Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/LN7aifIzYDnimx72-UKqFTWRmAM.roa
File: LN7aifIzYDnimx72-UKqFTWRmAM.roa (raw, json)
Hash identifier: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=
Subject key identifier: 2C:DE:DA:89:F2:33:60:39:E2:9B:1E:F6:F9:42:AA:15:35:91:98:03
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 0194266A074BE894FBAEC62EDF984F2D68ED
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/LN7aifIzYDnimx72-UKqFTWRmAM.roa
Signing time: Thu 02 Jan 2025 09:47:50 +0000
ROA not before: Thu 02 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200560
IP address blocks: 185.103.56.0/24 maxlen: 24
185.103.57.0/24 maxlen: 24
185.103.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:07:4b:e8:94:fb:ae:c6:2e:df:98:4f:2d:68:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Jan 2 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cdeda89f2336039e29b1ef6f942aa1535919803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:2c:d2:c5:7b:4d:a3:0e:f0:b6:2d:a2:b9:
5f:69:38:23:a0:08:72:91:03:7b:1a:a5:2d:0e:4e:
de:94:b0:83:89:b5:dc:62:15:26:56:77:1b:bd:a4:
d5:90:5f:74:93:a5:cb:fd:1b:cf:b2:aa:87:82:3c:
ba:91:8a:b4:07:a9:aa:15:af:82:66:9a:c9:91:fa:
f4:1c:e4:64:cb:83:49:78:4b:f3:29:a9:f0:e9:0a:
cd:cd:01:32:7c:23:f3:c1:88:3c:ec:27:28:17:b8:
02:40:cc:8d:3d:8a:30:e6:81:76:d8:00:9c:1c:8c:
03:39:b9:b6:af:ba:8e:27:0d:b8:00:36:f3:fc:fd:
1c:1f:0a:52:c8:fc:77:f7:aa:4f:82:3d:9a:66:09:
6d:fc:d0:88:8f:74:d8:14:7a:b9:48:2b:a4:44:19:
63:86:fc:4d:50:65:1d:c4:d5:fc:40:32:7c:f1:c7:
27:d7:4e:fe:bd:3d:3f:0c:5d:69:bd:e1:bf:36:02:
c1:68:d9:87:86:08:ba:7f:c4:ad:e2:b0:33:eb:4f:
29:26:05:f5:fe:7e:45:bc:e2:a6:bc:da:d9:f2:75:
95:77:70:f6:c5:71:a7:b2:9f:d1:32:6f:46:7d:55:
2a:c1:71:7a:0d:80:d4:27:9e:0b:1a:1c:64:50:85:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DE:DA:89:F2:33:60:39:E2:9B:1E:F6:F9:42:AA:15:35:91:98:03
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/LN7aifIzYDnimx72-UKqFTWRmAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.56.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:d6:84:98:c7:95:e0:c6:ac:99:6d:7d:e4:fc:0f:48:d5:6c:
90:d5:9f:16:1f:50:18:63:d6:2f:93:de:9a:5e:ba:87:b3:a8:
b2:9d:ae:d6:35:8a:a8:70:65:ad:1b:27:c7:9f:0a:22:c9:d9:
72:c9:a1:5a:03:79:d7:a6:9c:b2:1a:be:f5:44:09:0d:95:1f:
36:11:f4:7d:66:0e:c2:4a:c7:52:95:3d:7b:06:a9:47:a3:10:
64:27:59:d4:25:d7:29:b1:5b:5f:b6:24:f4:7c:6e:ba:3c:b3:
8d:a6:7d:2a:b4:ea:c4:87:2c:c6:87:4c:b2:61:a9:4b:e5:c9:
bc:05:18:61:5d:13:50:9b:10:50:d8:2a:3e:06:83:fb:9a:48:
86:7e:a4:1b:ae:5d:f5:f7:51:52:5e:7c:45:57:cb:44:b9:67:
0f:e2:3e:6d:32:bb:27:ad:7a:b3:99:f8:68:ba:08:85:1c:55:
6a:ba:3e:62:ed:99:dd:e5:9c:7f:1f:0a:8f:4a:16:a4:dd:db:
12:f0:be:0e:27:bc:2c:cd:df:00:f2:09:a0:f0:77:3a:97:20:
d0:55:2a:fb:3c:c9:9f:0d:58:01:f7:c0:31:2b:8e:03:a9:00:
1f:47:75:62:08:7d:26:93:4d:dc:98:da:51:d5:73:97:3f:a8:
ac:f3:dc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:54:10 2025 by rpki-client