Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/LU1s0zmGSeYKG-4n1WkLT9cWbqk.roa
File: LU1s0zmGSeYKG-4n1WkLT9cWbqk.roa (raw, json)
Hash identifier: GtX35RaaBv9L7G1Pnds9DJGn5p0uLDWMx+Y17pyp9Rw=
Subject key identifier: 2D:4D:6C:D3:39:86:49:E6:0A:1B:EE:27:D5:69:0B:4F:D7:16:6E:A9
Certificate issuer: /CN=00b2987c613aabb659e6be9903ac3501d537312e
Certificate serial: 0194266AC215DA0566845E00C0CF4B66F085
Authority key identifier: 00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/LU1s0zmGSeYKG-4n1WkLT9cWbqk.roa
Signing time: Thu 02 Jan 2025 09:48:38 +0000
ROA not before: Thu 02 Jan 2025 09:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43847
IP address blocks: 31.185.104.0/21 maxlen: 24
46.182.16.0/21 maxlen: 24
185.58.156.0/22 maxlen: 24
2a02:2970::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:c2:15:da:05:66:84:5e:00:c0:cf:4b:66:f0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b2987c613aabb659e6be9903ac3501d537312e
Validity
Not Before: Jan 2 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d4d6cd3398649e60a1bee27d5690b4fd7166ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:f8:4b:72:5d:6f:a5:01:21:cb:bb:8c:e6:
70:63:e0:0b:cd:10:d0:f4:0c:27:46:ae:57:8c:94:
e2:05:07:50:48:3b:96:63:2e:a0:99:29:31:19:ed:
ec:21:94:3a:4a:57:51:e4:a5:08:2a:9b:d4:51:44:
80:50:e3:0f:d4:3a:c0:2e:c2:af:f7:46:d4:8a:19:
e7:b2:33:13:cf:4d:d0:87:7c:5f:d2:4a:33:07:9b:
fe:ed:27:4e:e2:ed:a1:f2:4d:26:16:7d:1f:61:3c:
70:69:73:1b:3e:39:bf:3e:7d:e7:30:93:9d:2c:75:
f0:cd:37:11:89:93:f3:f6:8d:1a:16:81:b7:7a:f5:
bd:f2:01:34:ec:ba:cc:df:42:e3:db:1a:df:5c:52:
56:11:ab:5b:cf:98:e4:99:a6:00:a7:a5:72:57:8a:
2e:43:e6:e5:0c:66:b9:39:fd:b0:af:bd:16:a5:b3:
c9:93:a9:00:a3:98:de:73:3b:98:e2:37:02:8c:b6:
ed:02:08:24:e8:a7:27:e8:ee:17:1f:64:04:17:d7:
dc:1e:bd:2a:11:24:90:e9:8c:2a:a6:7c:9f:ab:c4:
a7:1c:11:05:33:08:30:1b:8d:f2:1a:e0:aa:0f:24:
0f:55:43:5b:fe:15:1c:7b:55:d3:94:38:b5:a5:e2:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:6C:D3:39:86:49:E6:0A:1B:EE:27:D5:69:0B:4F:D7:16:6E:A9
X509v3 Authority Key Identifier:
keyid:00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/LU1s0zmGSeYKG-4n1WkLT9cWbqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.104.0/21
46.182.16.0/21
185.58.156.0/22
IPv6:
2a02:2970::/29
Signature Algorithm: sha256WithRSAEncryption
8b:87:f9:b6:dc:73:7b:43:e9:b3:65:e8:a5:6f:98:40:f3:cf:
64:86:fc:95:33:fe:56:f6:4c:8d:37:83:ee:4a:91:b8:51:77:
ed:63:2b:06:6a:6e:2b:40:18:15:87:80:0b:52:ce:4a:96:69:
3b:c7:85:ff:4e:2f:34:92:cc:db:3d:53:9d:ac:33:e7:b3:91:
b2:c8:f2:a6:96:cc:12:be:97:25:d8:7a:b0:25:19:92:e4:2f:
20:59:1f:b7:c6:7b:3a:aa:e5:ea:bb:fd:69:a6:17:a5:e8:57:
b1:2b:9d:6c:01:19:c1:e7:06:6c:6e:98:c0:db:c7:08:12:bb:
d9:26:f6:64:1d:6e:ff:31:30:2b:ca:8f:cf:4e:aa:62:a6:e8:
51:36:42:a5:02:af:bb:ae:6b:13:05:98:63:22:24:05:bc:ff:
a8:87:1d:63:d6:f3:92:7d:89:e2:6a:4c:78:61:81:0c:45:03:
eb:e0:d9:33:be:3d:f5:64:dd:fd:bc:cd:53:57:df:fc:d2:2e:
29:14:4a:42:df:fc:3f:25:a2:8c:b8:c6:02:6e:f6:92:b2:3a:
66:85:13:97:34:14:62:e4:ba:b0:53:1e:9c:88:af:cc:20:30:
05:2c:55:f1:86:f1:8f:a0:e4:ae:01:d2:6b:ad:1e:58:77:f0:
90:77:77:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:02:47 2025 by rpki-client