Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/LCMzGb8KK1XAn7ueElCREh4ehR0.roa
File: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (raw, json)
Hash identifier: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=
Subject key identifier: 2C:23:33:19:BF:0A:2B:55:C0:9F:BB:9E:12:50:91:12:1E:1E:85:1D
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 0194221F43D1F4013A358F93B1FA910DBEED
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/LCMzGb8KK1XAn7ueElCREh4ehR0.roa
Signing time: Wed 01 Jan 2025 13:47:41 +0000
ROA not before: Wed 01 Jan 2025 13:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204700
IP address blocks: 185.241.104.0/22 maxlen: 22
185.241.104.0/24 maxlen: 24
185.241.105.0/24 maxlen: 24
185.241.106.0/24 maxlen: 24
185.241.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:43:d1:f4:01:3a:35:8f:93:b1:fa:91:0d:be:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Jan 1 13:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c233319bf0a2b55c09fbb9e125091121e1e851d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bb:bd:90:07:2e:2f:7a:30:d6:ba:6d:a6:a9:
b0:e8:9d:7c:1d:63:2c:d6:90:e0:0d:d7:c5:fc:94:
40:82:fd:d1:c2:7e:a5:b2:39:33:d4:ea:d4:68:40:
dc:d2:7d:7c:23:33:97:9b:e4:09:4d:60:46:73:bd:
9f:16:07:a4:a9:9b:ca:e3:0e:c9:67:70:1f:e1:15:
1d:cf:9f:35:a5:3a:b2:a7:1a:24:fa:03:90:73:40:
73:4d:62:a7:af:79:52:be:ac:d9:6b:47:8d:0a:47:
59:0b:bc:cc:82:7d:3a:a7:06:9c:29:68:2f:a8:e2:
12:d9:4b:1e:50:82:dd:1e:cd:14:db:6c:67:8c:67:
1a:90:9e:df:aa:b9:f0:e7:2f:b8:40:aa:2e:5b:57:
f0:aa:70:31:8c:4f:09:d9:3e:01:51:3a:fc:83:56:
2c:86:4f:8a:85:e7:b5:0e:aa:63:15:29:12:56:03:
97:e2:d4:05:58:a2:e3:19:3d:fc:be:75:7f:a0:eb:
06:73:dd:e3:9f:1a:76:c2:81:dc:26:a2:fb:1e:3d:
c4:16:7b:3b:05:44:41:21:62:94:e4:fb:7a:75:b2:
44:88:76:2d:7c:fc:96:55:18:c6:9a:1d:4b:fc:4d:
c5:31:4f:c6:46:ce:bc:c2:00:a5:c3:fb:40:28:66:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:23:33:19:BF:0A:2B:55:C0:9F:BB:9E:12:50:91:12:1E:1E:85:1D
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/LCMzGb8KK1XAn7ueElCREh4ehR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:3f:64:19:2c:ae:6e:95:2a:57:55:6d:da:51:b0:a1:64:69:
3a:99:12:e1:24:95:28:26:64:66:fd:83:46:4e:64:f8:72:b8:
24:84:11:04:fd:a9:f0:6c:a3:15:9b:f3:a6:34:cc:54:69:25:
62:af:48:09:00:6d:9f:73:65:bc:a7:94:ef:0c:8e:cb:49:10:
c5:1e:cc:88:0d:f6:d1:8c:7a:74:36:b6:fa:52:7d:1a:6e:d4:
cf:1d:14:53:05:f3:b3:37:c7:2c:55:8b:b8:14:64:47:b3:d8:
c3:5a:4a:1d:32:41:e1:6d:7b:e9:57:cc:de:a3:5c:e4:63:6d:
c8:46:d0:4f:04:08:7b:f1:75:3a:f6:1e:e1:8d:9c:ee:57:ea:
f3:dc:ff:9c:ab:4b:2a:a8:07:1e:b8:34:28:af:e7:60:ca:d1:
37:c1:57:5a:eb:31:58:77:71:89:3e:b8:32:a8:41:00:32:62:
5c:6e:9c:5f:97:a0:20:c1:ed:2c:b3:53:4b:e4:68:4f:22:45:
72:81:d9:3d:9d:16:62:c9:b7:df:7f:e3:1c:26:3b:f0:1c:5a:
8a:8b:10:75:5c:6a:9d:22:92:8d:4e:75:06:b2:8c:77:2b:46:
ef:11:bc:41:30:66:06:ff:89:f3:82:eb:7c:d6:1b:77:2c:eb:
6e:67:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net