Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/LJjxj6e05gMbMPexgYm_2K1KfnQ.roa
File: LJjxj6e05gMbMPexgYm_2K1KfnQ.roa (raw, json)
Hash identifier: kmiUoJw8fQAjfgqPrnvVFc9aSxKxADT5/r3oB44gMLE=
Subject key identifier: 2C:98:F1:8F:A7:B4:E6:03:1B:30:F7:B1:81:89:BF:D8:AD:4A:7E:74
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 019426D96FA696B52CF7BF3CA6D814145C06
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/LJjxj6e05gMbMPexgYm_2K1KfnQ.roa
Signing time: Thu 02 Jan 2025 11:49:31 +0000
ROA not before: Thu 02 Jan 2025 11:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49855
IP address blocks: 31.24.144.0/21 maxlen: 21
91.202.40.0/22 maxlen: 22
109.69.64.0/21 maxlen: 21
185.98.240.0/22 maxlen: 22
2a02:16d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6f:a6:96:b5:2c:f7:bf:3c:a6:d8:14:14:5c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: Jan 2 11:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c98f18fa7b4e6031b30f7b18189bfd8ad4a7e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:9a:0d:2c:37:c4:d0:aa:67:c7:5c:91:90:
00:57:e4:62:80:49:6d:22:54:98:cf:4e:8e:c4:74:
ce:be:f9:6b:1b:78:8c:a1:fe:05:af:12:e6:2c:34:
4f:ac:3a:05:d6:75:db:ee:87:39:4a:05:ce:fe:92:
37:14:6a:b9:a2:d1:df:30:1b:ad:08:a9:fd:85:05:
cc:db:6c:08:cc:7d:b1:fb:b4:11:a1:4c:eb:be:bb:
88:77:86:1a:c7:be:ff:36:70:89:d1:38:b1:7a:44:
32:cc:86:a8:99:55:d7:10:8d:5b:c7:4e:6d:e6:aa:
f9:c3:9b:0b:50:64:c3:5b:bd:0d:d4:94:9a:d4:b6:
65:9f:c4:3d:e2:15:bc:36:85:e5:ee:d4:e6:43:e0:
01:b6:8e:e2:f8:c5:76:ce:d9:42:1b:d1:a0:60:f1:
43:a9:95:88:69:f0:10:63:3b:d4:66:bc:56:36:8e:
cf:fb:7b:d8:df:e1:2e:80:4a:cc:80:c3:a1:77:8a:
3e:d9:f9:48:75:bd:2b:fb:11:34:55:57:0b:a2:bf:
ad:cb:72:44:5a:b2:b9:cd:38:c7:e5:a8:f9:2d:98:
7e:3e:65:fb:a9:43:71:6f:95:f2:dd:85:df:51:9d:
74:29:09:40:fc:a8:1e:08:16:4d:4b:7e:12:7c:c4:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:98:F1:8F:A7:B4:E6:03:1B:30:F7:B1:81:89:BF:D8:AD:4A:7E:74
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/LJjxj6e05gMbMPexgYm_2K1KfnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.144.0/21
91.202.40.0/22
109.69.64.0/21
185.98.240.0/22
IPv6:
2a02:16d0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:9d:16:e2:54:c8:76:e4:31:b0:f7:05:c7:0f:8c:76:06:06:
98:c4:11:44:55:90:04:cc:55:f5:55:97:a5:0a:28:9e:da:7c:
bc:ce:d7:78:0b:e2:34:b7:4e:8b:1e:c7:86:d2:0d:68:40:fa:
93:59:72:74:c5:b3:76:26:02:68:fd:0a:fd:93:d7:22:11:dd:
47:a1:de:7c:6f:b3:87:4d:bc:b1:1c:99:46:85:ad:d6:1b:c3:
e0:43:bb:5a:6d:28:42:2b:0a:3d:c5:af:23:c5:e7:bb:78:9f:
b4:d2:11:1b:32:e2:3c:25:1f:27:7b:36:e7:0e:b5:32:50:9c:
1f:3e:57:90:49:8f:c2:b0:14:5e:5b:15:bf:a0:c4:19:4e:b2:
48:71:c2:7a:cf:6c:db:b3:d5:c6:b8:bd:df:3b:dc:83:b3:b4:
cb:92:af:d7:e9:b4:1a:35:cd:e1:be:cf:73:77:32:de:d2:b8:
f2:77:06:30:dd:09:70:bb:e1:09:20:21:eb:fc:88:06:7f:65:
d8:cd:9a:4b:29:4e:bb:64:e7:2b:1b:60:5a:f5:4f:b0:9d:09:
80:d3:2c:17:80:55:a6:84:23:47:15:df:35:fb:d1:02:de:ab:
7b:c7:c2:54:f9:25:2f:df:91:d1:2d:6e:8f:62:54:f3:77:d9:
b9:b0:cb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net