Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/LlgzLPbqvndzjINwUyqBSYNVUGU.roa
File: LlgzLPbqvndzjINwUyqBSYNVUGU.roa (raw, json)
Hash identifier: XoxwnbkJ+YTYL7TqUKVjhOHoVLZf5ofK0CZEjvcyK/8=
Subject key identifier: 2E:58:33:2C:F6:EA:BE:77:73:8C:83:70:53:2A:81:49:83:55:50:65
Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial: 019420D5FD554427E9034817283D413FDE22
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/LlgzLPbqvndzjINwUyqBSYNVUGU.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15752
IP address blocks: 149.177.128.0/23 maxlen: 23
149.177.130.0/23 maxlen: 23
149.177.148.0/23 maxlen: 23
149.177.150.0/23 maxlen: 23
149.177.152.0/23 maxlen: 23
149.177.154.0/23 maxlen: 23
149.177.164.0/23 maxlen: 23
149.177.166.0/23 maxlen: 23
149.177.176.0/22 maxlen: 22
149.177.180.0/22 maxlen: 22
149.177.192.0/22 maxlen: 22
149.177.212.0/22 maxlen: 22
149.177.216.0/22 maxlen: 22
149.177.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fd:55:44:27:e9:03:48:17:28:3d:41:3f:de:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e58332cf6eabe77738c8370532a814983555065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:22:5c:d7:dd:97:1a:3b:63:1f:fc:e8:24:
6a:38:15:1e:ad:56:9a:6b:66:6f:46:53:42:87:20:
44:e0:34:03:d3:b6:10:28:6c:f9:a3:6d:e0:37:b2:
9d:e3:11:08:34:01:c4:da:f2:3d:a1:7a:e2:89:f9:
4c:41:ce:93:c5:f7:7e:de:4a:a0:53:8f:3a:19:32:
65:5f:fb:e0:e1:a8:55:53:04:9d:22:f5:48:2c:9d:
a5:42:3a:8d:79:24:a0:43:53:50:50:60:03:c8:04:
be:de:c2:d3:e7:9f:b3:64:09:08:c2:c5:9e:2e:b5:
b0:9e:42:ae:d1:21:1e:28:f5:28:52:a1:f1:98:cc:
de:7f:45:b8:8f:5e:f7:b0:92:88:cb:ce:e5:61:9e:
41:a0:77:67:d6:cc:7e:a5:c6:33:1f:a0:66:23:5b:
9e:27:c6:21:50:71:96:6b:a1:0f:72:c7:e1:12:5b:
ec:b1:de:71:41:e9:d7:9f:6c:21:68:c4:a7:84:fb:
e3:d3:52:16:ba:20:4a:f7:83:9d:bd:4c:cc:76:cb:
be:b5:a7:98:64:26:d2:47:68:f7:4f:bd:8d:13:77:
16:a3:fc:f2:65:73:4b:f6:66:1e:81:ee:a0:b6:ff:
29:39:b0:33:5b:6d:9d:3c:f7:0c:21:c7:c1:7c:cc:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:33:2C:F6:EA:BE:77:73:8C:83:70:53:2A:81:49:83:55:50:65
X509v3 Authority Key Identifier:
keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/LlgzLPbqvndzjINwUyqBSYNVUGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.177.128.0/22
149.177.148.0-149.177.155.255
149.177.164.0/22
149.177.176.0/21
149.177.192.0/22
149.177.212.0-149.177.219.255
149.177.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:79:18:96:f2:eb:49:48:3b:2e:e2:67:60:91:20:0a:6e:2f:
d3:5c:3f:7d:a5:5f:4a:83:94:47:2b:c0:c0:9f:e4:b1:66:c9:
b8:91:ad:f4:ca:db:df:f2:03:0a:cf:f5:a2:f3:54:7a:60:5a:
27:35:a3:fd:e4:70:ab:ae:b0:0b:c1:bc:aa:bc:a4:ed:fc:d1:
c4:95:dc:c8:eb:4e:30:e4:72:e6:9f:6c:7d:5a:e5:94:2b:ff:
f5:ad:46:ff:ad:71:19:9f:d4:ff:db:0a:26:5b:7a:b1:36:3e:
6e:b5:af:6d:26:97:41:ca:d3:cf:ba:83:17:d8:6d:1e:47:ce:
5d:6c:5d:18:c5:8a:ca:a1:14:17:30:79:7a:5f:83:51:0a:1d:
5a:c6:10:ec:ef:16:9f:a0:68:bf:c0:a6:65:4d:d5:4a:29:72:
29:b2:81:82:be:dd:6e:38:cf:a3:e2:55:15:aa:6e:10:f9:48:
70:20:6c:98:c2:e8:e0:b2:8f:0a:c5:73:78:a0:e0:94:8a:52:
9d:88:14:6b:53:a1:74:19:3d:e6:57:d0:08:2d:36:16:56:fb:
cb:01:02:71:34:2c:d3:5a:e6:82:fc:71:1b:06:91:21:15:3d:
a7:bb:4d:be:ee:fa:94:75:0c:12:db:ed:65:5d:dd:e8:20:bc:
94:4c:f8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:38 2025 by rpki-client