Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/975188-f017-49e3-b7b6-e92bf90ac5a3/1/lwjaUwSdLsC2UYbJ7xZbPiSps48.roa
File: lwjaUwSdLsC2UYbJ7xZbPiSps48.roa (raw, json)
Hash identifier: dGwch+5JdyC69ZtaHCa9tFxIMI8WwJZD89BJjMP/0Os=
Subject key identifier: 97:08:DA:53:04:9D:2E:C0:B6:51:86:C9:EF:16:5B:3E:24:A9:B3:8F
Certificate issuer: /CN=49d99fddb5bd8a2923c85279f6ee249c71678960
Certificate serial: 0BB22CAF
Authority key identifier: 49:D9:9F:DD:B5:BD:8A:29:23:C8:52:79:F6:EE:24:9C:71:67:89:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sdmf3bW9iikjyFJ59u4knHFniWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/975188-f017-49e3-b7b6-e92bf90ac5a3/1/lwjaUwSdLsC2UYbJ7xZbPiSps48.roa
Signing time: Sat 01 Jan 2022 01:57:24 +0000
ROA not before: Sat 01 Jan 2022 01:57:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13097
IP address blocks: 213.178.192.0/20 maxlen: 24
46.229.80.0/20 maxlen: 24
84.234.100.0/22 maxlen: 24
185.178.12.0/22 maxlen: 24
185.138.36.0/22 maxlen: 24
89.189.32.0/20 maxlen: 24
80.70.116.0/22 maxlen: 24
89.189.56.0/21 maxlen: 24
82.163.32.0/22 maxlen: 24
2a01:7540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196226223 (0xbb22caf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d99fddb5bd8a2923c85279f6ee249c71678960
Validity
Not Before: Jan 1 01:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9708da53049d2ec0b65186c9ef165b3e24a9b38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:0c:f5:4a:0d:10:8e:f6:3f:11:47:84:7e:
ff:d4:0d:f9:91:ea:c0:bc:8b:6f:13:fe:b6:8f:e5:
10:c0:fd:a5:b4:bb:31:ce:64:14:14:a8:61:ab:f9:
88:59:8e:5f:97:e9:73:31:14:48:50:9f:bb:81:3b:
fa:98:4b:ec:f9:38:a1:28:fe:6e:25:9c:e6:50:ea:
d0:96:ca:0e:85:73:86:df:4b:48:6f:4e:f5:1f:0d:
7b:55:ee:d0:0a:07:65:67:bf:ad:8c:54:c3:46:02:
ec:fe:ca:a6:97:30:85:83:b4:d7:fa:01:df:e6:39:
01:6a:12:e7:d5:0b:c7:5b:f5:65:7a:ff:9d:01:c3:
af:e3:2b:7b:73:a9:24:10:03:85:bf:13:9f:5d:ff:
6e:42:e2:98:10:25:98:d8:1b:b2:48:12:53:f6:5d:
56:8c:a7:02:fc:00:34:56:b9:6d:f0:e4:c5:07:d6:
39:cf:4a:e3:1e:dc:47:cd:b6:1d:99:01:ff:fb:d8:
b9:b7:2c:83:3a:08:04:2c:b1:93:ee:58:64:f4:83:
55:4d:26:18:44:e2:e9:cc:20:20:1d:20:75:8a:76:
fa:81:41:65:7d:85:12:5f:63:5b:44:5b:af:ef:18:
29:a4:88:3c:cc:b3:78:b9:2f:28:da:e4:83:04:d1:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:08:DA:53:04:9D:2E:C0:B6:51:86:C9:EF:16:5B:3E:24:A9:B3:8F
X509v3 Authority Key Identifier:
keyid:49:D9:9F:DD:B5:BD:8A:29:23:C8:52:79:F6:EE:24:9C:71:67:89:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sdmf3bW9iikjyFJ59u4knHFniWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/975188-f017-49e3-b7b6-e92bf90ac5a3/1/lwjaUwSdLsC2UYbJ7xZbPiSps48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/975188-f017-49e3-b7b6-e92bf90ac5a3/1/Sdmf3bW9iikjyFJ59u4knHFniWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.80.0/20
80.70.116.0/22
82.163.32.0/22
84.234.100.0/22
89.189.32.0/20
89.189.56.0/21
185.138.36.0/22
185.178.12.0/22
213.178.192.0/20
IPv6:
2a01:7540::/32
Signature Algorithm: sha256WithRSAEncryption
08:41:5e:3b:a7:bb:37:0f:e8:59:4b:71:f0:c0:a0:eb:1a:f0:
99:2d:95:4d:b8:64:98:eb:38:63:af:35:ff:c0:d9:62:01:f8:
0f:5c:50:fb:89:9b:b9:2b:cb:c7:7f:9e:6a:ba:dc:bb:1e:41:
67:b0:d3:d0:55:50:4f:18:a0:6a:83:10:13:fe:44:aa:37:30:
46:1e:d8:e6:eb:9a:97:25:bd:0c:68:65:00:e3:91:31:f5:ec:
dc:eb:ac:52:0b:77:2f:cf:36:07:3e:99:b5:95:4d:d8:26:cf:
d7:c0:54:4c:5b:8e:f9:5e:6d:b4:af:48:2e:79:7c:67:92:c7:
24:6e:db:d4:5e:2e:2d:a1:43:2b:ea:4d:50:67:67:e5:a0:b9:
af:10:6b:b1:cc:78:37:69:22:3d:61:07:13:56:4b:82:30:d8:
da:96:ad:a7:cb:2a:97:95:65:95:77:8b:95:42:04:53:22:5e:
e9:f3:57:3b:ae:0f:f4:95:63:5f:14:49:91:3a:74:3d:5a:8b:
8b:bd:27:f2:83:27:44:05:9d:a9:a4:a1:ad:3c:4d:cd:67:88:
f0:17:0f:f7:b4:c3:86:2a:fb:1b:fc:9a:9b:ae:c1:82:37:0d:
da:f0:19:4c:34:2a:ac:4e:ea:ae:c1:2f:47:8d:36:1f:89:35:
bf:53:80:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:29 2025 by rpki-client