Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/lZqh98v1p7SMdnTevU2ohDFVTYU.roa
File: lZqh98v1p7SMdnTevU2ohDFVTYU.roa (raw, json)
Hash identifier: O0iB20pJ4bqjR3GQawrzp1OwygFy4onsg0mr0/s03uQ=
Subject key identifier: 95:9A:A1:F7:CB:F5:A7:B4:8C:76:74:DE:BD:4D:A8:84:31:55:4D:85
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 019423D6F98BD1FEA256F1A8614A935CDD8B
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/lZqh98v1p7SMdnTevU2ohDFVTYU.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 267809
IP address blocks: 82.86.112.0/20 maxlen: 20
82.86.112.0/21 maxlen: 21
82.86.112.0/22 maxlen: 22
82.86.112.0/23 maxlen: 23
82.86.112.0/24 maxlen: 24
82.86.113.0/24 maxlen: 24
82.86.114.0/23 maxlen: 23
82.86.114.0/24 maxlen: 24
82.86.115.0/24 maxlen: 24
82.86.116.0/22 maxlen: 22
82.86.116.0/23 maxlen: 23
82.86.116.0/24 maxlen: 24
82.86.117.0/24 maxlen: 24
82.86.118.0/23 maxlen: 23
82.86.118.0/24 maxlen: 24
82.86.119.0/24 maxlen: 24
82.86.120.0/21 maxlen: 21
82.86.120.0/22 maxlen: 22
82.86.120.0/23 maxlen: 23
82.86.120.0/24 maxlen: 24
82.86.121.0/24 maxlen: 24
82.86.122.0/23 maxlen: 23
82.86.122.0/24 maxlen: 24
82.86.123.0/24 maxlen: 24
82.86.124.0/22 maxlen: 22
82.86.124.0/23 maxlen: 23
82.86.124.0/24 maxlen: 24
82.86.125.0/24 maxlen: 24
82.86.126.0/23 maxlen: 23
82.86.126.0/24 maxlen: 24
82.86.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f9:8b:d1:fe:a2:56:f1:a8:61:4a:93:5c:dd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=959aa1f7cbf5a7b48c7674debd4da88431554d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:cc:94:c7:49:2a:ab:9b:31:5d:6f:bf:ce:
9f:cc:f7:0c:91:a4:d1:31:c8:82:64:17:a7:7c:d6:
80:b3:8d:a7:e6:86:f2:8b:17:27:b1:a8:48:bd:92:
bb:8e:33:16:96:e7:51:a4:17:96:0b:71:cd:fd:13:
e3:d0:c9:59:5a:96:72:12:ee:41:3d:27:17:cd:d8:
56:cf:57:ba:8e:0c:51:61:2f:80:e6:57:6d:56:87:
ad:e1:11:f9:0e:b5:11:c2:30:85:5e:78:15:b0:d1:
e6:4c:bf:1a:df:55:75:7f:7b:ae:d6:aa:52:2f:f0:
91:73:a1:4e:37:1f:00:03:c6:ed:ac:12:74:62:f6:
0c:78:9c:44:2a:ea:14:3d:0c:88:ea:f2:ed:8a:8c:
8e:b8:7b:5c:26:3b:26:03:8c:09:3a:f1:6b:66:c5:
52:26:bf:38:63:2f:e1:26:13:24:73:b9:dc:82:69:
01:46:05:c1:d8:79:c2:14:46:fb:f3:61:3c:ef:3d:
2b:b3:32:cf:6c:29:a1:31:ce:92:37:c1:3b:4f:e7:
95:09:95:44:fe:7d:f3:38:1e:41:c4:43:c9:14:c3:
7e:56:66:98:5a:56:f4:2a:84:ed:40:5e:78:1c:03:
de:18:93:36:5c:90:60:7b:99:09:87:e5:03:f6:e4:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9A:A1:F7:CB:F5:A7:B4:8C:76:74:DE:BD:4D:A8:84:31:55:4D:85
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/lZqh98v1p7SMdnTevU2ohDFVTYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.86.112.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:24:26:22:e2:3c:a3:9f:a1:1e:d8:ba:ef:9e:de:bc:6b:2f:
94:54:98:1e:19:84:ef:04:bc:e8:79:e9:2f:b2:3d:c3:ac:8b:
65:f8:5b:48:47:83:81:5b:f9:32:b7:47:e6:57:01:8e:c7:f8:
f7:8f:4e:bf:32:42:51:5b:1a:16:13:17:ed:46:31:f3:11:73:
d7:fb:81:5f:da:ee:e7:0e:01:0d:1f:2d:3d:ae:14:d2:d4:55:
95:c8:1e:b4:25:75:0f:12:4d:72:12:ec:ce:a8:f1:be:69:32:
f3:0b:4d:06:44:61:d9:12:08:e3:70:44:dd:9e:02:f6:0d:6b:
e2:4f:1a:fc:31:17:cd:c6:e6:21:9e:60:b4:65:12:a3:9d:5f:
b9:ce:fb:d7:6d:67:4f:52:5d:81:40:2e:dc:5b:fd:07:94:35:
c7:aa:67:1b:b6:8a:5e:4b:8a:aa:98:1b:63:cb:7c:e3:82:29:
15:6d:13:fa:ca:64:00:33:a5:48:a8:83:67:9f:18:e0:4e:01:
e7:29:3a:f3:81:d8:62:df:77:40:8d:3f:7c:5e:47:19:04:25:
a9:e3:cf:1e:ff:ea:4a:cc:5f:07:5e:f6:3f:cd:5a:25:1a:55:
9a:13:bc:73:e4:60:19:0d:fb:ba:9c:77:9a:e6:43:7c:b7:37:
3d:d8:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:07:48 2025 by rpki-client