Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/LgIPOaS3n2sqiXRF04UEQLyEYsM.roa
File: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (raw, json)
Hash identifier: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=
Subject key identifier: 2E:02:0F:39:A4:B7:9F:6B:2A:89:74:45:D3:85:04:40:BC:84:62:C3
Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial: 0194258F2A186D7459574752FD067BB0428D
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/LgIPOaS3n2sqiXRF04UEQLyEYsM.roa
Signing time: Thu 02 Jan 2025 05:48:46 +0000
ROA not before: Thu 02 Jan 2025 05:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204955
IP address blocks: 185.234.192.0/22 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2a:18:6d:74:59:57:47:52:fd:06:7b:b0:42:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e020f39a4b79f6b2a897445d3850440bc8462c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:6d:9d:a3:8b:d2:84:ff:76:52:28:ab:36:
9c:13:f6:dc:20:46:9e:50:a7:51:80:06:1e:e2:27:
07:ea:b6:1c:93:ee:00:8c:83:90:d4:fc:33:48:a8:
1e:87:07:2d:56:14:08:1b:2f:62:2e:49:56:e7:47:
dc:05:70:7b:d5:32:c4:81:c0:ce:e8:cb:1e:e3:bd:
ab:93:a8:d7:f4:ae:db:22:02:ed:b6:22:6f:67:31:
3d:c1:f4:75:dc:d9:79:d3:a3:62:97:61:b9:20:85:
5c:cb:1d:5f:98:27:a8:b8:df:1f:ba:51:71:62:f2:
6d:95:d4:82:ce:f0:54:a3:13:7c:b9:e6:66:49:b8:
4c:50:3d:1c:7d:bf:e4:7f:e7:69:43:0d:25:61:a1:
c0:86:4d:d3:05:15:45:13:d4:1c:30:c1:ea:10:21:
b9:5c:71:34:1e:30:78:ff:3b:ef:60:7a:b7:38:2b:
c8:7c:12:16:f3:1c:2f:55:9e:eb:ba:c0:65:85:bc:
5f:d4:13:cf:56:6e:b1:e7:ff:bc:67:29:82:d6:7d:
70:5a:cf:2d:ba:6b:e3:54:2f:15:8a:23:93:9f:74:
fd:b3:39:05:73:ff:1a:dd:7a:0d:84:ce:a1:ba:cc:
99:c0:86:6e:9c:33:3c:bd:ac:17:0f:95:39:7d:f1:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:02:0F:39:A4:B7:9F:6B:2A:89:74:45:D3:85:04:40:BC:84:62:C3
X509v3 Authority Key Identifier:
keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/LgIPOaS3n2sqiXRF04UEQLyEYsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:a3:cc:b2:51:9c:a5:ee:da:4f:92:cb:40:17:9b:30:9e:31:
ec:7d:e8:49:51:f9:58:7e:dc:47:b2:93:42:3d:c1:aa:c9:a0:
7d:01:71:1d:85:6c:54:32:5e:90:50:8f:de:80:08:6e:e2:15:
db:18:93:8f:e7:32:1d:4f:0c:54:46:0f:6b:44:98:61:8d:ad:
bd:22:7a:8b:e8:e8:4e:57:f2:a1:1e:a5:ff:aa:f5:7e:fb:cc:
07:e1:7b:b5:23:5b:99:1a:39:8b:8e:b5:f3:9b:03:26:0b:a1:
3f:23:fe:92:d5:e1:83:cf:f4:33:d1:d8:69:94:b6:67:f3:00:
4b:b3:c5:9e:49:dc:1c:5e:98:6e:3a:d4:00:e9:98:ec:bb:bb:
58:f2:ae:bc:48:6e:73:c0:7a:5a:be:5d:38:dc:21:42:4f:26:
ef:b3:97:91:91:65:7a:9a:78:0e:0c:ea:36:c4:04:60:36:e9:
a2:c4:9c:4c:b0:3b:09:47:9d:62:31:e3:c4:67:d9:91:e2:37:
ca:c9:6b:34:e8:bf:62:fe:cc:e1:71:3a:8b:55:23:ce:83:0b:
47:f4:6b:10:1e:4d:ae:dd:66:5b:da:e6:f5:68:5b:15:fe:75:
51:3a:d7:8e:0b:ac:7b:23:bf:23:32:05:a7:ba:b7:ad:c6:02:
b4:ae:bb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net