Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa
File: LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa (raw, json)
Hash identifier: 90iV42vsD6bXusmrjQ9UcKOk5lPPv2pkCMxcdhSqD2Y=
Subject key identifier: 2E:3A:41:D3:0A:8F:0E:50:18:D8:B9:19:11:E1:61:9B:64:17:28:C0
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 0194206871C5E2CEACAE256C95276B429BB0
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50446
IP address blocks: 109.69.184.0/21 maxlen: 24
109.69.185.0/24 maxlen: 24
109.69.186.0/24 maxlen: 24
109.69.188.0/24 maxlen: 24
109.69.190.0/24 maxlen: 24
185.73.52.0/22 maxlen: 22
2a03:ba80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:71:c5:e2:ce:ac:ae:25:6c:95:27:6b:42:9b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e3a41d30a8f0e5018d8b91911e1619b641728c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:cd:8c:8a:f4:23:75:16:54:d7:d3:58:cb:
1e:11:e6:e1:7e:bf:96:0f:61:6f:e1:05:8d:83:4f:
7b:2a:de:c9:94:f5:5e:48:2b:51:3f:3a:57:b9:6f:
13:52:bf:10:18:7d:a6:8d:1a:96:63:c3:c4:38:82:
87:be:c5:89:28:64:af:c8:26:bc:fa:00:22:24:63:
32:ba:58:b2:ae:3c:bb:de:33:8b:f6:dd:46:3a:8e:
60:f4:63:4e:e2:ff:6a:0c:2d:ab:3b:a5:35:75:28:
90:92:88:b0:41:4c:38:8f:83:f4:4e:99:49:f7:55:
82:79:0a:f5:50:e4:b5:ef:66:89:17:89:e6:eb:5b:
ba:27:62:42:be:ae:84:8f:43:bc:cf:b3:6a:cb:da:
52:0c:3a:f5:f2:6d:7a:cd:18:a6:17:49:91:94:5e:
ea:25:61:9e:2d:91:b0:1d:a2:0a:1e:bc:69:11:5f:
11:a8:97:1e:aa:f6:fb:dc:9a:f6:73:3c:d2:49:33:
69:23:87:94:fa:b5:24:5d:a5:f7:4e:58:45:03:6f:
c4:aa:74:c4:50:91:bd:df:75:35:f3:3f:d9:c0:d4:
23:d1:59:ff:fa:f1:48:c7:05:c5:c2:26:c4:10:db:
07:93:7d:c7:29:35:04:b5:07:85:14:ea:79:d7:7f:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3A:41:D3:0A:8F:0E:50:18:D8:B9:19:11:E1:61:9B:64:17:28:C0
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.184.0/21
185.73.52.0/22
IPv6:
2a03:ba80::/32
Signature Algorithm: sha256WithRSAEncryption
1f:ac:e5:f3:14:b9:09:48:09:64:1f:51:35:d7:cb:a5:ff:02:
6e:f8:15:93:a0:d1:f9:a3:5d:f2:71:e0:4d:59:63:0a:e5:e7:
01:33:29:c3:19:15:40:0f:86:59:4a:c6:60:67:76:d9:13:88:
d8:59:5f:11:dc:0b:3f:de:f6:b3:d4:20:0b:dc:38:04:a8:f4:
d0:23:14:28:48:61:b1:90:0a:a4:4d:72:2c:59:31:7c:f8:2e:
9a:a7:45:78:85:18:76:bf:7d:96:b1:5e:63:d2:47:7c:2f:bd:
17:78:49:2c:f5:08:6c:24:f9:70:7a:a3:de:95:53:53:24:7a:
c8:a5:19:dd:85:56:a8:8c:6d:ac:6d:07:4b:8c:d9:96:82:3d:
03:8b:a6:01:5d:64:04:9c:71:2f:d4:a4:d9:f9:56:a6:62:34:
8e:de:7e:68:09:76:54:c8:c0:d2:10:3f:fe:7b:73:41:9a:06:
e6:1a:4f:ec:0d:b4:27:e9:bb:31:6e:de:f1:62:48:cf:9c:ee:
91:13:56:37:eb:12:7f:ab:e9:08:82:b1:0f:8a:3d:77:59:ab:
24:d6:32:0a:5d:56:ce:b5:dc:55:ef:a4:9d:e4:b3:3d:95:31:
e5:81:82:d2:8d:9b:e6:8c:de:15:6a:7c:6e:52:ea:1f:4c:b0:
b5:b5:a5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:09 2025 by rpki-client on console.sobornost.net