Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa
File: lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa (raw, json)
Hash identifier: qmtm5lTuGIY7QCk9HhBMZ0EdWah1WvmsmlTlfIMZwP4=
Subject key identifier: 94:86:ED:0D:14:30:96:49:01:64:C7:5E:42:02:7C:C6:3D:18:52:2F
Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial: 0194266BFF357FF47D7D776E03DAA946D382
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207330
IP address blocks: 185.144.112.0/24 maxlen: 24
2a12:a3c0::/29 maxlen: 29
2a12:a3c0::/31 maxlen: 31
2a12:a3c2::/31 maxlen: 31
2a12:a3c4::/31 maxlen: 31
2a12:a3c6::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ff:35:7f:f4:7d:7d:77:6e:03:da:a9:46:d3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9486ed0d143096490164c75e42027cc63d18522f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:6a:2e:bb:3e:9c:f0:13:3b:e6:24:2e:ed:
3b:b6:77:f6:ac:79:74:e7:62:73:09:ee:f6:a6:8c:
40:94:45:82:41:04:b0:f2:2c:a3:8b:df:4c:3a:0f:
81:a4:1d:03:4f:60:76:8c:82:25:ce:96:89:a5:37:
9f:15:24:a5:ae:73:00:0a:26:1b:31:33:05:4d:c1:
78:62:4e:84:fd:69:7e:95:21:e7:9d:84:95:24:2c:
39:16:1a:4a:a1:20:3c:07:a0:8b:87:da:8d:ba:87:
5f:43:ce:1a:9c:4f:73:ee:dd:47:e1:40:47:09:41:
d5:3b:5b:84:84:1d:cf:e1:05:17:05:85:e8:6c:84:
01:52:3a:94:b3:17:ec:31:8a:ea:37:a6:34:43:96:
20:fe:65:2e:d7:be:28:d3:5e:47:0c:ca:dc:b6:ee:
c6:7b:d4:91:22:84:34:c8:e0:b1:9f:34:d1:3b:ef:
dd:4e:f3:fe:16:dc:4b:32:1d:4d:e9:87:f7:51:63:
4a:41:71:0d:5c:04:09:12:74:c7:fb:f2:15:c3:72:
fc:c2:fb:69:a3:38:85:5c:d3:49:0f:51:2c:10:84:
8a:79:79:2a:c9:3b:27:ee:45:97:0d:f9:f7:0d:6c:
12:14:58:96:55:55:5c:77:83:f3:15:0b:54:f9:d9:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:86:ED:0D:14:30:96:49:01:64:C7:5E:42:02:7C:C6:3D:18:52:2F
X509v3 Authority Key Identifier:
keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.112.0/24
IPv6:
2a12:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
a3:44:b3:cc:10:ce:7d:cf:b0:f6:69:f3:37:83:15:ac:8a:07:
5c:da:e8:5e:91:04:80:ba:b7:09:27:bf:1e:0c:2b:1f:08:93:
d2:cb:5e:47:00:f2:59:78:79:ef:ee:db:80:71:69:e8:7e:31:
37:69:56:ce:7a:85:97:14:7b:09:9b:19:68:7d:3c:7b:ac:91:
0d:22:eb:5a:a7:d4:d6:87:82:c2:35:fb:5e:b7:10:8c:fb:66:
e6:51:d2:e8:b7:fe:ae:35:c7:68:ee:2e:6e:2f:5e:e1:1f:d8:
53:bc:7a:65:85:23:46:7b:3f:b7:f0:98:8f:ea:dc:bc:9d:03:
ae:9e:6a:45:ac:ef:16:bb:88:c3:af:d0:03:10:69:9e:58:85:
24:15:0d:92:45:9d:41:24:25:29:4c:57:b1:3a:ec:79:42:96:
73:20:07:3b:84:16:58:62:13:09:86:bf:d0:93:6c:2a:05:39:
0e:5e:35:d2:7a:97:fc:b5:5a:d0:64:d2:0c:ca:a4:41:78:22:
7b:81:79:81:18:6b:c6:9e:d3:0d:54:c7:94:f4:ce:b7:f1:d1:
f9:7e:30:9c:c8:da:74:ac:bb:14:2e:8e:11:20:c7:71:25:ba:
e6:88:ad:a0:b6:28:81:57:fb:5d:b3:03:a9:0b:08:0b:a6:1f:
8b:38:8e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:36 2025 by rpki-client