Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LUxm6b8PHeyv43lPzuZsW8QuLi4.roa
File: LUxm6b8PHeyv43lPzuZsW8QuLi4.roa (raw, json)
Hash identifier: KJBhTSoipmUQFFNwtv9/aNhJTX9KhK3QJ2Ia94HqXys=
Subject key identifier: 2D:4C:66:E9:BF:0F:1D:EC:AF:E3:79:4F:CE:E6:6C:5B:C4:2E:2E:2E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0196245879D822912080479C1929F0E9B7FB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LUxm6b8PHeyv43lPzuZsW8QuLi4.roa
Signing time: Fri 11 Apr 2025 10:15:00 +0000
ROA not before: Fri 11 Apr 2025 10:15:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 185.199.54.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:58:79:d8:22:91:20:80:47:9c:19:29:f0:e9:b7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 11 10:15:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d4c66e9bf0f1decafe3794fcee66c5bc42e2e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:01:06:2b:49:1f:c1:51:62:c8:e9:a8:8b:
03:2e:c8:10:3e:c4:92:a9:3b:be:36:d0:1f:23:ac:
ea:ba:7b:03:2b:32:29:22:c6:04:0d:76:30:70:aa:
9d:62:c2:b4:56:63:e5:c4:50:18:5f:77:d1:16:90:
9b:cd:9c:f0:9d:54:a9:44:a6:6a:91:98:7f:4a:3d:
cd:04:83:5a:c8:46:1f:a4:b4:b5:75:54:85:a8:4d:
c7:a1:77:52:f3:3f:16:5f:43:5d:a5:bd:78:29:d7:
45:c1:bc:18:63:23:6b:5b:69:75:10:7a:e6:b9:ba:
72:ab:d1:37:f8:e5:a2:b5:58:dc:b3:af:4b:d4:13:
a5:68:6b:9f:1f:5b:19:55:61:7a:79:ea:62:20:f5:
dd:3f:c4:3a:54:cb:06:eb:be:ea:4e:32:59:4b:a2:
8c:0b:94:7f:78:97:3a:4e:86:5f:44:72:94:e2:af:
f8:66:d7:17:d9:cc:9d:e2:5e:a5:80:e2:43:48:bf:
c0:49:47:86:58:16:e9:13:e0:60:a3:2f:c7:e4:25:
8c:bf:a0:d5:ba:c5:6b:91:66:ba:56:1f:32:e7:d3:
53:de:63:3d:d4:3e:d5:c9:ae:6f:aa:b7:a4:05:13:
ef:7a:46:9e:7c:71:54:00:12:01:5b:0a:a9:4b:28:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4C:66:E9:BF:0F:1D:EC:AF:E3:79:4F:CE:E6:6C:5B:C4:2E:2E:2E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LUxm6b8PHeyv43lPzuZsW8QuLi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.54.0/24
194.76.172.0/24
Signature Algorithm: sha256WithRSAEncryption
81:53:4b:1f:ea:4c:b7:57:9d:82:07:67:af:b8:65:3b:eb:c7:
c2:45:82:8f:dd:12:0f:c2:99:b2:f8:c9:84:73:4b:1c:bc:66:
6e:81:f3:37:56:e2:33:ac:18:84:60:17:7f:56:e1:3c:fb:89:
cb:96:46:19:32:16:ed:fe:27:b8:43:1b:dd:d6:48:b8:45:78:
21:75:71:34:4d:f7:2b:b3:42:b0:f0:bf:55:23:83:4d:9e:24:
e6:5d:f9:85:93:cc:70:8a:b9:aa:35:9f:17:16:94:bf:62:7a:
89:0f:56:1b:70:2d:35:48:c2:95:4e:d4:ee:6e:77:5d:1f:b4:
dc:a9:80:7d:01:9d:eb:08:57:93:0b:ca:23:bb:00:43:2f:e1:
0d:05:85:a2:18:b4:76:7e:5d:bb:d7:d9:00:fb:87:08:9f:e8:
0a:b7:64:ca:fb:9f:4b:94:2e:d7:4c:32:b9:d4:9a:d1:77:68:
0e:7e:87:2f:bb:ca:68:2e:33:51:b0:32:ee:30:1e:ac:c4:51:
8d:34:ca:3e:bd:5a:f2:eb:d4:2a:09:f1:20:69:2e:21:f3:82:
d5:96:99:92:7f:50:80:f3:d0:59:ac:4b:80:d7:ac:df:2e:6a:
80:26:6a:6f:58:53:a1:29:c9:6a:0c:3a:3d:02:63:cc:2a:d0:
ed:d4:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net