Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/LLHOfAO34cGPeX8sfYUH7miUR0E.roa
File: LLHOfAO34cGPeX8sfYUH7miUR0E.roa (raw, json)
Hash identifier: QPwgGLRS+suRbY5KxoJEB866FiEsnERP0t6no64+wrs=
Subject key identifier: 2C:B1:CE:7C:03:B7:E1:C1:8F:79:7F:2C:7D:85:07:EE:68:94:47:41
Certificate issuer: /CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Certificate serial: 0185390ED2031925BEE261EB4B5BD53B5A6A
Authority key identifier: 71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/LLHOfAO34cGPeX8sfYUH7miUR0E.roa
Signing time: Thu 22 Dec 2022 08:59:10 +0000
ROA not before: Thu 22 Dec 2022 08:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210027
IP address blocks: 185.180.145.0/24 maxlen: 24
86.106.22.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:0e:d2:03:19:25:be:e2:61:eb:4b:5b:d5:3b:5a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Validity
Not Before: Dec 22 08:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cb1ce7c03b7e1c18f797f2c7d8507ee68944741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:77:18:64:18:e3:a7:62:dd:bd:ea:03:97:
96:e6:41:17:7d:56:47:4b:af:c7:97:92:5e:48:20:
1e:eb:44:d5:73:ca:c4:5c:96:c8:33:ce:a8:aa:f0:
40:89:21:95:c1:43:ca:d7:78:6e:7b:5c:3c:0b:2f:
23:8a:35:a3:d0:5b:ee:bc:37:ea:07:60:40:f0:48:
36:ee:72:58:fd:10:8e:95:a8:42:81:a2:1a:fb:4b:
e6:e6:70:aa:29:66:2f:b8:44:36:90:6a:73:4f:d2:
ff:3f:c4:e9:f2:84:14:12:aa:a2:cb:25:ff:ce:48:
b2:db:ad:eb:73:47:33:98:e8:02:52:fc:90:d1:69:
07:5d:01:78:c7:22:14:57:6c:80:64:c2:4f:c0:4b:
af:65:56:0a:45:f7:10:d0:ba:22:23:7b:35:e3:d6:
08:75:6d:cf:93:d3:e8:7b:d7:2c:64:b3:76:54:aa:
48:f0:c4:45:24:3b:4f:05:e8:a4:a7:88:9f:a3:ac:
d1:92:08:8c:05:fa:72:89:35:ee:ef:02:ac:fd:3d:
16:91:8c:03:82:47:cd:03:17:f5:6b:e9:05:1c:b9:
23:1e:98:28:52:52:9e:6a:85:29:78:76:cb:4a:80:
8d:dd:88:93:bf:40:7b:42:96:14:87:09:b7:72:9a:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B1:CE:7C:03:B7:E1:C1:8F:79:7F:2C:7D:85:07:EE:68:94:47:41
X509v3 Authority Key Identifier:
keyid:71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/LLHOfAO34cGPeX8sfYUH7miUR0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.22.0/24
176.126.223.0/24
185.180.145.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f7:d6:3d:47:03:ba:3c:3c:24:b0:c7:15:dd:e0:eb:5b:cb:
f1:79:72:2e:b7:fd:94:4f:b1:a4:69:a1:f9:a5:7c:ce:1f:57:
ec:1b:d1:7d:db:b0:5d:9c:28:2b:0e:13:8d:9e:8a:1e:2e:b3:
74:62:78:42:91:43:fa:51:d5:b3:bb:7f:28:63:66:01:df:64:
2f:b6:cd:35:26:5b:f1:e1:12:0f:4c:75:dd:28:c2:a8:dd:f6:
d2:bf:43:8c:f1:41:57:e3:d8:21:80:32:77:35:87:f1:18:66:
3d:b9:5a:e9:87:cd:a9:b6:9c:c0:ad:4b:08:4b:f8:87:38:dd:
de:bd:63:c0:80:52:dc:4b:24:ad:a3:8e:8f:75:c2:c9:59:66:
c9:bf:bc:f8:00:99:31:33:2c:fb:c3:57:55:d8:10:2f:16:9b:
fa:73:1d:ca:39:1a:dc:02:a7:0e:af:06:ad:11:df:8e:00:31:
bf:c2:d2:e8:6d:aa:71:10:a7:8d:cc:8c:57:04:4a:3b:f0:05:
d1:82:06:c1:30:da:fe:ab:ac:2d:ae:62:e7:48:c8:91:5b:fc:
c6:de:a6:d4:6c:de:c2:8e:9c:7e:02:b4:6f:d8:4a:3c:37:db:
62:34:1d:8c:98:ce:29:04:4a:b8:4e:3d:7d:2d:39:8f:5e:46:
db:09:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:28 2023 by rpki-client on console-ams.rpki-client.org