Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/LShVVLJCwZTpOQVpRu4BHXCMY5o.roa
File: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (raw, json)
Hash identifier: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=
Subject key identifier: 2D:28:55:54:B2:42:C1:94:E9:39:05:69:46:EE:01:1D:70:8C:63:9A
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 0194221F427AD1FBFFDF18C1DEE78D4098C2
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/LShVVLJCwZTpOQVpRu4BHXCMY5o.roa
Signing time: Wed 01 Jan 2025 13:47:41 +0000
ROA not before: Wed 01 Jan 2025 13:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57255
IP address blocks: 213.156.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:42:7a:d1:fb:ff:df:18:c1:de:e7:8d:40:98:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Jan 1 13:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d285554b242c194e939056946ee011d708c639a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:9c:28:1d:64:22:7a:ed:2e:95:74:be:b1:
6b:31:c2:67:f1:41:89:e6:71:59:80:26:d5:82:a9:
35:39:5a:fc:c7:bf:8e:c1:a4:b9:83:c0:fe:9b:23:
00:84:65:e6:a2:ea:23:a9:a0:cc:0b:16:c6:f1:d3:
14:b4:8d:56:b8:3f:4a:8f:61:c4:29:e2:85:64:a6:
7e:f2:c2:21:0d:dc:62:03:ce:94:ab:12:0a:2a:74:
08:2b:24:fb:b6:70:5e:a0:02:b3:b8:78:9e:6d:9b:
9a:80:74:c1:48:62:46:4a:cb:5c:30:75:dc:ae:5c:
73:3a:e4:3e:4e:41:64:eb:09:4c:74:0e:6f:af:b1:
41:2b:36:dd:e5:41:4f:24:7b:f9:f6:7a:3c:3a:a1:
e0:24:c9:49:d3:87:f3:a3:14:73:45:25:60:ec:a3:
de:61:43:f8:09:93:eb:34:8b:35:9f:be:44:fa:08:
43:0c:4f:01:e9:8d:d2:a7:42:3e:03:d9:03:d1:d7:
45:0c:ad:1d:ed:ff:91:27:f9:08:d0:99:1d:60:f7:
41:84:f0:bb:fd:bb:68:9b:2a:76:8c:1a:f2:41:ae:
c7:d8:bb:33:63:82:e2:a8:68:69:95:e2:bd:68:34:
9b:b4:65:ed:1f:71:dd:90:85:e8:0d:00:84:1b:e3:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:55:54:B2:42:C1:94:E9:39:05:69:46:EE:01:1D:70:8C:63:9A
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/LShVVLJCwZTpOQVpRu4BHXCMY5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.156.103.0/24
Signature Algorithm: sha256WithRSAEncryption
95:26:4d:5c:b5:a9:18:61:70:58:75:3f:e9:27:76:b8:2f:e9:
0d:f2:9c:a4:43:80:f8:85:a0:cc:ca:49:b0:3f:8f:44:e7:35:
c4:fc:3e:4a:c9:59:3f:78:1e:ee:59:95:05:cc:23:3d:86:54:
86:42:82:1b:38:a3:0e:10:e6:14:01:14:e7:1c:ee:6f:c7:4b:
86:7e:eb:d8:94:6d:f0:cc:44:c7:16:4b:0b:7d:12:59:94:f2:
5b:ab:c6:52:00:37:8f:1f:bc:ca:b8:0f:fc:3b:4a:05:e0:9b:
59:74:98:ea:13:26:7d:85:75:cc:9d:21:cb:f3:ee:d7:62:dd:
3f:21:86:7e:c0:48:80:1e:7c:5c:14:36:45:8b:8c:2a:1f:76:
65:39:7b:08:fe:ec:db:01:dd:04:ba:35:43:ee:69:06:b6:3f:
82:0e:75:b7:a3:a0:d6:66:4d:5b:eb:f8:64:32:c0:a5:ef:15:
04:4c:3e:37:93:44:82:c5:57:83:dc:6d:b9:74:3b:8e:f3:9d:
3f:fb:9a:a8:e7:a4:5f:d3:28:ce:4e:bd:27:a8:6a:45:51:8a:
04:9c:0a:60:3e:eb:f2:cc:94:3e:31:03:48:cf:e6:ae:e7:cc:
7e:77:ea:3e:d2:c2:ad:d9:d5:f8:bb:81:a3:ff:41:b4:7d:de:
6b:20:3f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net