Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/LFVZ_1A0hJR0jEHLQ95R63UCRS4.roa
File: LFVZ_1A0hJR0jEHLQ95R63UCRS4.roa (raw, json)
Hash identifier: jxltB5jjkJtYd/2epcS4rHxqL33Ze5qPo+A0INMOSgY=
Subject key identifier: 2C:55:59:FF:50:34:84:94:74:8C:41:CB:43:DE:51:EB:75:02:45:2E
Certificate issuer: /CN=cbb0a86e98fd8ffa35038eeb08aae850fb909f2b
Certificate serial: 0372DD79
Authority key identifier: CB:B0:A8:6E:98:FD:8F:FA:35:03:8E:EB:08:AA:E8:50:FB:90:9F:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Cobpj9j_o1A47rCKroUPuQnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/LFVZ_1A0hJR0jEHLQ95R63UCRS4.roa
Signing time: Sat 01 Jan 2022 09:56:41 +0000
ROA not before: Sat 01 Jan 2022 09:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212941
IP address blocks: 185.67.98.0/24 maxlen: 24
185.67.98.0/23 maxlen: 23
185.67.97.0/24 maxlen: 24
185.67.96.0/24 maxlen: 24
185.67.96.0/22 maxlen: 22
185.67.96.0/23 maxlen: 23
185.67.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57859449 (0x372dd79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb0a86e98fd8ffa35038eeb08aae850fb909f2b
Validity
Not Before: Jan 1 09:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c5559ff50348494748c41cb43de51eb7502452e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:32:7a:3c:81:f0:75:2c:88:c7:96:ba:a5:
f8:12:bd:d3:df:e0:e6:aa:46:6d:2d:eb:d9:95:5c:
b5:36:e4:a8:a7:68:49:7a:54:6b:8a:05:0c:68:1f:
bb:d5:8f:a2:d4:1f:58:56:05:8b:16:a4:be:2a:30:
f3:c5:c2:ae:07:f1:19:9e:9c:99:a3:9c:67:ce:86:
45:0d:6f:1e:bc:f5:bf:11:7f:8c:dc:1f:a2:63:29:
aa:21:f7:f5:13:36:16:5e:ca:c0:58:9f:af:5b:2f:
1d:e0:43:32:59:65:ea:fc:ae:a5:9f:97:02:d6:3f:
4d:30:a0:7a:57:ca:63:25:c5:5f:93:d8:f3:e2:a2:
29:7e:4f:9d:75:a7:6f:f8:d1:96:7b:3d:73:ce:cd:
08:9b:7d:9f:b8:24:1e:db:d6:40:20:55:5f:e8:da:
8d:16:80:48:62:fe:42:11:c4:95:29:ff:18:5e:37:
49:b2:12:21:bc:51:9f:b5:db:34:5b:02:31:9d:43:
9e:6b:f1:38:bd:c8:38:10:f2:67:e2:f9:f0:3a:b7:
81:c5:8b:e5:46:4c:ec:c6:24:1a:31:36:13:87:40:
4e:9b:ad:58:69:c5:d5:d2:c9:c0:46:3c:a0:c4:ef:
48:06:dd:23:bb:d9:02:b5:2e:1e:22:80:d4:ef:ec:
6d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:55:59:FF:50:34:84:94:74:8C:41:CB:43:DE:51:EB:75:02:45:2E
X509v3 Authority Key Identifier:
keyid:CB:B0:A8:6E:98:FD:8F:FA:35:03:8E:EB:08:AA:E8:50:FB:90:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Cobpj9j_o1A47rCKroUPuQnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/LFVZ_1A0hJR0jEHLQ95R63UCRS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/y7Cobpj9j_o1A47rCKroUPuQnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.96.0/22
Signature Algorithm: sha256WithRSAEncryption
27:96:61:c2:de:f1:2e:f3:be:b4:04:ee:46:d7:38:12:34:e5:
00:36:aa:95:cb:15:c6:32:05:c0:9c:ad:b9:b4:84:23:52:3a:
69:e3:13:23:8d:3e:d0:59:60:00:72:68:ac:56:3e:eb:bc:a7:
2b:bc:ff:82:f3:d8:ef:59:61:47:64:2c:93:9c:86:dc:b3:c2:
23:de:d4:91:ef:f8:08:d5:dc:45:c1:90:50:e0:f3:f6:dc:c3:
dc:e8:78:e2:5b:39:3f:e2:ff:d6:71:b2:26:50:d7:f8:9f:8d:
ce:fc:19:41:f9:87:db:91:6f:74:a7:3d:74:83:e6:88:38:8f:
07:4b:82:b7:d5:cf:ea:cd:bd:34:b0:64:01:4d:fc:64:fe:2f:
8d:eb:41:29:32:17:df:24:b5:e8:6a:34:69:4b:2c:3d:7a:d9:
e1:06:a3:d1:03:cd:6e:7e:c6:db:b4:d0:33:62:00:b6:ea:ff:
4d:1f:66:bf:8b:a1:ca:2c:ac:73:c4:74:92:cf:b4:ea:87:64:
5c:51:8e:72:3b:f0:b3:13:e8:1c:b4:be:9b:6d:8e:70:27:11:
65:2b:67:97:de:92:ea:1b:c4:a4:47:99:68:d9:91:a7:69:54:
91:06:ed:35:89:fd:6a:e4:86:6f:02:ae:66:a8:aa:f0:79:e8:
4a:38:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:43 2025 by rpki-client