Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/LKt2QG-8jokXL8t-dUfape9o-wU.roa
File: LKt2QG-8jokXL8t-dUfape9o-wU.roa (raw, json)
Hash identifier: 9NOhWbpS6BrlupI6YO5N/smntjl+rFfyDVc/P/Q+B6k=
Subject key identifier: 2C:AB:76:40:6F:BC:8E:89:17:2F:CB:7E:75:47:DA:A5:EF:68:FB:05
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 01856D01B47D302D58F8A2EF1BED5F93C0C4
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/LKt2QG-8jokXL8t-dUfape9o-wU.roa
Signing time: Sun 01 Jan 2023 11:05:06 +0000
ROA not before: Sun 01 Jan 2023 11:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 87.237.84.0/24 maxlen: 24
87.237.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:b4:7d:30:2d:58:f8:a2:ef:1b:ed:5f:93:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Jan 1 11:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cab76406fbc8e89172fcb7e7547daa5ef68fb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:fe:9b:8c:91:d3:40:6d:90:04:c4:80:70:
6d:c3:4b:43:39:cc:76:b0:a4:98:43:a2:a1:b4:81:
f4:ca:71:f3:f0:e0:4d:1d:ef:42:e9:a3:e6:f6:16:
25:7b:7f:ea:5e:3b:53:08:dd:7f:ec:92:30:a4:d1:
82:33:08:85:01:cb:a0:17:eb:0c:01:0c:34:f7:f5:
ec:21:8a:88:75:89:9d:c7:46:1e:ab:0c:d2:43:7e:
f6:57:17:3a:58:08:45:c2:2f:18:35:76:d7:03:79:
25:53:c3:b6:29:f6:02:ff:1a:38:b5:b2:a0:8e:a5:
1f:b6:b4:ec:df:27:47:ee:b3:fb:fc:39:5f:6e:36:
f3:8f:d7:fb:b5:6b:24:65:e3:f9:9b:a6:05:8a:e2:
7e:a2:4b:f6:76:ea:5a:11:f2:cc:da:27:6d:52:fd:
e2:54:1c:4d:f4:62:6b:99:a0:5f:4d:8d:b2:9d:d2:
51:cd:c6:de:8a:87:79:03:ad:35:c0:ce:ed:98:3b:
35:34:e2:ae:84:0c:5b:4e:72:53:7a:c0:16:59:5e:
f9:33:dc:21:39:6e:d6:fb:4d:df:9c:9f:3e:49:6a:
51:a6:9d:eb:4c:f9:37:be:44:47:99:d3:3a:09:a6:
2a:d9:67:7d:c4:70:92:61:94:1f:31:69:32:af:47:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AB:76:40:6F:BC:8E:89:17:2F:CB:7E:75:47:DA:A5:EF:68:FB:05
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/LKt2QG-8jokXL8t-dUfape9o-wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.84.0/24
87.237.86.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:31:8d:28:71:77:b0:ad:58:3d:3f:ac:83:90:da:21:7d:b6:
08:0a:20:b8:c4:e3:b2:86:d3:8e:51:41:57:0b:1d:55:d8:b8:
5a:ab:e4:4a:e8:c8:5a:2d:3e:25:73:16:4e:b7:fe:c3:a4:de:
a0:15:61:27:b9:29:ed:e1:8a:0b:03:a6:e5:ad:aa:db:a4:9c:
f0:cd:9c:9c:80:0a:57:f8:b1:3c:45:99:f5:41:92:e0:f1:3f:
d2:eb:cb:ad:17:21:5a:d9:03:6f:5a:15:0b:d1:23:35:23:51:
60:0a:0f:bf:01:d6:a1:43:51:51:4c:d1:9a:13:8f:9d:a3:42:
5b:c7:9e:98:83:3a:a5:ef:35:28:e3:14:b0:9c:a7:b1:f8:3b:
00:fe:7f:53:bc:0f:bc:ec:6e:2d:26:d4:88:28:b1:24:af:05:
3d:9c:91:7d:0a:43:c6:f7:fa:94:ef:72:30:37:4d:6a:ae:d1:
55:0c:53:30:92:9e:0c:9b:81:a9:09:0d:1d:25:53:1f:ec:08:
f0:9c:e5:49:71:7b:d1:96:59:5f:45:05:3d:10:e7:a9:9b:3e:
56:81:f6:73:90:39:4f:af:6c:ba:43:08:aa:9b:c1:2a:9a:72:
ad:1e:52:89:7c:16:26:b9:14:2e:e6:02:2c:20:89:7c:34:8f:
57:8c:af:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:29 2025 by rpki-client