Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/luaqw9G-VvVeUOUerH8hYnJDYmk.roa
File: luaqw9G-VvVeUOUerH8hYnJDYmk.roa (raw, json)
Hash identifier: cGv6tVYRF/4yXJn3TxE1a8gXuaOG4Us7R7XWbyYOP1U=
Subject key identifier: 96:E6:AA:C3:D1:BE:56:F5:5E:50:E5:1E:AC:7F:21:62:72:43:62:69
Certificate issuer: /CN=70748873d832022864fac90065d51d8e27b43e5d
Certificate serial: 0194252206E71996E5CD957B783EF9C74686
Authority key identifier: 70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/luaqw9G-VvVeUOUerH8hYnJDYmk.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38952
IP address blocks: 185.17.116.0/22 maxlen: 22
194.79.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:06:e7:19:96:e5:cd:95:7b:78:3e:f9:c7:46:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70748873d832022864fac90065d51d8e27b43e5d
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96e6aac3d1be56f55e50e51eac7f216272436269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:90:16:46:54:6e:23:99:06:70:90:e3:4e:fb:
0b:2a:1b:02:f1:d3:0b:f1:2b:3c:a8:65:49:6f:9f:
5a:2d:d9:e3:c9:ce:6c:d8:7d:38:e7:d9:19:2e:2a:
bc:b7:72:15:0a:56:30:e5:79:da:70:97:2f:85:0d:
97:05:e3:ff:e1:3b:63:fe:b4:44:0c:a4:e7:dd:2f:
dd:9f:6b:4e:bf:6f:95:c6:67:84:c2:59:b2:24:fd:
e7:34:b4:b5:8c:44:48:34:dc:f7:60:4f:d0:43:6b:
a8:c1:d9:ce:90:c7:4d:fa:93:ef:ba:60:5d:48:be:
0f:eb:71:f1:25:29:05:61:3f:8e:f3:10:9e:aa:58:
40:d0:8f:c9:b7:85:eb:e5:9b:34:55:18:b9:e9:f8:
de:6a:5a:7a:c0:49:d4:5d:48:48:98:80:25:10:a0:
bd:3e:13:69:47:6d:ea:fc:35:e3:7b:41:0e:f8:a5:
ff:64:8e:e6:1d:c8:fc:cf:33:af:98:20:b3:02:ed:
38:fe:17:39:2c:b3:fa:35:a6:32:8c:7f:ca:5f:53:
21:a5:e6:29:af:0b:29:14:77:84:84:82:88:e9:9e:
67:79:5a:61:ed:9d:d2:6e:81:ee:74:45:e6:9e:f9:
05:3d:84:b9:51:0a:a5:e0:10:e6:2b:42:67:69:37:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E6:AA:C3:D1:BE:56:F5:5E:50:E5:1E:AC:7F:21:62:72:43:62:69
X509v3 Authority Key Identifier:
keyid:70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/luaqw9G-VvVeUOUerH8hYnJDYmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.116.0/22
194.79.52.0/22
Signature Algorithm: sha256WithRSAEncryption
86:0f:25:8b:77:18:3e:18:4d:bd:08:96:0f:b4:7e:20:5f:6f:
dd:67:b8:c0:60:91:98:59:3f:64:7a:e7:6f:c3:ad:b7:aa:5c:
ca:47:38:c8:6e:75:2d:09:b8:37:29:ab:e3:c7:4c:df:3d:90:
56:94:40:bd:0d:1d:1f:cb:67:e3:92:c7:b7:d4:b9:b5:39:84:
08:fb:15:85:4c:33:b9:d0:0f:80:f5:73:0e:64:04:c7:ec:1e:
d8:2c:e3:7a:21:fe:d7:dd:13:29:24:26:52:70:c8:04:f5:4e:
48:60:ab:a7:d5:8c:ac:01:e5:f3:e5:58:da:b0:9e:0a:93:b7:
c5:84:6b:d6:f6:b9:fc:5d:14:de:84:87:41:a5:29:f7:a9:b8:
92:b4:5e:f6:51:88:2c:6f:c1:84:7c:b0:3d:be:19:45:fb:bf:
d8:8b:af:16:1d:bd:5f:16:6b:84:ff:d2:2a:8c:8b:3e:14:3d:
e9:8a:53:ae:33:fe:f8:c5:20:50:4c:34:99:a2:77:9c:3f:af:
42:6d:cb:1b:db:60:22:b0:48:56:5c:d3:95:c1:9b:f0:56:ed:
27:f8:64:9b:d6:de:93:0a:40:c3:91:63:23:bb:a9:80:49:bd:
fb:d6:a3:6d:68:e7:ee:9c:14:17:32:7e:e0:73:02:d6:d8:aa:
09:52:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net