Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LxucjwpstAMjvcRRdZEWwJTWneg.roa
File: LxucjwpstAMjvcRRdZEWwJTWneg.roa (raw, json)
Hash identifier: 5yiCpMog8qe9na5jjGVZlc+dOwxzculeFmzWbhzbqDM=
Subject key identifier: 2F:1B:9C:8F:0A:6C:B4:03:23:BD:C4:51:75:91:16:C0:94:D6:9D:E8
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A43EC87AB178CE2C632EECAE2290F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LxucjwpstAMjvcRRdZEWwJTWneg.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55081
IP address blocks: 87.239.51.0/24 maxlen: 32
185.114.226.0/24 maxlen: 32
185.166.236.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:43:ec:87:ab:17:8c:e2:c6:32:ee:ca:e2:29:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f1b9c8f0a6cb40323bdc451759116c094d69de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:af:31:6e:11:0b:29:b2:c7:d9:27:20:7a:
f4:73:4e:b5:ea:e9:01:bd:2b:0b:bb:29:9f:c8:9d:
1e:d2:e7:ec:b0:c7:e9:27:01:05:4e:cf:00:ee:b3:
de:a9:62:40:66:8d:46:4e:b4:b4:4a:d6:c9:d7:ff:
48:a0:85:76:2b:8f:94:e5:c2:c0:1b:b7:db:aa:bf:
fb:78:54:17:ca:d9:43:33:91:6c:a6:05:c7:9c:71:
2a:fc:10:6f:d2:ff:c5:76:c4:f3:79:61:60:bf:e5:
32:fe:95:52:e7:1a:d7:9a:48:51:85:4a:c3:d1:13:
2d:f6:35:f2:c6:c3:f1:72:2e:d1:ef:32:3e:41:1b:
92:b7:ea:49:a2:0b:c4:ef:14:5b:d1:24:e6:35:86:
33:63:30:71:e0:9a:93:64:80:87:3b:11:6a:16:96:
61:a5:f3:6b:ab:8c:bd:41:6f:73:24:55:2e:d3:fa:
97:27:43:24:0f:b7:e9:b4:bd:84:77:98:6f:49:21:
e6:c9:31:2b:af:af:d7:46:ed:3c:55:3a:05:6c:88:
b4:9e:ed:ab:ba:13:aa:30:52:ad:d0:b6:48:8c:09:
be:1a:ee:6f:b8:77:5d:1b:d0:e5:3c:91:23:57:1b:
3d:2c:c0:8a:bf:5f:ad:b6:9d:05:39:60:51:ce:cb:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1B:9C:8F:0A:6C:B4:03:23:BD:C4:51:75:91:16:C0:94:D6:9D:E8
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LxucjwpstAMjvcRRdZEWwJTWneg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.51.0/24
185.114.226.0/24
185.166.236.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0e:0e:13:dc:8c:4f:98:27:d5:3d:00:33:f2:a0:b3:5d:00:
0e:ce:3b:3d:8f:20:db:10:80:6f:8d:11:d5:79:46:4d:be:f2:
58:9d:2d:ea:51:6d:b2:1f:42:2b:e5:9a:a8:06:91:23:c9:bd:
2c:8a:e4:b6:51:a7:c4:7c:d4:d0:d2:11:db:76:78:c7:45:43:
5d:3b:d1:a3:1a:47:cc:83:fb:07:c9:ab:0d:f1:57:a1:47:ac:
4e:bc:4b:2c:6c:d2:db:8d:6b:ce:42:fe:63:3c:a0:bb:80:38:
5d:e9:de:b0:54:87:20:60:f8:bf:ed:59:54:18:f7:c0:31:c2:
cc:4a:60:88:46:29:a1:3c:51:43:cf:02:db:31:e2:f6:9b:9b:
42:36:30:71:12:27:a5:93:fc:5e:20:fe:bd:d6:7f:45:c9:de:
f7:d0:c6:3d:6e:13:15:a0:60:84:74:a6:4b:a6:cd:44:bf:4f:
14:75:d7:89:f8:e1:7e:24:1d:89:43:ec:8e:cf:38:95:d8:58:
3a:a0:27:40:b8:e9:31:08:c2:5b:94:7a:4e:9f:ca:22:6e:66:
d4:9d:dd:e9:db:78:55:04:ea:1d:70:75:b5:12:5e:d2:b0:86:
41:5f:19:75:b3:96:70:2b:7f:fa:b5:cd:64:cd:97:74:68:a8:
a2:84:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:04 2025 by rpki-client