Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/LAIYSHBNgDJwVs33iUQdNmBywEc.roa
File: LAIYSHBNgDJwVs33iUQdNmBywEc.roa (raw, json)
Hash identifier: InEjvH48yKZ/JYP0Dutv2j5z1AvlQ/oufM81Pmqxk2w=
Subject key identifier: 2C:02:18:48:70:4D:80:32:70:56:CD:F7:89:44:1D:36:60:72:C0:47
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 0194258FBD60062397332F7C317A551A3129
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/LAIYSHBNgDJwVs33iUQdNmBywEc.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208735
IP address blocks: 185.121.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bd:60:06:23:97:33:2f:7c:31:7a:55:1a:31:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c021848704d80327056cdf789441d366072c047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:de:b4:1d:b4:ab:26:39:c6:b2:cf:68:5a:
47:bd:47:32:4d:6c:8e:70:86:cd:e5:70:15:70:e7:
ea:b7:2b:3b:76:91:20:44:fa:f1:19:ff:e0:40:15:
9d:2b:f3:3a:1b:bd:05:4f:1a:d3:e7:1e:83:0d:cd:
c9:82:9f:bc:7b:a8:c2:73:30:10:15:3f:d7:e2:fe:
31:54:ef:ab:30:82:94:51:76:c7:bc:4d:d5:bd:72:
82:c0:0c:fa:8c:ab:64:be:4c:67:ef:d3:5e:9d:eb:
9c:0e:b3:00:02:20:05:fc:5b:bb:90:dd:20:21:32:
f4:e3:4c:99:c7:af:05:e3:7b:9d:1c:a5:ba:ca:06:
5f:85:2c:90:7f:fb:a3:9e:15:1a:88:01:02:9f:46:
2f:6c:3a:cf:20:f8:da:88:71:85:e5:b1:c1:95:38:
47:a4:d3:83:1d:00:46:1b:f4:77:47:d2:1f:31:b2:
b3:73:a5:0c:0c:31:4c:62:21:ff:c9:d2:c8:ab:fe:
b0:05:23:4c:71:0e:34:80:dd:1b:1c:58:ee:00:bd:
58:80:c6:6c:35:f7:7f:99:a9:33:a8:4d:c0:65:eb:
de:0b:5f:08:bc:0f:6a:6c:2f:0b:f4:16:71:99:5a:
5e:a7:26:ae:d2:dd:cf:9b:b6:b1:39:9a:0d:35:13:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:18:48:70:4D:80:32:70:56:CD:F7:89:44:1D:36:60:72:C0:47
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/LAIYSHBNgDJwVs33iUQdNmBywEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.104.0/22
Signature Algorithm: sha256WithRSAEncryption
07:86:d9:cd:0e:00:6d:8d:df:e3:e2:4c:55:4a:06:6d:27:27:
47:2c:a4:75:97:63:da:bb:a0:1f:77:f3:b4:e7:2b:1a:fa:40:
65:9a:1f:a1:45:f0:4b:b5:3f:be:c5:16:69:16:69:11:f2:f4:
bc:d6:b4:a2:65:6e:af:1a:a6:33:6f:24:9a:fa:08:48:22:76:
1f:cd:54:1c:6b:36:48:4a:de:27:88:b4:09:a2:5c:3d:e0:c5:
93:f3:e3:53:fe:50:5e:1e:63:41:46:fb:1c:cd:4e:f1:ad:15:
c1:6d:4a:03:37:9f:9b:c6:47:64:d5:8d:e5:c3:76:a4:ab:e9:
c3:93:b6:20:57:fc:19:e2:19:1d:d6:13:85:27:1c:55:be:96:
7e:2d:a9:0e:9c:18:d4:84:1f:4e:fe:1b:90:44:45:8d:72:c3:
ed:24:21:80:30:70:f8:04:84:d7:40:a8:cd:f7:77:85:0a:b5:
55:0a:7c:c0:52:74:79:ef:b2:ba:aa:f7:31:3f:d2:50:0f:e9:
b5:04:6f:63:54:a7:ac:88:08:cc:f1:cf:32:f1:e7:8b:9a:4c:
45:be:01:f5:59:be:34:1f:61:c8:9d:be:1a:c9:bb:75:a9:e6:
cf:38:c6:7d:84:1b:68:56:b3:bb:51:5a:1e:a6:63:74:a0:ce:
46:8c:a1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net