Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/lFbceLcRDwmhBa1zgOvzTV71-HE.roa
File: lFbceLcRDwmhBa1zgOvzTV71-HE.roa (raw, json)
Hash identifier: mrrcAYvrU89Mw/RDvXkAWlxbSPvtKYbzm6HV1Q42sLY=
Subject key identifier: 94:56:DC:78:B7:11:0F:09:A1:05:AD:73:80:EB:F3:4D:5E:F5:F8:71
Certificate issuer: /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Certificate serial: 01942444C7943728F54EA559074269BE8309
Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/lFbceLcRDwmhBa1zgOvzTV71-HE.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50698
IP address blocks: 109.202.64.0/19 maxlen: 20
159.253.232.0/21 maxlen: 22
185.116.76.0/22 maxlen: 23
2a06:4400::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c7:94:37:28:f5:4e:a5:59:07:42:69:be:83:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9456dc78b7110f09a105ad7380ebf34d5ef5f871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:c5:a2:e4:5c:48:9d:71:ee:ea:15:e8:8b:
dd:32:2f:68:e1:ae:09:ca:3a:e3:89:7c:7c:cf:26:
a9:0a:dc:a7:99:0b:6b:45:bb:a0:15:6c:c2:e5:9b:
db:8e:b8:13:97:e4:a8:1a:d3:9a:8a:8b:31:2a:b5:
5f:c9:d5:e3:4f:dd:61:71:dc:27:44:5b:59:c5:46:
71:87:ac:04:db:08:5a:08:9f:5a:69:65:ee:e1:90:
16:8b:44:dd:02:bc:d8:38:86:f0:e1:f6:04:42:f5:
4c:46:95:90:68:a3:23:bd:d2:b7:bf:c2:d0:91:58:
9e:de:9c:51:c0:53:87:b8:74:1b:93:a8:2b:6e:ed:
83:30:1f:a6:fc:4c:a0:a2:aa:d4:3c:68:09:77:fd:
7e:4d:2b:93:14:8d:13:bc:fc:d7:f6:cd:c4:22:be:
3f:b7:dd:81:7c:de:a7:92:40:1c:24:be:0f:fe:6d:
42:b3:b5:19:1a:e8:6a:af:64:d4:26:0e:70:17:c7:
16:69:5a:75:d1:54:56:46:03:bb:d8:58:41:d7:d6:
92:8e:2c:20:78:05:e4:57:00:3a:81:ae:1f:e2:90:
4b:5d:49:e2:6b:15:db:01:47:3f:fc:85:67:44:6a:
09:39:53:76:eb:db:e0:fe:80:d9:f5:ed:2f:42:9b:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:DC:78:B7:11:0F:09:A1:05:AD:73:80:EB:F3:4D:5E:F5:F8:71
X509v3 Authority Key Identifier:
keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/lFbceLcRDwmhBa1zgOvzTV71-HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.202.64.0/19
159.253.232.0/21
185.116.76.0/22
IPv6:
2a06:4400::/29
Signature Algorithm: sha256WithRSAEncryption
61:6a:20:e1:cb:52:e5:02:12:cb:97:e2:3a:6a:ae:55:7a:72:
3c:76:83:a1:d5:7e:02:58:9a:a8:d4:01:97:c8:a4:47:6e:72:
93:c3:16:8c:29:88:ab:c3:55:6e:34:cb:f1:04:8c:c3:d1:49:
39:a9:dc:2d:5e:e9:ec:c1:0e:69:6d:e9:16:1e:4c:42:ee:85:
d9:b9:ea:eb:9c:15:19:dc:48:5d:8a:e4:4e:a6:b9:9a:f7:0e:
94:10:4c:75:a9:9c:af:0c:64:21:61:ab:8e:9f:17:88:46:48:
45:bf:2c:c6:d9:ea:16:1c:8e:b9:a3:b3:75:bb:a8:c0:40:96:
9c:ee:28:91:5b:b7:9b:b0:ac:01:f0:99:3d:fd:cc:3d:bd:b9:
83:e3:64:b3:41:c2:03:03:07:b9:76:d8:bb:e5:70:ff:b8:e2:
1d:5f:ce:56:ea:0b:9d:0a:fe:69:b1:69:9e:e8:d4:53:a0:10:
16:7b:63:42:bd:e5:c8:1f:ff:63:41:7c:c8:8a:43:d1:01:dd:
c1:b9:89:11:3b:a5:99:eb:3f:84:76:4d:99:9f:a0:29:45:9e:
69:da:ef:04:db:3c:cf:48:9e:1b:e3:92:51:1d:10:f9:cc:d3:
01:47:fa:99:90:fb:05:00:9a:5a:5f:b9:22:e6:c0:bb:2d:c1:
1a:c4:02:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:17:36 2025 by rpki-client