Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/LSJWw_ptvazCnhCar9l_Y1TpHAM.roa
File: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (raw, json)
Hash identifier: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=
Subject key identifier: 2D:22:56:C3:FA:6D:BD:AC:C2:9E:10:9A:AF:D9:7F:63:54:E9:1C:03
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 01941F8C0214C4261EBDC7026CFA16AC93C1
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/LSJWw_ptvazCnhCar9l_Y1TpHAM.roa
Signing time: Wed 01 Jan 2025 01:47:36 +0000
ROA not before: Wed 01 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200325
IP address blocks: 91.200.176.0/24 maxlen: 24
107.150.176.0/24 maxlen: 24
109.104.146.0/23 maxlen: 24
109.224.228.0/22 maxlen: 24
193.162.131.0/24 maxlen: 24
212.104.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:02:14:c4:26:1e:bd:c7:02:6c:fa:16:ac:93:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d2256c3fa6dbdacc29e109aafd97f6354e91c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:26:ec:0c:2e:6e:6b:ef:d7:bf:f0:61:1c:
49:fa:86:04:ae:88:87:e6:2b:1e:e5:06:f3:79:b3:
62:39:76:73:75:b1:70:ec:8b:37:7a:bf:9f:6a:ea:
63:86:c1:0e:c8:95:87:01:79:9e:57:11:52:96:6e:
f3:53:ab:e1:41:54:ab:4c:3b:02:dc:d6:9f:d6:f0:
87:05:6f:2d:db:18:18:5f:36:c2:60:61:e6:c5:01:
ac:4b:8e:07:3b:b0:0f:84:96:8a:94:09:6b:66:17:
eb:91:41:34:b2:49:c9:f4:c3:8f:9e:66:d9:e4:42:
e7:91:99:96:8a:bc:9a:66:5b:a2:b7:6e:37:a7:af:
b3:be:e6:4d:9e:67:58:13:d5:c4:55:c0:5b:d8:66:
1b:45:5a:35:6f:03:c1:e7:35:37:4c:0f:e3:ac:45:
3b:73:ba:96:14:8b:50:77:71:c6:21:f7:6e:e6:92:
6c:ef:47:42:d6:66:f1:f4:89:78:27:d4:31:8f:84:
27:98:fb:c6:80:57:34:27:3a:04:4a:81:1c:0e:92:
68:af:44:ec:1d:8b:4a:cd:88:3a:b9:96:c4:c4:d3:
1a:45:49:b6:47:25:ec:3c:25:84:ae:f6:05:37:f3:
03:87:e8:2d:af:3a:bd:b6:fd:40:a3:0f:ee:72:cd:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:22:56:C3:FA:6D:BD:AC:C2:9E:10:9A:AF:D9:7F:63:54:E9:1C:03
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/LSJWw_ptvazCnhCar9l_Y1TpHAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.176.0/24
107.150.176.0/24
109.104.146.0/23
109.224.228.0/22
193.162.131.0/24
212.104.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:56:80:d8:db:5a:af:fc:40:f1:2d:25:6a:40:e1:61:42:a7:
15:85:45:03:7c:10:7f:d3:c5:16:58:a5:4f:60:99:4f:48:c9:
5e:3b:61:f8:f3:11:cf:50:24:53:a6:0a:80:8d:77:2e:52:80:
30:f0:fe:ef:dc:28:27:76:90:b1:f0:d7:e6:f5:df:99:06:18:
92:53:df:f7:01:9b:78:64:f6:1e:9b:8f:e0:e4:68:ce:f0:96:
19:a0:ce:18:d5:73:2d:cc:f4:51:8d:10:a0:b9:22:33:aa:df:
8e:27:90:7b:95:ad:45:90:a4:fb:5f:76:3e:29:f0:dc:7f:36:
9b:89:16:00:33:2b:31:a7:e1:75:f9:4b:82:07:19:68:dc:eb:
67:5e:98:e2:e0:7d:39:dc:b2:2b:16:98:00:1c:fe:31:99:7e:
de:6e:20:cd:00:11:de:65:a0:5e:54:30:ee:6b:de:e1:28:a0:
c1:5b:67:52:f2:4c:75:d7:da:ae:f1:83:d1:66:11:ac:df:e2:
4d:be:91:f0:d3:e0:26:8c:46:fc:42:13:56:51:b2:48:75:81:
c0:63:c5:83:2b:07:15:8b:0a:ab:6f:f2:3f:be:31:ee:b1:39:
67:3e:87:f2:c7:64:b4:c6:e4:e8:2c:a7:c4:b4:80:14:20:ec:
b7:55:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:24 2025 by rpki-client