0f:83:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FA:6B:FF:33:A3:0F:96:30:9C:CF:18:81:3B:22:2E:75:A9:0D:F0
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/Lfpr_zOjD5YwnM8YgTsiLnWpDfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.32.0/23
IPv6:
2a07:12c0::/29
Signature Algorithm: sha256WithRSAEncryption
81:99:db:1c:52:b6:fa:a9:27:4f:fd:ae:f9:74:00:44:61:d7:
2f:bc:94:ee:73:fa:75:25:77:ed:c5:98:74:a7:0e:42:9a:04:
bd:cc:c8:a8:aa:be:db:2c:19:a8:f4:1b:5c:f8:0e:91:cf:63:
6a:28:3e:8b:2b:53:ff:6c:7f:8f:65:ed:56:63:1d:13:20:4c:
46:8d:dc:51:e6:f7:1f:83:93:1d:fa:db:c9:ea:27:f4:b8:35:
af:83:f4:c6:8b:a1:5d:9b:45:06:a5:00:b0:2a:4e:eb:96:9d:
57:fe:e7:c1:5a:db:47:c4:f1:e7:82:d0:82:a3:50:bc:8f:01:
7c:98:5b:84:1d:71:30:04:af:b6:2a:83:1c:d4:2d:5b:b8:f9:
f6:7e:5e:53:af:f2:fc:b7:03:09:7f:3e:5c:e9:2c:9c:32:04:
9f:7b:1f:bc:c1:21:c1:b0:c0:4c:9f:8d:b8:d7:58:88:79:67:
fa:62:87:ff:27:e4:41:7d:57:92:4b:af:b7:9b:cd:b3:8a:0b:
a5:89:24:0d:6e:41:be:95:84:92:41:8d:c4:cd:de:48:63:dd:
aa:ec:fa:26:71:ca:cc:65:3a:94:07:ff:e5:47:61:57:23:ee:
4f:42:c2:7b:b8:f7:83:bd:05:6a:dc:0d:ee:9a:7d:a4:a3:14:
64:96:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:20 2025 by rpki-client