Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/4bf892-22ec-46dd-8b9c-ae27cee54fae/1/LVNcdsXqurek596KQEwxyWUWvKU.roa
File: LVNcdsXqurek596KQEwxyWUWvKU.roa (raw, json)
Hash identifier: U1ZM8p7SNE76Gd/gPNICKnMdXr6DFXYoMyvUUJBmiws=
Subject key identifier: 2D:53:5C:76:C5:EA:BA:B7:A4:E7:DE:8A:40:4C:31:C9:65:16:BC:A5
Certificate issuer: /CN=278e0025aeb90a173734ca45841c0c290a564d3a
Certificate serial: 04474CF7
Authority key identifier: 27:8E:00:25:AE:B9:0A:17:37:34:CA:45:84:1C:0C:29:0A:56:4D:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J44AJa65Chc3NMpFhBwMKQpWTTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/4bf892-22ec-46dd-8b9c-ae27cee54fae/1/LVNcdsXqurek596KQEwxyWUWvKU.roa
Signing time: Wed 09 Mar 2022 21:19:22 +0000
ROA not before: Wed 09 Mar 2022 21:19:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202013
IP address blocks: 185.105.248.0/24 maxlen: 24
185.105.251.0/24 maxlen: 24
185.105.250.0/24 maxlen: 24
185.105.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71781623 (0x4474cf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278e0025aeb90a173734ca45841c0c290a564d3a
Validity
Not Before: Mar 9 21:19:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d535c76c5eabab7a4e7de8a404c31c96516bca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:34:95:8a:35:81:95:85:b3:6f:cd:08:61:
d1:11:28:a3:a1:5f:ee:7a:b6:ea:fd:6f:db:16:05:
a9:63:22:98:29:47:6d:05:b6:4e:f6:32:fc:03:c6:
96:11:a6:24:f3:92:0b:0b:78:a3:30:ef:42:ad:bf:
3c:50:86:6e:68:31:e4:f2:77:4a:34:74:88:ce:b9:
6e:9d:d5:44:0f:fe:7a:62:a3:5c:b3:c5:16:85:e0:
b9:34:70:14:35:56:8b:12:ff:c6:50:a6:86:ae:79:
e9:4d:69:84:56:94:59:1e:7f:9f:fa:cd:b4:c4:0c:
68:a8:60:8a:81:68:78:14:9a:c5:e9:93:f8:c1:d0:
9b:a0:81:00:64:10:97:02:f4:25:79:4b:53:9e:fa:
41:83:b4:d9:41:6e:8d:5e:59:1d:dd:e7:f4:9f:34:
ad:9b:bd:a5:24:2f:33:19:e1:ab:69:ec:6b:9d:c5:
18:6f:9e:c5:8b:03:e5:ad:d1:e7:7a:f4:43:7d:72:
d5:1a:bc:1c:ca:5f:3d:0b:ae:d3:5c:59:da:3c:45:
a3:bf:e3:eb:71:e2:f2:db:35:c3:6f:f1:0f:d5:21:
64:d2:a7:28:d2:8a:91:94:cb:1a:99:47:dc:eb:ea:
79:ac:8f:f9:19:4f:87:16:36:c5:a6:79:36:3e:1d:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:53:5C:76:C5:EA:BA:B7:A4:E7:DE:8A:40:4C:31:C9:65:16:BC:A5
X509v3 Authority Key Identifier:
keyid:27:8E:00:25:AE:B9:0A:17:37:34:CA:45:84:1C:0C:29:0A:56:4D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J44AJa65Chc3NMpFhBwMKQpWTTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4bf892-22ec-46dd-8b9c-ae27cee54fae/1/LVNcdsXqurek596KQEwxyWUWvKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4bf892-22ec-46dd-8b9c-ae27cee54fae/1/J44AJa65Chc3NMpFhBwMKQpWTTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.248.0/22
Signature Algorithm: sha256WithRSAEncryption
63:87:69:a7:39:18:7c:0e:48:18:26:a6:1c:89:a4:20:c6:f7:
b3:75:ee:d0:41:a0:8d:76:44:87:f6:5c:a3:c5:5d:f3:b2:e2:
2d:63:35:84:9e:d4:1a:6e:85:4f:0d:77:51:7b:74:3c:76:0e:
45:0c:0d:64:c0:46:b3:0e:75:2c:a7:85:f3:0e:35:d9:53:e0:
b7:b4:ba:57:e8:b9:03:87:9c:ef:19:a2:3d:2e:35:76:26:ae:
75:cd:86:e3:6f:21:fb:90:0d:db:73:1a:84:ef:80:e3:8d:fd:
fe:78:5f:60:10:74:db:5f:1f:15:1a:8d:71:52:d6:be:ee:bb:
45:e4:23:33:d1:1c:0f:33:a8:16:80:c6:b5:33:79:42:d8:7d:
d8:cd:1a:ab:4d:e5:9a:4d:ac:0c:b1:f0:58:82:21:d8:62:a2:
19:69:cf:cf:df:0a:cd:07:c4:5f:7f:4a:a4:59:37:5a:22:77:
1a:c2:dc:d2:4c:f0:23:58:a8:6a:5d:0a:64:44:50:4f:be:bf:
fb:e1:00:a2:b9:f7:cb:01:1d:52:f5:e0:9f:18:98:55:f1:db:
3e:23:91:36:b6:c7:5a:43:40:ed:fe:61:ec:46:cb:50:62:04:
f9:59:ec:21:93:30:12:34:ac:2f:0a:cf:4c:aa:99:8f:a6:bd:
ea:02:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:05 2025 by rpki-client