Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/lGuoxPEC-ZxNvepE_9KweYRG1rA.roa
File: lGuoxPEC-ZxNvepE_9KweYRG1rA.roa (raw, json)
Hash identifier: ddFvRAgGNbgqtawi7X97di7STYJ32kUEwzdijgE2enE=
Subject key identifier: 94:6B:A8:C4:F1:02:F9:9C:4D:BD:EA:44:FF:D2:B0:79:84:46:D6:B0
Certificate issuer: /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial: 01955B0F3B8AC0230B0B2DAC8CDE092E8CC1
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/lGuoxPEC-ZxNvepE_9KweYRG1rA.roa
Signing time: Mon 03 Mar 2025 08:11:19 +0000
ROA not before: Mon 03 Mar 2025 08:11:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21096
IP address blocks: 176.103.114.0/23 maxlen: 23
193.29.204.0/24 maxlen: 24
193.109.8.0/22 maxlen: 22
194.42.202.0/24 maxlen: 24
194.42.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:0f:3b:8a:c0:23:0b:0b:2d:ac:8c:de:09:2e:8c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Validity
Not Before: Mar 3 08:11:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=946ba8c4f102f99c4dbdea44ffd2b0798446d6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:fb:42:ef:6a:a8:0d:e7:94:48:af:fc:71:
a0:47:22:23:7b:16:d7:99:9b:d3:99:62:cd:99:7f:
21:21:db:77:85:93:26:66:ad:e0:0e:1c:d2:4b:f2:
cf:ac:58:88:57:9c:88:45:74:f0:51:05:b4:07:bd:
a9:a1:f7:33:f9:73:35:eb:de:ae:e0:d4:dc:a6:07:
ec:a7:2c:72:ea:03:71:62:c0:79:36:f6:83:84:b3:
8c:49:5e:7e:5b:61:79:65:4d:16:c7:5f:58:95:4b:
d5:4c:2c:c6:88:d1:9e:dd:05:b7:5f:fb:76:c4:2d:
b2:0a:fd:5d:f1:bb:68:92:8a:fe:f6:0a:02:e0:85:
eb:8a:ef:26:ca:fd:b8:f5:ba:1a:5b:d5:60:a4:ad:
91:04:bd:c5:84:04:fd:aa:14:fa:bb:d8:4b:b5:b1:
bf:e8:41:ea:54:7f:1e:07:64:1f:9b:85:d8:91:2f:
06:81:29:ad:67:30:84:13:c4:ee:e9:10:15:10:2e:
58:b3:18:a6:56:00:a4:d8:15:55:15:b1:02:e5:71:
a6:2f:d6:24:09:45:e8:14:7f:24:7d:13:7a:3f:e2:
29:30:03:19:55:3f:64:fc:b1:9e:22:52:12:55:a6:
cd:33:e3:57:bd:55:c1:ff:39:9a:2a:18:f0:3f:e2:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6B:A8:C4:F1:02:F9:9C:4D:BD:EA:44:FF:D2:B0:79:84:46:D6:B0
X509v3 Authority Key Identifier:
keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/lGuoxPEC-ZxNvepE_9KweYRG1rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.114.0/23
193.29.204.0/24
193.109.8.0/22
194.42.202.0/23
Signature Algorithm: sha256WithRSAEncryption
03:e6:2a:cc:0e:ff:9b:fd:2c:c9:73:f2:66:40:0d:4f:0b:a5:
d1:c0:f8:0e:39:5d:0a:12:ac:a0:95:36:09:87:15:82:c2:91:
3a:64:36:bf:5e:be:c7:ee:61:a4:86:26:e4:e8:5e:83:8d:66:
b6:3c:0e:28:a9:8a:1e:d8:da:b9:8f:40:17:60:e1:14:50:36:
43:f7:bf:e0:0a:27:f9:13:31:c6:d0:d2:d3:0f:a7:5d:1e:2b:
fc:4d:31:8f:6d:8a:dc:87:70:5e:75:48:3e:3d:b4:cf:44:dd:
8e:21:7a:57:62:4f:29:83:fa:f5:1c:a3:c0:39:ac:06:8a:d7:
0f:3e:2f:ab:b9:88:e1:6f:0f:72:68:3d:a7:69:cd:b8:ad:f1:
6a:3b:24:88:0b:67:da:00:0c:88:f1:14:2c:c7:f8:09:8f:21:
7f:2e:12:fc:81:3b:c3:7d:6b:8a:98:a6:80:cf:ee:fe:07:04:
08:ff:af:06:f2:9b:78:85:5f:63:a1:3a:c8:a2:79:47:22:b5:
f3:15:05:ed:2f:4c:c8:b6:1b:27:c8:46:b7:81:3f:75:70:8a:
2b:de:54:67:f6:1c:c0:f0:75:4f:a2:c9:26:83:1a:99:35:60:
96:43:74:a6:7b:f6:5d:bc:b8:1e:3a:79:e5:fd:72:28:0a:62:
6d:c1:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net