Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ljKlIhb50PuV5I8e2-KIahSRYJc.roa
File: ljKlIhb50PuV5I8e2-KIahSRYJc.roa (raw, json)
Hash identifier: vrS5P/AO17/iW+6yaX8ZWc80t+kxupJTvTN7uQIUPro=
Subject key identifier: 96:32:A5:22:16:F9:D0:FB:95:E4:8F:1E:DB:E2:88:6A:14:91:60:97
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E0D72874573F59101B1B959DD0D5
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ljKlIhb50PuV5I8e2-KIahSRYJc.roa
Signing time: Sun 01 Jan 2023 19:35:23 +0000
ROA not before: Sun 01 Jan 2023 19:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20663
IP address blocks: 213.154.187.0/24 maxlen: 24
213.154.190.0/23 maxlen: 23
213.154.189.0/24 maxlen: 24
213.154.188.0/24 maxlen: 24
213.154.163.0/24 maxlen: 24
213.154.162.0/24 maxlen: 24
213.154.166.0/24 maxlen: 24
213.154.161.0/24 maxlen: 24
213.154.165.0/24 maxlen: 24
213.154.160.0/24 maxlen: 24
213.154.164.0/24 maxlen: 24
213.154.160.0/21 maxlen: 21
213.154.167.0/24 maxlen: 24
213.154.171.0/24 maxlen: 24
213.154.172.0/23 maxlen: 23
213.154.169.0/24 maxlen: 24
213.154.168.0/24 maxlen: 24
213.154.176.0/23 maxlen: 23
213.154.179.0/24 maxlen: 24
213.154.174.0/24 maxlen: 24
213.154.178.0/24 maxlen: 24
213.154.178.0/23 maxlen: 23
213.154.186.0/24 maxlen: 24
213.154.181.0/24 maxlen: 24
213.154.185.0/24 maxlen: 24
213.154.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e0:d7:28:74:57:3f:59:10:1b:1b:95:9d:d0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9632a52216f9d0fb95e48f1edbe2886a14916097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a6:39:e5:78:51:2f:a2:c5:5d:2d:cd:2f:eb:
cd:70:ae:62:84:7e:bc:64:9b:b0:76:ba:55:65:8a:
c3:d6:ae:9d:e8:84:11:69:e9:7a:8f:04:78:d6:59:
7f:e8:29:b6:97:17:12:c3:1a:6a:8a:49:e7:c1:87:
ac:fc:b7:fa:76:8a:f9:54:34:7a:f9:2d:9b:7d:2e:
f0:1f:fe:0f:cd:69:d8:4e:5b:f5:14:1b:ad:72:87:
07:92:b0:b1:34:72:5b:60:69:54:65:d6:62:6c:83:
49:d9:52:ea:18:7d:16:24:a1:b7:26:0f:f0:5a:36:
47:79:d2:cc:53:0a:d8:b0:c5:8a:a9:2b:1f:61:6c:
56:ba:6c:aa:f5:3b:23:07:40:35:b8:6c:60:24:f4:
c2:bc:91:bc:b0:8b:42:9f:fa:e7:44:33:c9:c1:7d:
57:3b:c3:a1:f5:bd:d7:f4:2d:49:ac:1b:df:72:85:
07:f0:d2:5f:62:19:2b:f8:6f:f5:d4:dd:42:a1:9f:
55:b1:d1:19:f9:13:87:e3:88:71:78:75:c3:53:44:
63:9c:aa:4a:cd:84:92:36:38:8b:cc:5c:54:03:5d:
cb:24:e9:97:98:58:08:3b:58:30:2c:50:a1:79:38:
14:cd:59:aa:24:2e:cb:ae:0f:ac:f5:65:bc:7e:cb:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:A5:22:16:F9:D0:FB:95:E4:8F:1E:DB:E2:88:6A:14:91:60:97
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ljKlIhb50PuV5I8e2-KIahSRYJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.154.160.0-213.154.169.255
213.154.171.0-213.154.174.255
213.154.176.0-213.154.181.255
213.154.185.0-213.154.191.255
Signature Algorithm: sha256WithRSAEncryption
28:0c:06:13:42:b1:1f:61:a9:99:39:1e:79:d7:e5:dc:46:7e:
be:42:5c:d5:eb:10:62:51:ea:30:ee:b2:53:c5:82:f6:ea:a2:
00:b6:f6:be:38:be:ea:a2:b1:97:6f:8b:14:ab:80:fe:a2:36:
12:44:f7:2e:3b:f9:23:3c:3d:92:9c:a9:ce:f5:60:91:e0:5b:
42:65:84:ab:04:5e:f5:a5:63:69:7a:fe:1e:77:d3:45:ca:12:
0c:f0:c3:8d:11:5b:5d:5b:2e:e5:60:a6:31:24:27:93:85:74:
64:97:e3:11:fa:17:0f:1a:95:99:05:49:02:62:b2:37:b5:b1:
56:4c:99:9b:99:1c:fc:00:e4:21:99:39:0c:22:bf:71:d2:25:
80:e4:0d:26:1d:66:57:a1:7a:df:ca:32:c6:7f:ad:91:44:bf:
52:cb:50:be:23:b9:04:b8:e6:f0:90:e3:8a:7f:21:46:98:eb:
df:01:77:ab:6e:a1:53:3f:7d:21:88:a4:b2:a9:f9:46:bb:76:
70:23:e5:3a:8e:26:06:29:91:6e:8f:61:65:1b:d7:e4:07:b7:
b0:63:05:55:8e:7a:a3:1f:ee:80:ad:c6:50:53:59:96:0f:47:
28:c1:ce:e3:37:14:a0:dd:03:2f:50:e3:59:95:28:92:e0:d9:
21:a5:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:11 2025 by rpki-client