Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/LenxSXNvYUG0PNAIsxLHW6t8Gig.roa
File: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (raw, json)
Hash identifier: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=
Subject key identifier: 2D:E9:F1:49:73:6F:61:41:B4:3C:D0:08:B3:12:C7:5B:AB:7C:1A:28
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 019421B22E244C0E6AF1E405C52EFE29667B
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/LenxSXNvYUG0PNAIsxLHW6t8Gig.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42065
IP address blocks: 83.243.64.0/21 maxlen: 21
83.243.64.0/22 maxlen: 24
83.243.68.0/24 maxlen: 24
83.243.70.0/23 maxlen: 24
193.218.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2e:24:4c:0e:6a:f1:e4:05:c5:2e:fe:29:66:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2de9f149736f6141b43cd008b312c75bab7c1a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:3d:bc:88:8a:6e:e9:a1:96:82:0f:f2:3a:
fc:9b:88:af:2d:d8:71:b2:10:15:64:40:03:27:3d:
5e:e0:0a:c3:17:3a:f1:74:6e:47:83:06:5f:2e:a7:
09:39:96:a6:17:b8:70:2a:66:85:a9:12:55:bc:28:
97:e1:07:10:2f:04:dc:89:58:48:d1:99:d3:cb:35:
3e:05:b0:4c:46:de:d1:47:78:81:52:ac:89:19:48:
89:c7:4e:8b:21:b7:38:e7:02:e3:79:99:15:3f:13:
9b:45:37:8f:83:d2:49:3b:d2:a1:84:ff:a6:d5:2f:
5a:08:75:4e:56:d6:9c:fc:17:4a:92:96:19:80:2e:
ea:d9:3e:7f:58:06:d3:15:08:8c:a7:62:8c:30:a8:
21:d3:1a:6f:fe:dd:5a:50:bc:34:be:e3:13:52:b3:
d6:d4:0c:23:be:12:84:c6:8b:07:07:9f:8b:95:c4:
4d:3a:15:a4:06:e9:da:90:23:c8:dc:98:d9:75:6a:
a5:2b:f9:59:0f:3a:d5:1c:38:98:e0:67:e2:41:9b:
50:21:1b:df:0d:1b:6b:80:35:b3:27:6d:bd:3d:34:
0b:8f:ad:94:c1:65:16:0c:e7:55:e4:db:17:bb:1f:
f4:1f:bf:8c:6e:c0:bf:29:a0:30:77:8e:62:f7:10:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E9:F1:49:73:6F:61:41:B4:3C:D0:08:B3:12:C7:5B:AB:7C:1A:28
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/LenxSXNvYUG0PNAIsxLHW6t8Gig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.64.0/21
193.218.140.0/22
Signature Algorithm: sha256WithRSAEncryption
05:c9:31:5d:10:07:17:e4:40:fd:f0:ee:06:8f:8c:bd:4d:de:
66:9d:c8:21:6c:4b:e5:99:aa:ca:11:2d:dd:55:7a:24:a9:7e:
02:64:33:30:da:ed:c6:59:b7:1a:f2:45:b1:b3:c9:46:73:d3:
ac:d4:ed:41:b2:8b:16:52:8d:68:dc:70:79:0d:1c:f1:ae:be:
d9:46:fc:25:be:76:ac:26:03:b0:35:f8:87:e9:04:fc:8a:67:
18:3a:94:c2:6e:e4:3b:8a:fe:d5:4e:96:2a:92:27:3c:b8:bd:
1c:05:08:6a:be:f4:24:30:30:58:71:99:06:f7:62:60:64:1e:
1c:44:15:6c:9a:79:e8:35:cc:48:8f:42:eb:ea:84:f8:2f:e8:
97:cd:d6:d9:36:44:e0:6d:fc:ab:ba:63:1e:86:8f:9a:e2:b3:
cf:ee:54:10:14:44:b1:e5:d5:2d:75:23:f3:40:4c:88:66:8a:
d6:cb:e6:46:7a:7e:2f:c0:26:9e:d0:1f:b9:6b:4a:05:ce:9f:
f8:36:c6:b7:4e:e5:1e:13:2e:35:a0:fe:85:04:77:b1:55:99:
77:a1:30:1d:cf:05:ea:ca:06:f4:4a:b3:4a:a5:d7:01:80:24:
bf:53:75:51:2e:67:15:f8:2f:e8:29:f1:f0:b5:df:48:e2:c0:
a0:e0:07:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net