Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/LuoI1FBHmJhu9PJkRWDNIZclSTs.roa
File: LuoI1FBHmJhu9PJkRWDNIZclSTs.roa (raw, json)
Hash identifier: zVaYfuDPnszAmmGNO5A/jgzBaadxMNEvkflYhod4NuI=
Subject key identifier: 2E:EA:08:D4:50:47:98:98:6E:F4:F2:64:45:60:CD:21:97:25:49:3B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0195D115EF6CEA9D51C02741D64025DADE4D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/LuoI1FBHmJhu9PJkRWDNIZclSTs.roa
Signing time: Wed 26 Mar 2025 06:13:50 +0000
ROA not before: Wed 26 Mar 2025 06:13:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 45.123.41.0/24 maxlen: 24
45.123.42.0/23 maxlen: 24
45.141.200.0/23 maxlen: 24
45.141.202.0/24 maxlen: 24
45.141.203.0/24 maxlen: 24
89.47.89.0/24 maxlen: 24
91.190.100.0/24 maxlen: 24
92.114.107.0/24 maxlen: 24
185.9.55.0/24 maxlen: 24
185.35.136.0/23 maxlen: 24
185.35.138.0/24 maxlen: 24
185.35.139.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.241.214.0/24 maxlen: 24
2a0b:64c0::/32 maxlen: 48
2a10:6c02::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:15:ef:6c:ea:9d:51:c0:27:41:d6:40:25:da:de:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 26 06:13:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eea08d4504798986ef4f2644560cd219725493b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:64:aa:47:49:a5:60:24:5f:ce:9b:99:43:
07:6c:7f:ca:7c:ea:0b:d9:f3:af:a4:8b:b7:e8:28:
c1:97:8a:a6:78:e2:af:9a:54:56:d9:7e:b9:80:fd:
e2:e1:67:d5:ed:06:21:7a:36:95:99:59:8e:15:24:
58:7e:42:7b:90:58:e0:05:0f:c3:48:cd:7a:33:d4:
42:3e:7f:ef:3b:fc:e8:e6:3d:da:e9:be:2c:35:e8:
81:4a:9b:bb:eb:f3:3b:2a:e2:ee:6e:5c:62:45:28:
8c:40:66:bb:62:84:91:d5:4f:96:e8:5b:84:3f:ea:
43:4e:85:36:fa:05:49:14:f5:f9:93:3f:f0:35:7f:
dd:2b:25:26:8b:ec:54:a9:34:d9:37:0c:6f:23:6e:
2a:26:33:ca:f5:00:1e:f3:9c:94:b0:a9:ee:6f:fb:
b7:4b:62:21:4f:87:6b:be:ba:27:a9:5a:79:0d:f7:
3a:2d:1e:20:26:93:93:6e:96:2d:e2:5f:bc:b0:f9:
85:d5:a0:5a:c7:cd:4f:35:bd:2f:f8:a5:cc:62:ea:
cd:3d:ea:c8:10:d8:0a:8b:cb:43:58:10:de:88:f6:
f4:5b:7e:74:9b:92:44:80:94:2a:02:06:da:26:08:
86:4f:62:9c:5f:b1:2c:b7:b5:4b:9f:bf:ff:4d:c8:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:08:D4:50:47:98:98:6E:F4:F2:64:45:60:CD:21:97:25:49:3B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/LuoI1FBHmJhu9PJkRWDNIZclSTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.123.41.0-45.123.43.255
45.141.200.0/22
89.47.89.0/24
91.190.100.0/24
92.114.107.0/24
185.9.55.0/24
185.35.136.0/22
188.212.133.0/24
188.241.214.0/24
IPv6:
2a0b:64c0::/32
2a10:6c02::/32
Signature Algorithm: sha256WithRSAEncryption
36:19:96:11:1a:fd:99:d3:f8:40:1f:5e:cc:3f:64:b6:a3:45:
5d:84:3b:a8:1a:71:ec:8b:4d:2d:cd:82:bf:90:46:66:0a:5f:
71:45:f7:6a:6b:be:f3:eb:bb:7e:e8:4e:e5:50:a1:90:18:06:
4a:bb:19:a8:80:bd:c7:c5:20:c8:2d:35:40:f2:91:ce:a2:ee:
3e:a7:41:f2:63:a2:f2:05:73:db:c5:d1:df:19:c7:ec:09:2a:
ac:69:a3:d0:12:48:57:13:be:bc:97:aa:f7:af:d9:74:c3:e7:
bb:8b:e5:95:7d:0b:75:09:0a:4e:62:62:94:bf:eb:76:41:57:
78:4b:ef:21:f7:25:94:9a:aa:1b:7d:a4:94:9e:e1:df:d9:77:
18:00:d5:85:cd:04:64:dd:b8:4d:5c:68:06:2d:9c:fd:23:d7:
43:0b:6d:f1:56:90:4a:77:82:6e:0d:de:30:98:dd:cd:fd:ca:
19:07:32:64:a3:44:ba:58:64:2a:4f:93:15:d4:27:9b:8d:2a:
7a:1d:d4:e4:68:c2:6c:8f:46:08:e0:ba:65:c9:dd:e6:0d:65:
5b:f6:08:38:c5:0a:83:91:b4:99:c5:83:46:4e:04:89:f3:41:
cb:c2:6f:24:8c:e8:c2:69:da:23:68:6d:1e:1a:90:73:fa:bc:
5e:5a:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:46:11 2025 by rpki-client