Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa
File: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (raw, json)
Hash identifier: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=
Subject key identifier: 96:68:C6:A0:89:26:B5:10:11:CC:C1:C9:DC:8B:FA:C5:9B:D6:4F:95
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0194274743B5096CC3DC6203AF939C700AD3
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa
Signing time: Thu 02 Jan 2025 13:49:29 +0000
ROA not before: Thu 02 Jan 2025 13:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 85.208.44.0/23 maxlen: 24
185.104.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:43:b5:09:6c:c3:dc:62:03:af:93:9c:70:0a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 13:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9668c6a08926b51011ccc1c9dc8bfac59bd64f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:7f:8d:83:56:8d:84:8f:7e:b7:3f:6e:ad:
ac:33:ab:fc:00:df:10:2f:d8:81:92:8a:5c:1f:b6:
f9:25:d5:14:19:ac:71:8b:a2:b5:41:a0:1b:ba:6d:
3c:8c:b0:e8:5e:33:b3:65:b0:47:fe:61:40:a6:04:
e0:9b:bd:76:61:97:cd:8e:06:6e:b4:63:de:f1:c2:
fa:ca:f6:88:b6:54:94:f8:15:13:c6:46:c1:69:cc:
e9:a4:25:6a:49:42:62:98:bb:ae:1f:fe:05:15:08:
3a:ac:52:ed:9d:fb:66:1b:0d:8f:b5:03:f7:d8:72:
91:e5:a0:25:c2:de:16:d7:b7:95:8e:d1:dc:98:d9:
9c:82:3b:f0:bc:7f:e6:9a:a3:7c:d2:db:8d:3a:c7:
9a:10:88:3d:7c:8a:39:38:0d:53:b9:10:6b:31:04:
18:cc:7b:95:a8:ba:7e:6b:24:e8:92:e2:ba:04:0b:
e7:f4:59:00:ef:10:b2:0a:7e:57:ef:24:5a:fd:cd:
f8:66:9a:44:50:20:b4:1f:b3:d7:c8:9a:5c:79:56:
c2:49:9c:85:c3:d7:71:58:25:17:ed:1f:72:25:0a:
4c:04:62:09:33:8b:cf:9a:3c:76:24:5b:05:25:b8:
b3:6d:9e:69:98:9d:3a:3b:1f:cf:73:e0:ac:b2:1b:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:C6:A0:89:26:B5:10:11:CC:C1:C9:DC:8B:FA:C5:9B:D6:4F:95
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.44.0/23
185.104.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:92:b2:1c:89:0d:c7:eb:83:6c:86:a5:24:08:f4:ab:89:d7:
21:ea:4c:8d:5c:91:e7:fc:b4:02:d6:ee:a6:bd:69:db:da:f0:
30:ac:e3:6c:ec:70:bd:85:71:7d:de:f9:93:11:86:31:7b:b5:
34:32:9d:e4:b6:67:15:ff:6e:44:0a:a7:ea:0d:0d:68:66:b1:
c3:6f:2b:91:f3:2f:87:2b:af:61:1e:03:92:fc:15:7a:b9:7d:
19:e6:4e:09:7b:49:42:c5:1b:b0:7c:0a:c1:95:c6:9a:66:1d:
1a:c5:db:4a:b1:c1:f8:83:6e:f0:2e:12:44:78:d1:9c:9a:28:
f5:94:07:f4:a3:d4:e3:6c:8b:3a:32:78:08:48:14:ce:e9:2e:
af:2e:8b:2e:9b:c4:17:93:8f:70:96:b3:b6:2d:be:7f:6a:58:
53:c3:b2:cc:eb:eb:a4:5b:3b:96:be:ad:00:a5:40:32:68:2d:
66:9b:5d:71:42:42:48:7e:9e:07:2e:b0:2f:d7:77:98:9a:43:
fa:3f:30:1d:df:f1:55:b2:d6:34:f3:78:74:80:d5:b2:12:a6:
bc:3f:21:67:1a:38:d8:73:ac:49:88:2d:bb:2e:b9:ab:48:dc:
4c:a9:d1:ad:98:b1:bd:f2:d1:65:e1:70:28:ab:02:7d:0e:8a:
b9:e4:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net