Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/lnlabqHz8vZQfOc2T8GZSJCe_jI.roa
File: lnlabqHz8vZQfOc2T8GZSJCe_jI.roa (raw, json)
Hash identifier: LRCfx0Tz8s2m4vMNHjVZBjRrLuGLFoacGpWs8HBdPdM=
Subject key identifier: 96:79:5A:6E:A1:F3:F2:F6:50:7C:E7:36:4F:C1:99:48:90:9E:FE:32
Certificate issuer: /CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Certificate serial: 019427B5CBF3C33C0DEE551E9DBCD3967D55
Authority key identifier: F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/lnlabqHz8vZQfOc2T8GZSJCe_jI.roa
Signing time: Thu 02 Jan 2025 15:50:13 +0000
ROA not before: Thu 02 Jan 2025 15:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202191
IP address blocks: 185.26.208.0/24 maxlen: 24
185.26.210.0/23 maxlen: 23
185.26.210.0/24 maxlen: 24
185.26.211.0/24 maxlen: 24
193.53.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cb:f3:c3:3c:0d:ee:55:1e:9d:bc:d3:96:7d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Validity
Not Before: Jan 2 15:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96795a6ea1f3f2f6507ce7364fc19948909efe32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:bf:70:20:f9:16:7b:11:9a:03:71:41:47:
4e:35:2a:f9:69:37:4f:9a:bd:9d:3b:21:d3:21:b4:
5e:d4:82:ce:15:5a:e3:32:1b:5c:3b:fd:ad:e2:64:
9d:3c:3b:e8:e3:3d:9c:70:17:d3:6e:92:98:e3:a6:
dd:ff:49:c5:9b:14:83:69:66:d2:f5:da:91:88:78:
e3:39:47:9c:e2:9c:04:6e:ac:96:11:c4:f6:ce:c6:
6a:a4:8e:da:c3:b1:5b:7c:17:f3:86:3e:64:6c:fc:
9a:97:89:ab:3e:6d:2a:79:35:54:f3:57:a4:21:6e:
d4:b0:e7:a5:40:00:a3:9e:4c:04:5c:ae:b7:75:9c:
27:5d:ae:25:fc:8a:ba:e7:05:ce:ca:18:67:22:9d:
29:1a:c4:5f:03:74:13:1f:2d:ca:5d:72:d7:14:ce:
27:61:e8:82:48:a7:84:a0:0c:fc:22:5f:90:14:b2:
7d:90:be:71:f2:fd:69:59:a7:df:ea:4f:1a:83:9a:
e0:66:c8:eb:23:af:5f:f0:bc:d7:72:62:a8:4c:8a:
69:d9:17:e3:1e:68:1a:98:67:37:9f:77:80:47:a8:
a7:bb:04:8f:11:b2:c4:a3:c5:d1:11:78:7e:20:dd:
aa:62:61:6e:1e:6e:1b:91:92:de:49:06:66:5f:2a:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:5A:6E:A1:F3:F2:F6:50:7C:E7:36:4F:C1:99:48:90:9E:FE:32
X509v3 Authority Key Identifier:
keyid:F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/lnlabqHz8vZQfOc2T8GZSJCe_jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.208.0/24
185.26.210.0/23
193.53.39.0/24
Signature Algorithm: sha256WithRSAEncryption
18:22:ef:ac:88:ec:96:b4:ad:99:e3:9a:fe:ea:83:36:7c:75:
e7:40:dc:31:6f:2c:fa:c3:22:5d:38:56:b0:7e:e8:ee:33:45:
9c:f5:e6:47:52:ff:60:d9:0d:1b:bf:05:aa:2f:ee:a8:0a:58:
b9:98:2b:e2:dd:b6:99:8f:87:38:bb:29:c6:71:3e:f6:a4:bc:
67:7e:63:b3:cf:d4:76:55:f7:a8:3a:b0:58:2a:bd:01:a4:e7:
c8:be:b1:ee:e1:a4:02:16:f1:3c:39:35:b1:15:6c:4b:06:ec:
66:ba:75:2a:b4:fe:08:1f:77:49:1e:21:06:75:d4:46:72:34:
93:18:6d:c5:3a:fd:bd:68:bb:f8:78:7b:2b:35:b5:94:95:10:
eb:8f:8e:d7:39:13:4d:ed:d1:47:a7:9b:b5:04:fa:e8:72:54:
87:1d:1c:dd:45:1a:ca:f7:f0:43:ea:a9:87:8a:0c:37:88:d4:
dd:83:cd:fa:7f:fb:98:30:25:14:47:37:ec:62:a8:57:94:06:
b0:22:e4:ef:fa:f6:24:ba:f1:a9:fe:b3:36:0c:80:fc:74:ca:
a2:78:b0:2d:94:24:d8:18:3a:cc:e1:9c:d6:c6:e8:ac:7a:f0:
0f:93:e3:42:fb:d6:e2:f8:93:99:79:ae:1f:88:e0:18:54:75:
ed:a8:7c:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net