Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/LVgdGGp1BXM3wqsV9OwWixTAngw.roa
File: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (raw, json)
Hash identifier: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=
Subject key identifier: 2D:58:1D:18:6A:75:05:73:37:C2:AB:15:F4:EC:16:8B:14:C0:9E:0C
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 0194221FF6D2EFE3D10BE587A5EDAED13A4D
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/LVgdGGp1BXM3wqsV9OwWixTAngw.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35434
IP address blocks: 83.230.0.0/19 maxlen: 19
83.230.32.0/20 maxlen: 20
83.230.48.0/22 maxlen: 22
195.82.160.0/21 maxlen: 21
195.82.168.0/22 maxlen: 22
195.82.172.0/23 maxlen: 23
195.82.176.0/21 maxlen: 21
195.82.188.0/22 maxlen: 22
212.106.138.0/23 maxlen: 23
212.106.160.0/21 maxlen: 21
213.227.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f6:d2:ef:e3:d1:0b:e5:87:a5:ed:ae:d1:3a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d581d186a75057337c2ab15f4ec168b14c09e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:f2:41:00:48:63:d4:77:93:27:7e:3d:30:
fe:64:53:80:3d:8b:89:22:40:c8:cd:ef:6e:97:fa:
e5:32:98:23:e5:be:e4:3f:ab:fa:3f:d0:98:e1:56:
60:f3:d2:54:2b:7a:35:c6:e6:bd:9d:e8:4a:01:91:
61:01:33:b1:a8:78:5d:b0:81:b8:ed:2e:9a:24:b4:
f8:ff:26:49:f6:f1:ba:96:61:9e:21:df:15:ad:13:
59:4a:96:2e:d0:91:00:7f:97:1b:6a:11:96:32:6d:
e4:61:17:3a:7f:f9:5a:2e:70:3e:d0:cf:80:42:67:
7b:ac:d7:ad:45:8b:ad:d1:3c:69:22:a2:c7:b4:23:
5b:f3:47:b0:ba:df:c3:38:bf:42:a2:fa:71:e8:27:
5f:2a:41:15:60:43:46:18:a8:1a:00:55:a0:a0:82:
4e:38:c7:36:36:28:9c:59:1f:75:9a:2d:12:2c:ce:
30:89:c2:fb:75:dc:c4:ff:7b:49:1e:ea:18:10:40:
23:4c:56:a1:2b:e1:fe:97:4e:bc:b4:52:6d:d9:cd:
33:6b:f2:92:c6:89:e0:6b:66:b1:40:3a:e3:b2:73:
a0:29:d6:d9:13:d6:a5:a6:cd:2b:75:e5:6b:84:40:
e4:24:7f:d7:2a:bd:04:38:05:c6:f0:ad:f4:85:bc:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:58:1D:18:6A:75:05:73:37:C2:AB:15:F4:EC:16:8B:14:C0:9E:0C
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/LVgdGGp1BXM3wqsV9OwWixTAngw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.0.0-83.230.51.255
195.82.160.0-195.82.173.255
195.82.176.0/21
195.82.188.0/22
212.106.138.0/23
212.106.160.0/21
213.227.72.0/22
Signature Algorithm: sha256WithRSAEncryption
28:f8:cd:18:9b:76:8b:97:77:0b:14:c2:2a:33:1a:e4:cd:e0:
eb:54:f2:a6:2a:52:82:3e:c8:ec:b9:c0:6a:4e:5a:8a:57:fd:
0b:fc:bd:fb:c0:b1:a3:a4:b0:40:9a:d6:f1:bf:eb:4f:07:87:
7f:ce:1c:a1:05:95:10:9b:0f:f4:ce:f6:db:c3:42:d0:cb:da:
2f:a7:75:99:f0:8e:1e:8d:9b:b8:1f:05:e1:51:8d:28:42:f8:
68:b5:4b:e8:85:20:16:ea:c4:2d:65:96:fb:e0:18:b9:87:61:
82:40:81:f7:e2:c9:ae:af:9c:8d:e9:08:73:0f:3c:69:2b:85:
61:58:71:e1:e7:4e:fc:51:e2:82:27:e1:5b:13:57:45:1b:af:
0a:38:3f:26:5b:5e:eb:22:b7:82:2c:7f:0b:f2:91:e0:15:cc:
63:de:cf:9d:44:7d:b0:82:d5:c7:a3:57:6c:e1:29:32:97:4a:
9c:66:e4:5b:67:97:b0:fa:f7:8c:9a:d6:ab:7f:3a:d0:14:18:
49:80:af:1d:ef:8a:00:ee:02:b9:31:6d:a7:cf:16:bb:fa:5a:
3e:5d:29:9b:38:05:cb:49:4e:24:f0:56:3a:e2:e3:2d:4f:92:
e1:a8:a3:e0:41:ac:34:75:94:a6:e1:3e:ac:a1:56:9c:45:43:
ef:14:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:27:46 2025 by rpki-client