Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/lw_80hO4RANyxjLRRdxaDg3gH4U.roa
File: lw_80hO4RANyxjLRRdxaDg3gH4U.roa (raw, json)
Hash identifier: 6BZEY4q3onPO6Fo/GF9O3HEGC/yyOfd+OgOvIwu2vJM=
Subject key identifier: 97:0F:FC:D2:13:B8:44:03:72:C6:32:D1:45:DC:5A:0E:0D:E0:1F:85
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 05191E5C
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/lw_80hO4RANyxjLRRdxaDg3gH4U.roa
Signing time: Sat 01 Jan 2022 11:02:43 +0000
ROA not before: Sat 01 Jan 2022 11:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201525
IP address blocks: 5.149.252.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
79.141.166.0/23 maxlen: 23
2a01:8640:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85532252 (0x5191e5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 11:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=970ffcd213b8440372c632d145dc5a0e0de01f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:f6:6b:d5:c8:f6:1b:6d:de:7f:95:4f:9e:
a6:cd:4f:c9:41:82:e2:bd:fc:a0:25:1e:ae:d4:fa:
c6:c3:18:aa:5e:97:85:45:0b:6d:82:7c:ff:67:6c:
2f:5d:90:c3:98:0a:02:eb:7a:d6:9c:c4:0a:53:84:
f7:00:db:f2:ca:76:c8:bc:7c:d0:3e:36:10:08:86:
03:1f:b9:23:88:92:ad:b6:92:79:33:68:46:a9:f1:
2b:c6:56:70:c2:4b:90:b3:e0:30:04:43:a9:18:38:
c4:06:d7:3b:fa:2c:d2:97:83:b7:df:a2:97:56:e3:
a6:c4:02:98:90:b7:14:fa:10:c1:9c:9f:3b:0b:e8:
d0:ce:8c:ca:cb:0d:ab:02:12:eb:3d:5f:26:d0:29:
e9:d5:f8:96:37:5f:06:c4:01:49:8c:2e:23:a2:5e:
ea:14:7d:6d:de:3c:d5:9e:a1:9a:31:9e:16:d0:12:
8b:76:cd:a5:a2:1c:06:a6:f1:14:43:85:ba:1e:b3:
f6:93:a4:02:68:7d:15:fe:7b:4b:46:6b:7a:f1:12:
d3:6d:54:62:53:cd:f2:f7:9b:d3:61:e3:72:d5:ac:
1a:3c:b2:5b:cc:6c:65:00:5a:19:bf:cf:6e:e4:02:
02:78:e0:a3:8e:88:3a:1b:83:16:6a:2a:09:1e:53:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:FC:D2:13:B8:44:03:72:C6:32:D1:45:DC:5A:0E:0D:E0:1F:85
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/lw_80hO4RANyxjLRRdxaDg3gH4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.252.0/23
79.141.166.0/23
79.141.172.0/24
IPv6:
2a01:8640:3::/48
Signature Algorithm: sha256WithRSAEncryption
64:a7:5b:26:63:82:2f:4f:6b:2a:78:fc:18:ec:d3:58:dc:88:
fe:b4:f4:d6:ab:d2:96:a1:a5:44:d0:39:06:33:ca:ca:2c:b2:
b9:f3:34:9d:f5:ca:d7:ac:21:37:eb:ce:84:12:3b:4b:45:27:
43:86:b3:a9:a4:15:d7:8c:a4:8d:85:55:20:d0:e9:64:03:a3:
8e:da:9d:96:0e:02:fd:dc:6c:b4:cd:01:05:0b:01:d2:26:fd:
33:0e:4f:43:47:64:bc:ad:4d:0f:ca:c4:dd:22:b2:b3:77:d3:
21:08:82:e5:8d:b4:9d:e4:bd:bc:3c:54:74:ee:bf:4b:ba:1a:
99:26:78:5a:81:7d:97:61:dd:97:71:05:3e:02:ff:12:32:8f:
f2:6c:95:0b:a2:05:d3:39:d2:0b:9a:b5:0d:07:cb:23:b7:ab:
b9:eb:06:8c:da:67:4b:14:a3:1b:41:c2:56:8d:2c:bf:d3:33:
bd:64:f2:fd:69:6c:a2:4f:14:49:c4:9d:9e:15:6d:da:11:f9:
cf:88:8b:f3:73:e6:fb:0f:2a:98:50:8e:0f:c0:0a:3c:13:cd:
d0:12:2a:eb:79:3f:1d:97:d5:24:13:de:60:24:b4:45:37:00:
36:a2:1a:22:65:bd:fc:31:1b:78:5d:19:df:d1:88:71:6e:b1:
49:13:a3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:07 2025 by rpki-client