Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/LDDIaTBR1fej7cpOLEZhnI_qSEE.roa
File: LDDIaTBR1fej7cpOLEZhnI_qSEE.roa (raw, json)
Hash identifier: hQxFsYpuJ6NMu49tchYpm+6BQ9fOGR3Z//8DQxrcOIY=
Subject key identifier: 2C:30:C8:69:30:51:D5:F7:A3:ED:CA:4E:2C:46:61:9C:8F:EA:48:41
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 01942444D6D7AC59DBE89CE813414F4FC771
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/LDDIaTBR1fej7cpOLEZhnI_qSEE.roa
Signing time: Wed 01 Jan 2025 23:47:58 +0000
ROA not before: Wed 01 Jan 2025 23:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59684
IP address blocks: 176.126.164.0/22 maxlen: 22
176.126.164.0/24 maxlen: 24
176.126.165.0/24 maxlen: 24
176.126.166.0/24 maxlen: 24
176.126.167.0/24 maxlen: 24
2001:67c:87c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d6:d7:ac:59:db:e8:9c:e8:13:41:4f:4f:c7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c30c8693051d5f7a3edca4e2c46619c8fea4841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6a:da:17:3e:06:56:94:e3:e4:14:0d:fd:f5:
2b:13:9d:df:35:44:45:73:61:6f:1c:95:7b:00:43:
f3:05:e8:cb:38:fa:68:47:e6:01:fe:58:37:60:54:
2b:ca:62:fc:27:5a:26:9e:57:f5:2c:63:56:0c:cf:
d0:b3:0e:08:75:4f:2d:51:5b:e0:ea:39:01:27:98:
22:e1:c4:26:1a:11:12:8e:7d:a8:7c:2d:57:75:b3:
4f:a3:b8:d8:42:8e:0d:61:a8:b4:40:e2:7d:8a:33:
22:15:09:d2:3b:be:4c:c8:fd:51:e6:77:16:79:08:
6b:7b:7d:57:21:7b:58:3c:8e:b8:11:70:11:4b:1a:
3c:fe:fe:38:3b:be:26:5d:83:12:d1:21:0b:e2:8a:
f5:90:26:2a:b3:e2:77:ea:99:fa:ce:c2:37:19:83:
54:2a:0b:65:e5:48:b0:6a:dd:99:25:2d:93:dd:a9:
c7:3f:1e:61:9f:dc:36:18:77:c0:2b:ad:2f:a6:99:
b7:26:a8:fc:d1:69:87:ee:94:e3:98:3b:74:37:a7:
40:0f:4c:ab:b4:e9:51:14:51:4b:ba:4e:b0:ca:e9:
0e:dc:30:73:90:7b:8f:5c:46:d5:c7:01:38:f5:7a:
c5:52:0d:a4:94:5b:a7:18:ec:8c:9d:7a:6e:02:f9:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:30:C8:69:30:51:D5:F7:A3:ED:CA:4E:2C:46:61:9C:8F:EA:48:41
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/LDDIaTBR1fej7cpOLEZhnI_qSEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.164.0/22
IPv6:
2001:67c:87c::/48
Signature Algorithm: sha256WithRSAEncryption
1f:e1:e7:92:1b:c7:6b:4e:6b:2a:33:cc:6b:7f:64:c5:eb:ea:
4a:67:0b:ec:62:d1:68:6b:df:47:4e:33:b1:26:33:f7:14:5c:
1d:4b:4e:2d:9b:f8:3f:6f:29:cb:4a:38:ec:42:7f:22:00:7d:
93:d7:0e:a7:86:62:df:56:cf:52:4e:be:a1:b7:18:c5:98:00:
80:47:98:35:b2:97:89:bf:b5:f5:1f:68:ee:4a:7c:27:bd:a3:
f8:f8:e9:1c:a1:d8:03:2d:a7:20:d3:61:7e:66:06:09:9c:f5:
cd:0b:21:25:f1:e4:a1:d1:58:4d:d6:b5:00:21:14:c0:d3:20:
b5:c7:33:8b:e8:28:93:50:ba:4a:89:87:e7:64:76:37:94:6e:
73:9d:05:ed:fa:3e:ed:7d:b0:d5:6e:ea:5f:3c:ad:b0:63:08:
c2:84:31:62:97:29:1c:35:25:2a:0c:be:09:19:05:fd:36:88:
50:17:55:8f:46:38:55:e1:da:61:0f:d3:d4:28:04:f7:72:57:
20:09:e6:b2:9c:30:65:cf:7c:a8:13:87:35:cf:5e:61:48:64:
31:41:6e:d6:72:5b:b3:27:51:ec:65:ce:09:76:48:24:2f:5f:
66:f9:63:c3:c7:1c:5b:cf:6b:b4:3e:b1:2d:80:67:4e:99:96:
64:74:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net