Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LqC8XwWOL2s7RDKzvtG78loswQU.roa
File: LqC8XwWOL2s7RDKzvtG78loswQU.roa (raw, json)
Hash identifier: 7J1Hnwc69FD1Ky/oaLipje2j2GZulX3uMqkbdMIIUQw=
Subject key identifier: 2E:A0:BC:5F:05:8E:2F:6B:3B:44:32:B3:BE:D1:BB:F2:5A:2C:C1:05
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422203734F82D4DE5DBE42D89E64E2FF7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LqC8XwWOL2s7RDKzvtG78loswQU.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 185.223.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:37:34:f8:2d:4d:e5:db:e4:2d:89:e6:4e:2f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ea0bc5f058e2f6b3b4432b3bed1bbf25a2cc105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:60:ec:7d:45:6a:70:84:2c:0e:a2:2f:1d:
4c:5d:35:73:2f:2a:aa:2f:20:73:03:d0:8c:e3:ba:
4c:ca:ce:5a:52:f0:f1:54:c4:ee:11:94:fc:49:0b:
19:ed:56:d4:15:c9:fb:85:d7:b9:84:8b:42:fc:dc:
45:86:75:dc:45:7e:c5:e2:08:c4:69:e4:fd:7a:79:
76:87:44:ea:54:43:36:3d:24:2f:0e:3b:ae:07:8d:
1d:3d:91:9c:b8:6b:ab:37:1a:f2:6e:29:79:54:e6:
b1:be:f0:dd:42:96:9d:5c:3a:92:48:18:9c:29:0e:
16:64:e7:4b:83:b5:b3:c1:e9:c8:e3:5c:7e:c0:2c:
4f:c2:7b:fa:72:1b:41:47:56:8f:ff:4a:22:b7:a2:
ff:dd:9a:95:84:aa:2b:d4:c1:e3:9a:d6:94:c4:4a:
ce:33:a8:66:3f:2b:58:43:cd:86:9c:05:7a:b1:60:
9b:6d:d6:0d:ff:a8:a6:70:b6:53:d0:e6:53:21:d5:
a0:5a:74:92:b5:df:4d:75:5f:02:85:82:5e:8b:db:
12:3f:d6:20:7f:ac:e5:62:ab:5d:43:29:95:84:50:
50:09:12:ab:34:3b:86:d2:25:9e:92:c0:1c:09:ae:
5f:30:88:49:8d:ce:31:51:78:f4:e1:df:5a:71:b6:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A0:BC:5F:05:8E:2F:6B:3B:44:32:B3:BE:D1:BB:F2:5A:2C:C1:05
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LqC8XwWOL2s7RDKzvtG78loswQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.79.0/24
Signature Algorithm: sha256WithRSAEncryption
61:17:f5:f3:cd:fc:04:dc:45:35:0c:33:0a:18:95:4f:8c:75:
ff:42:b7:3b:8f:7a:da:f0:81:07:46:3f:0a:a7:44:b4:4a:45:
59:17:b8:b6:c0:ca:2f:ff:fb:07:b8:96:9b:6d:42:df:41:41:
cd:60:c0:7f:90:17:b9:12:94:d9:f6:7e:e3:bc:23:59:27:b4:
f2:67:a5:c7:eb:a1:3e:bf:d3:5f:b1:18:79:b2:d4:2b:e2:29:
3e:98:7d:3a:6e:de:29:e0:3e:2b:66:60:24:65:57:a6:56:0f:
d5:cf:40:41:88:2a:6d:2d:c3:8a:c9:f0:b3:57:ff:41:00:d3:
b0:6e:a1:2e:cd:11:1e:6e:e2:62:c4:61:19:7b:cb:be:81:1c:
dc:9a:dc:6e:5d:6e:1b:ff:03:13:08:1d:ce:b1:19:25:81:fa:
25:f0:0a:17:84:e9:70:06:e9:32:2e:60:84:b1:7e:17:20:8d:
c8:74:8c:8e:e4:24:95:97:85:03:8b:12:f5:e9:da:01:f5:f8:
8f:57:45:02:22:86:e7:45:45:45:f0:b0:77:ca:2c:a5:e7:77:
aa:9c:da:4a:0e:ae:ec:3e:fe:aa:f2:ea:92:d3:7c:ee:f4:b5:
2f:62:d1:1e:d1:10:70:9e:0f:1b:04:f5:ec:8d:79:83:25:75:
f4:3d:bf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:41 2025 by rpki-client