Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/lbtG49eN0a1POYPwkNLEN0HddFE.roa
File: lbtG49eN0a1POYPwkNLEN0HddFE.roa (raw, json)
Hash identifier: KWEYHURJFnJiN3hEz4GFQQGAyl2j2r/yzzHo/uu7its=
Subject key identifier: 95:BB:46:E3:D7:8D:D1:AD:4F:39:83:F0:90:D2:C4:37:41:DD:74:51
Certificate issuer: /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial: 019424454978AE77AF498918D43FD90B90D5
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/lbtG49eN0a1POYPwkNLEN0HddFE.roa
Signing time: Wed 01 Jan 2025 23:48:28 +0000
ROA not before: Wed 01 Jan 2025 23:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43204
IP address blocks: 78.108.122.0/24 maxlen: 24
185.36.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:49:78:ae:77:af:49:89:18:d4:3f:d9:0b:90:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Validity
Not Before: Jan 1 23:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95bb46e3d78dd1ad4f3983f090d2c43741dd7451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:8d:be:18:4b:8e:42:4f:a1:37:6b:2c:d5:
7c:de:de:eb:a1:2a:76:74:fb:01:41:57:82:f1:56:
bc:3b:f8:78:b7:a4:85:bc:30:b2:f1:6a:cc:1c:33:
ae:9f:b8:73:e9:d5:16:12:b4:45:52:71:6a:99:1c:
62:05:03:f4:88:d8:ad:03:11:1f:9f:e4:a6:f8:86:
50:af:bc:2c:f7:16:87:8c:bd:1a:51:4f:c2:1f:d9:
77:e8:4c:ec:b5:f7:c9:26:d4:52:bc:22:9c:22:fc:
34:8a:a5:fc:5e:8f:51:f6:b0:f4:0c:65:39:c0:b2:
33:45:a4:1d:62:d8:a8:56:dd:13:a6:f9:7b:40:45:
26:9d:76:e4:13:7b:d5:82:f2:0f:92:b9:b0:c7:a0:
51:c2:00:5b:3d:32:f0:48:61:3a:38:59:26:8c:f8:
04:20:aa:69:51:77:5f:de:e3:7b:61:51:ca:d8:ee:
8d:fa:4a:a7:a2:af:68:8e:bf:c1:5b:c2:4e:77:69:
1d:df:74:62:42:99:22:3b:57:03:72:c2:4e:d5:39:
7c:86:be:07:3a:b2:f4:32:ca:29:9d:ff:c9:57:81:
5d:08:30:77:77:c7:ea:e5:41:ad:71:5b:91:6a:d9:
eb:58:d2:1b:39:5f:8b:74:f9:bf:67:b8:e4:6b:1b:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BB:46:E3:D7:8D:D1:AD:4F:39:83:F0:90:D2:C4:37:41:DD:74:51
X509v3 Authority Key Identifier:
keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/lbtG49eN0a1POYPwkNLEN0HddFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.122.0/24
185.36.21.0/24
Signature Algorithm: sha256WithRSAEncryption
04:98:bb:3a:d8:c3:f3:43:a2:c5:d1:7d:2f:95:a9:f7:80:d4:
69:2a:01:6b:12:45:e6:d3:71:99:ca:79:3b:75:54:87:af:b7:
cd:66:39:52:ae:f3:a9:d2:af:7f:f7:fb:51:b5:79:26:4c:00:
a0:af:f5:98:74:e1:af:c1:65:0c:0d:d9:c6:27:a6:88:0e:1d:
34:9a:30:db:72:54:2e:a3:b5:93:9f:24:41:3c:05:46:0a:76:
b9:57:26:0a:98:bc:55:cf:d3:53:fb:87:cb:cd:e3:88:d8:35:
32:ca:6c:e2:d0:be:33:3a:f6:ae:01:c7:26:1d:d4:ad:7f:99:
11:aa:a3:90:e9:b9:2c:b0:ae:bc:f4:39:95:e9:bd:1a:a4:e9:
a3:83:f3:7b:3b:d8:ef:ef:92:30:9a:a9:83:82:de:39:33:58:
82:fd:c9:b8:6b:8a:69:75:92:9b:bd:9e:4d:ac:43:3f:36:c0:
73:be:66:4f:1e:d9:f1:5b:cc:3f:4e:80:4f:65:0f:7c:73:7e:
84:b3:72:95:13:ad:7e:7b:cd:7a:ce:c4:57:30:f4:57:93:f0:
dd:08:c6:57:67:21:91:e6:d1:75:5b:c5:80:27:04:f0:d2:f6:
e6:f3:d0:58:b5:9e:05:b5:78:b1:c6:4b:e0:15:f3:34:65:b5:
06:a8:a3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:02 2025 by rpki-client