Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2xj_LABSPSw1YlcYhyotSJWcSD8.roa
File: 2xj_LABSPSw1YlcYhyotSJWcSD8.roa (raw, json)
Hash identifier: THnk8CDZQj9HpKBu0So8K1VEc4qcyknrNZdc2a/Of4c=
Subject key identifier: DB:18:FF:2C:00:52:3D:2C:35:62:57:18:87:2A:2D:48:95:9C:48:3F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A3FFF75E7AF1EF44580B0DECBF626
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2xj_LABSPSw1YlcYhyotSJWcSD8.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44103
IP address blocks: 45.93.119.0/24 maxlen: 32
185.142.142.0/24 maxlen: 32
185.249.217.0/24 maxlen: 32
194.34.230.0/24 maxlen: 32
2a06:8e01::/44 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3f:ff:75:e7:af:1e:f4:45:80:b0:de:cb:f6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db18ff2c00523d2c35625718872a2d48959c483f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:43:7f:84:33:64:cf:bc:52:3e:f4:10:fe:
30:99:5a:5c:ad:13:20:98:84:9b:ac:3c:e2:40:32:
97:12:8d:a9:02:25:15:b8:87:39:20:aa:72:ad:31:
7e:5f:ea:8f:9f:25:8f:48:1f:51:da:fd:b7:a3:48:
c3:a8:a5:62:5c:f3:4c:0e:0d:06:6c:30:70:46:64:
ee:7e:74:fd:9c:7d:c8:3f:2b:d5:3f:15:af:ff:13:
c1:57:cf:9b:e0:2c:9f:9e:27:9a:bf:97:db:e9:69:
58:37:ae:cf:eb:ce:96:5a:60:1f:4c:a4:27:15:ef:
d4:06:0c:04:27:ce:c1:d5:8d:b9:3b:ce:15:82:15:
9d:59:e7:d9:5c:b5:a6:34:ff:ee:4d:17:6d:35:7d:
4d:b7:be:63:fb:5e:f8:b8:38:d0:c6:86:30:5f:3c:
65:3f:01:85:6e:93:01:7a:76:20:99:38:76:6a:c2:
8d:3a:1a:8d:d2:3a:e0:a6:60:d3:c9:eb:b1:1e:1b:
d9:52:6d:01:42:3f:d8:82:ae:0a:f4:21:e9:99:d4:
e4:d0:4a:df:36:31:05:dd:e0:63:0b:34:b9:3d:88:
cb:26:fd:32:eb:c9:b5:74:65:73:1f:8d:64:a0:24:
4b:09:45:b6:b6:6b:d6:82:b6:88:16:53:a7:0f:7b:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:18:FF:2C:00:52:3D:2C:35:62:57:18:87:2A:2D:48:95:9C:48:3F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2xj_LABSPSw1YlcYhyotSJWcSD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.119.0/24
185.142.142.0/24
185.249.217.0/24
194.34.230.0/24
IPv6:
2a06:8e01::/44
Signature Algorithm: sha256WithRSAEncryption
ca:64:73:5f:e6:76:80:a5:a1:80:78:71:b8:d6:b4:2d:44:50:
54:34:3b:b7:d3:e3:a4:87:ed:a3:95:c1:1a:81:d8:20:6b:74:
f4:fe:b4:7b:ac:e2:b5:c1:6e:70:45:f4:18:17:4b:00:d6:2b:
ea:63:df:66:d8:9a:6f:f0:84:61:df:d6:6b:5b:e2:be:44:03:
53:5b:d8:ca:47:36:24:28:e7:26:0a:dd:29:6e:bf:86:76:54:
b8:17:98:9b:84:5f:62:0b:c1:75:01:01:d0:e9:c1:a2:5a:a3:
40:e3:13:63:c7:b0:b9:45:4f:55:0f:1f:c5:f6:59:f1:76:41:
fc:14:e3:c5:00:bd:30:74:7f:ed:23:47:1c:43:6e:f2:13:57:
b5:16:ce:c7:c3:9b:34:f2:1c:ff:1d:ad:a4:ec:ad:5a:e4:b4:
29:c1:35:fa:79:48:38:c8:96:67:82:a4:46:ff:74:cf:72:8f:
88:87:97:b8:98:de:1b:b6:e3:4d:02:94:ba:90:54:ea:8a:7b:
3c:a6:dc:64:ef:72:34:1e:3e:db:b0:5c:d0:a9:aa:21:40:68:
a1:ed:e3:e4:d8:b7:60:ea:1f:16:2f:89:c7:11:65:5a:d5:aa:
46:7d:b7:8e:26:d7:0d:6c:b8:81:40:54:a1:b5:ab:83:8a:b9:
c0:12:d6:07
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZQjaj//deevHvRFgLDey/YmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMTAxMTk0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjE4ZmYyYzAwNTIzZDJjMzU2MjU3MTg4NzJhMmQ0ODk1OWM0ODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m9Df4QzZM+8Uj70EP4wmVpcrRMg
mISbrDziQDKXEo2pAiUVuIc5IKpyrTF+X+qPnyWPSB9R2v23o0jDqKViXPNMDg0G
bDBwRmTufnT9nH3IPyvVPxWv/xPBV8+b4Cyfnieav5fb6WlYN67P686WWmAfTKQn
Fe/UBgwEJ87B1Y25O84VghWdWefZXLWmNP/uTRdtNX1Nt75j+174uDjQxoYwXzxl
PwGFbpMBenYgmTh2asKNOhqN0jrgpmDTyeuxHhvZUm0BQj/Ygq4K9CHpmdTk0Erf
NjEF3eBjCzS5PYjLJv0y68m1dGVzH41koCRLCUW2tmvWgraIFlOnD3tZZwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFNsY/ywAUj0sNWJXGIcqLUiVnEg/MB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvMnhqX0xBQlNQU3cxWWxjWWh5b3RTSldjU0Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALV13AwQA
uY6OAwQAufnZAwQAwiLmMA8EAgACMAkDBwQqBo4BAAAwDQYJKoZIhvcNAQELBQAD
ggEBAMpkc1/mdoCloYB4cbjWtC1EUFQ0O7fT46SH7aOVwRqB2CBrdPT+tHus4rXB
bnBF9BgXSwDWK+pj32bYmm/whGHf1mtb4r5EA1Nb2MpHNiQo5yYK3Sluv4Z2VLgX
mJuEX2ILwXUBAdDpwaJao0DjE2PHsLlFT1UPH8X2WfF2QfwU48UAvTB0f+0jRxxD
bvITV7UWzsfDmzTyHP8draTsrVrktCnBNfp5SDjIlmeCpEb/dM9yj4iHl7iY3hu2
400ClLqQVOqKezym3GTvcjQePtuwXNCpqiFAaKHt4+TYt2DqHxYviccRZVrVqkZ9
t44m1w1suIFAVKG1q4OKucAS1gc=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:10:06 2025 by rpki-client