Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/LJvTHgrl0MUfRgRUTXEULhcx4mc.roa
File: LJvTHgrl0MUfRgRUTXEULhcx4mc.roa (raw, json)
Hash identifier: GMncDaVUyyPIWzH2ZeBaMdP/pwSA8CSsI/hHm872pmU=
Subject key identifier: 2C:9B:D3:1E:0A:E5:D0:C5:1F:46:04:54:4D:71:14:2E:17:31:E2:67
Certificate issuer: /CN=b3143920956802a8eb4b4627a2ff4f3987ec1a3d
Certificate serial: 059E9408
Authority key identifier: B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/LJvTHgrl0MUfRgRUTXEULhcx4mc.roa
Signing time: Sat 01 Jan 2022 01:53:30 +0000
ROA not before: Sat 01 Jan 2022 01:53:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57728
IP address blocks: 81.25.16.0/21 maxlen: 21
81.25.24.0/21 maxlen: 21
185.255.116.0/22 maxlen: 22
109.234.40.0/21 maxlen: 21
2a00:1807::/32 maxlen: 32
2a00:1800::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94278664 (0x59e9408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3143920956802a8eb4b4627a2ff4f3987ec1a3d
Validity
Not Before: Jan 1 01:53:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c9bd31e0ae5d0c51f4604544d71142e1731e267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:ef:b9:2f:e0:f1:80:14:13:0c:ad:3e:47:
53:e7:98:d3:f0:72:57:5a:59:db:44:08:86:a6:df:
ba:34:ea:ba:5e:d9:03:38:e6:ee:12:64:fa:41:2c:
05:81:8f:46:55:05:b9:da:f7:e1:8a:5f:03:50:6f:
ed:fd:65:37:cb:d7:8b:ce:90:68:99:5f:80:4a:46:
af:f3:ca:c1:f1:19:4d:4e:9a:ea:ee:81:ef:f0:de:
92:e0:e4:26:e7:ae:02:35:03:ff:16:45:b2:46:34:
d3:06:73:76:cb:81:b3:4e:c5:72:af:6f:03:21:bf:
75:48:3f:65:5f:0b:f9:eb:79:c1:01:4e:3c:9d:71:
42:4b:db:e8:c6:2e:7b:aa:e8:7a:52:f1:60:2a:c3:
c9:df:54:e4:55:a7:fb:c2:68:1d:35:12:95:cc:6c:
7a:d1:f8:aa:bb:2f:34:19:9f:ea:70:a8:a1:a2:2f:
97:82:82:d6:de:9a:ca:97:26:5b:2f:ab:ef:68:11:
1c:f8:4a:46:5e:d5:70:20:72:db:54:94:e7:22:df:
70:7e:84:8b:c4:0b:46:62:d6:e6:7f:60:a0:39:13:
56:2f:1f:dc:13:5f:74:26:85:e5:3c:80:43:df:7f:
14:53:7f:fd:f7:72:c6:53:aa:fd:27:ea:fd:c0:8a:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9B:D3:1E:0A:E5:D0:C5:1F:46:04:54:4D:71:14:2E:17:31:E2:67
X509v3 Authority Key Identifier:
keyid:B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/LJvTHgrl0MUfRgRUTXEULhcx4mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.16.0/20
109.234.40.0/21
185.255.116.0/22
IPv6:
2a00:1800::/32
2a00:1807::/32
Signature Algorithm: sha256WithRSAEncryption
4f:54:29:a9:28:ba:3a:7d:fd:6b:ee:57:af:32:d1:39:22:4a:
87:40:40:ea:84:12:de:b9:7d:e7:f8:00:ee:a1:c1:ad:13:6b:
a8:a5:af:38:aa:f1:7b:b0:0f:cc:66:b4:92:cf:64:aa:49:84:
b4:7e:a4:5c:22:f7:7f:fa:30:b3:8d:e2:1f:e5:fb:dc:ec:d1:
8b:9e:07:59:51:48:47:f8:0c:9a:55:b7:4e:0a:dc:71:31:6e:
7c:82:06:b5:b3:d7:1a:5b:80:e4:74:72:0c:12:b8:55:54:4d:
df:e8:0c:bd:e7:42:91:b2:16:b0:f2:61:03:23:17:a3:65:c3:
e6:87:ed:14:07:dd:ff:5f:df:08:17:e4:41:43:2e:b1:5e:53:
f2:e1:b6:b2:2d:6a:01:47:0d:f9:fc:3f:2d:72:61:0a:c2:9e:
8c:0f:f2:f8:e7:a3:19:ab:be:be:88:10:42:4e:e1:b7:c0:3f:
b1:86:e5:e9:b7:6b:88:4d:18:1f:09:2b:39:30:09:db:dd:9b:
54:5b:b1:67:38:a8:bc:27:10:de:77:a3:30:0b:1f:37:ad:46:
4b:7d:99:7d:5f:9f:40:20:16:e2:06:40:6e:5f:3b:55:c1:46:
3e:1f:c6:44:fb:61:b0:dc:8b:9a:d8:d9:3b:dd:dc:66:5f:1b:
fe:73:54:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:48 2025 by rpki-client