Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa
File: Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa (raw, json)
Hash identifier: pZ1a8TMxYqDEEa657nYARi2g7u3tXGj01SXvh3eUl1s=
Subject key identifier: 2F:08:9C:D2:8D:A0:C3:79:3C:DB:0A:5F:4A:43:DA:FB:05:20:E4:0C
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 0194214469AC2F29D8F42D6E2C08BD9849A4
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49305
IP address blocks: 62.204.50.0/24 maxlen: 24
94.247.136.0/24 maxlen: 24
178.255.217.0/24 maxlen: 24
185.228.251.0/24 maxlen: 24
2a0e:3ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:69:ac:2f:29:d8:f4:2d:6e:2c:08:bd:98:49:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f089cd28da0c3793cdb0a5f4a43dafb0520e40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:44:18:be:fa:e7:8b:6f:5d:30:4b:8d:02:
b1:2d:09:f4:19:14:3e:41:28:d2:0f:23:36:19:de:
f9:b7:f2:6f:f7:2f:51:6a:0e:ee:24:87:07:2e:a5:
5b:c0:1a:55:ec:12:cd:c7:5e:b4:65:b5:5a:d3:17:
d6:72:cd:dd:13:e0:9b:09:11:6b:76:22:b9:f6:6a:
c1:d3:80:15:54:13:85:0a:d9:66:ad:da:d2:af:b5:
2b:ac:11:6e:c9:64:71:d8:37:1e:09:ca:a4:91:72:
b4:ad:30:df:0c:f9:cb:c2:7e:d4:f8:05:a3:a1:6f:
51:e6:73:a3:33:57:75:57:60:bc:03:cb:85:c9:ec:
a6:80:cf:3e:17:44:6a:e2:0f:81:a4:6e:9a:40:93:
0a:bf:8f:4b:70:7c:6b:65:57:d3:3c:69:d0:ef:0e:
03:3e:53:7b:75:2e:ed:61:bc:4c:cd:29:34:4b:62:
a3:4b:8e:24:e1:64:f4:2b:68:34:c7:b8:3e:c7:b5:
fd:56:8d:f6:78:79:6e:90:3f:e6:d2:0d:ee:2d:e8:
96:d2:54:d1:28:aa:74:ca:6b:c0:a9:26:25:2c:4d:
85:cd:8b:15:e6:25:26:76:04:f4:df:0a:4e:51:c6:
1d:1f:fb:6b:92:36:4a:24:45:bd:02:c3:ec:06:7d:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:08:9C:D2:8D:A0:C3:79:3C:DB:0A:5F:4A:43:DA:FB:05:20:E4:0C
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.50.0/24
94.247.136.0/24
178.255.217.0/24
185.228.251.0/24
IPv6:
2a0e:3ec0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:55:39:bb:2e:71:0e:00:39:99:2d:00:f2:4d:a2:55:2b:df:
d2:03:73:c5:a2:55:0a:6e:56:b4:0b:17:02:02:36:54:d8:49:
94:da:56:ac:11:6a:39:40:9e:f1:4a:24:ca:8f:07:7e:b0:c7:
a1:44:5b:26:6f:d2:72:33:e4:c0:ea:e4:9f:90:5b:53:eb:8b:
44:8c:f4:fa:70:c8:ee:20:e3:29:d5:c0:b6:c6:b0:12:be:ba:
3f:a8:d1:5f:f8:03:76:f4:ef:82:ad:9b:16:af:db:7a:fd:13:
35:05:e3:a5:40:7a:03:7c:a5:7d:5b:b8:0c:32:7b:71:28:bb:
4f:39:5b:2e:20:f2:4a:be:08:2b:8e:29:bd:d1:46:c6:c1:f3:
5f:0f:01:cb:0c:34:e3:3b:f1:da:61:a1:c7:8c:59:cd:9f:2a:
9b:3d:e3:43:a8:5c:4c:12:26:56:a8:b0:d8:38:da:3e:1f:24:
e5:38:f9:5f:61:e2:14:c4:44:b8:43:da:d7:98:30:26:6d:8d:
0e:00:9e:0e:d0:46:d1:09:56:fa:30:7e:b7:3f:08:06:df:d0:
1b:44:c7:96:a3:53:09:6b:ae:19:cc:d8:fe:45:17:3c:b2:ff:
a8:fa:ac:ad:54:75:7d:46:9c:de:0b:73:4d:7f:6c:b8:05:a6:
cc:9f:3d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net