Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/LR6wL6B6nJCpX9sX7ylu36HOz5s.roa
File: LR6wL6B6nJCpX9sX7ylu36HOz5s.roa (raw, json)
Hash identifier: 49ZkK+7XjgCGbUusmwrXOK7mqB7RQB4WstTrlGKzMiU=
Subject key identifier: 2D:1E:B0:2F:A0:7A:9C:90:A9:5F:DB:17:EF:29:6E:DF:A1:CE:CF:9B
Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial: 07F94310
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/LR6wL6B6nJCpX9sX7ylu36HOz5s.roa
Signing time: Sat 01 Jan 2022 10:56:16 +0000
ROA not before: Sat 01 Jan 2022 10:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 78.135.112.0/24 maxlen: 24
212.68.47.0/24 maxlen: 24
95.214.72.0/22 maxlen: 22
31.210.62.0/23 maxlen: 24
2a09:da80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133776144 (0x7f94310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Validity
Not Before: Jan 1 10:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d1eb02fa07a9c90a95fdb17ef296edfa1cecf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:65:3e:55:7b:2d:1c:39:1f:80:71:65:d4:2c:
bb:b2:ea:72:68:32:32:e7:60:16:a3:7b:ca:6c:52:
d2:37:1a:38:87:9e:61:6b:a7:3c:88:e7:77:a5:69:
18:c0:45:95:64:0a:06:5c:d0:4f:f9:63:6f:46:92:
01:3a:74:73:77:dd:17:94:39:90:23:53:f2:48:c4:
1b:96:27:6d:44:da:ef:e1:43:fa:40:18:c7:d3:cd:
ba:ab:53:2b:b1:69:87:e3:28:f5:cb:0c:26:a0:88:
a9:4a:05:a1:99:86:8a:67:fb:13:e5:b8:46:14:7e:
41:ba:d3:39:8d:15:9e:24:82:8e:cc:89:aa:5f:04:
d1:93:6c:e7:12:65:1a:ed:a7:20:1f:35:d1:dc:d5:
2d:68:4a:f2:56:09:bf:64:b7:91:d5:c9:49:e2:31:
1e:c1:6a:07:37:19:29:7b:86:7e:19:d5:ab:44:e5:
18:5d:cd:f1:42:25:27:40:fc:a0:c3:6b:36:f4:7e:
bd:22:8a:8b:fe:63:67:37:79:cd:9b:b2:81:2f:26:
46:3f:be:4b:f1:31:89:40:a8:6c:8f:2f:ae:4c:8e:
b2:56:d4:2f:05:52:3a:31:4d:7f:ef:d0:cc:17:67:
6f:26:f1:7b:88:9c:fb:be:f4:63:df:c2:6e:6a:94:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1E:B0:2F:A0:7A:9C:90:A9:5F:DB:17:EF:29:6E:DF:A1:CE:CF:9B
X509v3 Authority Key Identifier:
keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/LR6wL6B6nJCpX9sX7ylu36HOz5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.62.0/23
78.135.112.0/24
95.214.72.0/22
212.68.47.0/24
IPv6:
2a09:da80::/29
Signature Algorithm: sha256WithRSAEncryption
41:23:1c:d6:84:de:ef:36:ea:71:30:1f:bd:62:2c:fc:62:71:
df:dd:9a:e7:f8:e9:4a:c1:2d:06:45:14:9c:89:5b:6c:31:2c:
14:84:0a:f8:c5:c4:15:8c:2c:c9:49:e4:28:a4:52:ce:41:3b:
be:0e:1c:53:3e:97:62:bf:db:33:7f:ac:b7:7f:bb:f2:69:0a:
58:69:fa:46:66:5a:7f:dd:57:1b:27:ab:9a:77:87:34:a6:92:
84:b0:c4:26:70:c3:0f:f5:87:10:b3:a1:f3:56:e5:38:f6:b4:
1e:21:39:a9:4e:1f:cb:bf:e7:85:6d:a7:6d:a6:1e:e9:d5:1e:
ef:8c:ee:a9:27:8c:b1:40:f7:cc:2e:79:6a:2d:cb:81:e9:b0:
38:a2:8a:a2:c9:af:06:4c:29:b3:50:5d:1b:d5:58:e5:48:10:
15:59:a5:f1:47:7d:22:28:da:d4:22:86:d7:4e:09:3d:e8:ca:
3f:c8:ab:6f:5c:4a:55:82:95:13:10:ff:05:91:a2:81:3f:e1:
c0:b4:32:50:cb:db:ce:a1:20:ab:be:e4:60:6d:66:5a:31:2a:
c7:32:4d:52:94:90:8e:01:80:55:68:20:75:91:82:8c:71:71:
e2:f3:99:36:45:00:d9:e9:19:07:c2:3f:a3:d4:3e:2b:4b:50:
c0:4a:5c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:38 2025 by rpki-client