Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/Lrwe27Jpe-9d8AfbxjIFUOD1Lkk.roa
File: Lrwe27Jpe-9d8AfbxjIFUOD1Lkk.roa (raw, json)
Hash identifier: drE3ccZDTLDGANuLS624ZZGwH7alacV7JsJN1jGyKLs=
Subject key identifier: 2E:BC:1E:DB:B2:69:7B:EF:5D:F0:07:DB:C6:32:05:50:E0:F5:2E:49
Certificate issuer: /CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Certificate serial: D6C9C7
Authority key identifier: 71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/Lrwe27Jpe-9d8AfbxjIFUOD1Lkk.roa
Signing time: Sat 01 Jan 2022 01:53:34 +0000
ROA not before: Sat 01 Jan 2022 01:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210027
IP address blocks: 185.180.145.0/24 maxlen: 24
176.126.174.0/24 maxlen: 24
86.106.22.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14076359 (0xd6c9c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Validity
Not Before: Jan 1 01:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ebc1edbb2697bef5df007dbc6320550e0f52e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:57:67:64:7d:af:ce:e0:a5:a3:46:6e:09:
0d:c9:39:c5:ec:56:73:3a:8d:eb:85:d2:11:60:46:
74:9e:1e:60:5b:5a:a1:8d:63:72:31:82:36:0f:56:
01:db:7e:98:e6:40:80:bc:d5:c4:cd:79:03:1c:1c:
08:94:b1:8f:14:3e:23:d1:05:56:0d:b7:fd:9b:94:
47:5e:71:08:8f:f4:d2:31:af:c7:ce:fb:f2:da:19:
ac:fe:25:c5:da:e9:b6:07:66:06:ab:d0:d9:ba:8c:
71:43:b8:3d:78:a9:71:9e:15:6b:81:9d:a5:76:cb:
c4:85:8c:54:59:6d:b7:47:dc:73:bb:84:0e:75:33:
bd:87:bd:dd:f8:d5:eb:88:a2:ed:82:0d:8d:e1:59:
ea:68:8b:9e:eb:2a:c4:43:bc:8c:cb:b6:06:9e:63:
06:dc:8d:24:a9:a7:0f:d1:1e:81:1c:e7:52:01:f9:
27:7f:02:3d:28:66:ef:ec:cd:e9:3b:da:37:21:75:
d0:a7:01:c3:31:72:69:8d:4b:52:e5:aa:cb:56:d6:
59:94:3d:83:27:66:72:86:5a:9d:04:e1:19:9d:91:
64:2f:04:21:f0:2e:5b:8e:4e:56:5b:50:8f:e0:66:
12:2e:62:2a:16:54:8c:6a:27:9a:6e:7f:fc:3d:b9:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BC:1E:DB:B2:69:7B:EF:5D:F0:07:DB:C6:32:05:50:E0:F5:2E:49
X509v3 Authority Key Identifier:
keyid:71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/Lrwe27Jpe-9d8AfbxjIFUOD1Lkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.22.0/24
176.126.174.0/24
176.126.223.0/24
185.180.145.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:0e:d4:d6:2d:3d:aa:0c:9a:c4:c7:80:e7:76:1c:13:7e:2e:
69:e5:73:99:64:e6:65:22:bf:03:86:26:b7:c7:b4:ab:a3:20:
d5:e1:79:3d:f2:00:87:99:26:8e:94:48:b9:fe:e2:7c:21:0e:
34:23:54:5d:67:db:1c:3a:a0:d6:1c:7d:36:4b:75:1b:7f:f2:
50:44:fd:19:7e:1e:c4:dc:8c:e5:70:34:de:4b:08:3b:3a:8f:
61:76:e3:2f:7c:96:36:fa:78:9c:fd:39:95:35:2f:85:b8:7a:
fe:39:71:5e:ef:4e:65:24:92:67:f9:c3:71:91:33:e9:70:9c:
c9:85:c4:39:7f:a3:65:de:8c:fe:a0:79:fc:b9:ec:bc:ec:d5:
02:8b:8f:f4:7a:f2:43:09:cc:03:a8:52:83:d6:07:1e:71:02:
43:69:c8:b4:75:d6:56:1c:cd:d7:12:19:d1:c2:38:e6:2d:3e:
1e:14:74:7e:6f:e3:1d:f4:41:c7:dd:0b:b5:c4:e8:76:20:53:
58:53:0e:0d:b2:99:f2:cc:c4:b2:c6:45:c7:1b:b5:6c:46:f8:
81:87:30:ef:eb:42:07:45:46:0f:b6:ca:ed:d8:fc:da:62:b8:
18:39:a3:12:31:76:c1:cb:54:23:5b:23:30:6f:aa:81:12:2f:
37:50:f0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:34 2025 by rpki-client