Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa
File: LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa (raw, json)
Hash identifier: v8mOmwcN05BKABZj3FxE0md/hgvb7wAQAm8sJBSEt0U=
Subject key identifier: 2E:46:61:42:65:FF:BA:B9:DA:57:72:2C:2A:09:5F:9F:C6:5C:37:74
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 01942521B1932AE85C605C995799BC6402B7
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa
Signing time: Thu 02 Jan 2025 03:49:12 +0000
ROA not before: Thu 02 Jan 2025 03:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200735
IP address blocks: 85.208.236.0/24 maxlen: 24
85.208.237.0/24 maxlen: 24
2a09:8e40::/36 maxlen: 36
2a09:8e40:1000::/36 maxlen: 36
2a09:8e40:2000::/36 maxlen: 36
2a09:8e40:3000::/36 maxlen: 36
2a09:8e40:4000::/36 maxlen: 36
2a09:8e40:5000::/36 maxlen: 36
2a09:8e40:6000::/36 maxlen: 36
2a09:8e40:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b1:93:2a:e8:5c:60:5c:99:57:99:bc:64:02:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Jan 2 03:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e46614265ffbab9da57722c2a095f9fc65c3774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:2b:7b:fe:1b:0c:15:df:b6:d7:78:e3:57:
c7:03:2a:b1:ec:2c:3f:67:be:62:f2:b7:5c:77:66:
e2:d0:32:18:57:ef:58:48:46:db:55:43:45:ab:60:
d1:6a:e9:24:36:4e:b8:12:87:8c:52:98:72:94:92:
24:20:85:28:0f:a0:9e:5d:47:a8:cf:b1:c7:78:93:
e4:6c:ff:eb:1f:43:1f:5d:be:bb:6c:19:dc:d7:96:
b4:6f:b2:5f:53:14:8c:e2:5f:92:c5:f1:51:24:63:
48:3f:5f:d1:e3:d0:4f:6c:45:35:95:dd:4d:4e:0f:
a4:2f:b3:e0:93:36:83:05:f0:5a:4f:5b:48:36:f0:
e6:cc:c2:00:8a:79:9f:1f:e4:d8:eb:ad:13:e5:a7:
53:da:9c:4d:44:96:a3:15:03:21:ef:30:f6:e1:56:
2d:60:47:ea:34:04:ba:97:37:96:b4:0c:3a:8b:cb:
ea:a8:f9:65:01:13:b3:3c:05:f9:5f:c9:7f:59:1f:
35:46:8d:a9:90:d8:e5:00:57:c7:1c:b0:30:7f:00:
dd:d9:de:dc:82:1e:da:0f:42:48:fb:d7:83:99:2f:
2c:26:ba:3d:3e:69:d7:40:9d:6f:34:7b:f9:d3:8a:
3f:f5:a8:b8:d2:c4:6b:84:2c:7b:1a:ed:51:b5:cd:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:46:61:42:65:FF:BA:B9:DA:57:72:2C:2A:09:5F:9F:C6:5C:37:74
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.236.0/23
IPv6:
2a09:8e40::/33
Signature Algorithm: sha256WithRSAEncryption
18:66:cf:68:e3:24:49:50:47:d3:a7:9d:3b:a8:35:68:33:73:
06:7e:2a:30:ec:4d:38:78:44:58:b8:45:da:83:fc:16:31:74:
e3:37:0b:80:83:0d:be:db:d3:10:78:bb:17:45:4a:df:6a:60:
c5:eb:09:14:d9:52:77:1e:08:d7:3c:2c:0c:87:48:48:4b:1f:
90:20:58:d9:49:ba:4f:d2:eb:48:c4:d7:00:b1:a7:62:27:5e:
b9:9f:eb:34:5e:a9:63:fc:a0:28:7a:03:5d:93:00:b6:70:91:
6a:83:dc:8b:b5:9f:6d:08:fd:05:f3:0f:0b:62:02:37:40:51:
4f:9a:50:72:f2:88:14:3a:ba:6d:07:31:ff:37:28:6b:3a:0f:
a3:17:3b:51:e1:2b:d6:ef:7a:5d:bd:e7:8a:2f:1b:3d:15:c4:
a4:a8:a3:59:63:bf:08:54:f8:6f:1e:8a:ce:69:84:24:d0:3f:
25:09:90:5f:63:27:2d:6a:d4:2c:4e:17:93:c0:d4:47:ff:4f:
e7:90:49:ac:cf:02:8c:01:03:b5:73:51:33:53:13:31:82:32:
f4:e4:01:97:c8:0b:74:74:4e:11:6b:de:38:18:f9:67:aa:88:
16:45:86:b4:2f:ba:2c:8d:d7:71:67:da:46:0a:f3:d0:a0:47:
75:35:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:58 2025 by rpki-client on console.sobornost.net