Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/LBfcizWSKlLS0AFemCzGH_wAzTA.roa
File: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (raw, json)
Hash identifier: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=
Subject key identifier: 2C:17:DC:8B:35:92:2A:52:D2:D0:01:5E:98:2C:C6:1F:FC:00:CD:30
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 019423691305142C77C61F9DDD732FACAAEB
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/LBfcizWSKlLS0AFemCzGH_wAzTA.roa
Signing time: Wed 01 Jan 2025 19:47:56 +0000
ROA not before: Wed 01 Jan 2025 19:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49264
IP address blocks: 185.161.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:13:05:14:2c:77:c6:1f:9d:dd:73:2f:ac:aa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Jan 1 19:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c17dc8b35922a52d2d0015e982cc61ffc00cd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:78:87:5c:a6:99:23:cb:a5:76:9f:39:20:3f:
6e:dc:7f:9a:e4:54:23:92:ee:10:8b:e3:86:7c:a1:
b8:82:fe:a0:05:03:24:35:11:a2:9c:c0:1b:7c:4b:
12:ea:c4:c6:90:08:5a:53:8b:1d:42:19:58:b6:44:
e3:23:8c:d5:e9:44:90:a5:af:e5:90:d5:a5:51:59:
fe:72:c2:f2:08:4a:33:00:56:75:ef:48:e6:f8:c2:
51:64:b2:2c:a7:d8:3f:4c:bf:dd:de:8a:16:08:9b:
f0:66:dc:28:74:79:93:a2:3e:41:4e:f0:f5:88:21:
2c:dd:ac:41:4c:f5:57:24:e2:6c:3d:28:99:b0:1f:
b8:0f:d9:6b:1c:47:ec:42:86:6b:dd:3b:34:33:ff:
fd:1d:55:fd:b6:49:e5:c8:09:43:4b:5c:a6:28:8e:
c2:6b:6a:a8:93:5a:0a:f6:67:c5:e6:4c:05:2c:0f:
93:ad:dd:65:2b:de:38:d6:61:35:1d:1b:36:ea:17:
51:3a:9b:50:d7:62:c8:d0:50:52:cd:50:c6:77:cc:
85:fb:65:f5:5b:a9:57:59:68:1f:e1:8e:5f:61:ab:
f5:5c:a2:cd:6b:57:0d:cc:71:89:08:be:c9:16:ad:
a6:fb:26:c0:c3:8d:6d:eb:5f:65:ac:d7:df:71:46:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:DC:8B:35:92:2A:52:D2:D0:01:5E:98:2C:C6:1F:FC:00:CD:30
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/LBfcizWSKlLS0AFemCzGH_wAzTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:48:0d:f7:a8:14:d0:da:f2:57:52:6f:3c:f9:58:f9:7a:78:
b0:a6:13:ae:29:b5:9f:5d:6c:22:e0:aa:b0:31:e0:93:2e:e2:
80:b3:b1:a2:27:28:c8:96:38:d7:a9:a6:98:cd:ab:e6:96:1a:
12:b1:c3:57:16:c8:87:f2:74:10:ed:d1:8a:ac:e3:6e:26:73:
b4:38:d9:c5:b7:10:3d:3d:84:bc:f0:86:dd:c1:df:90:26:63:
33:e7:90:5a:8b:be:8d:6e:c5:f3:fb:36:6c:6c:5e:c1:f8:c8:
7e:62:35:21:22:b4:ac:74:47:ec:3f:2a:5d:af:a6:40:a1:ae:
8a:fd:89:91:83:4b:15:26:2a:a9:f7:69:dd:c9:b9:4d:93:2e:
4f:31:c1:e9:12:f4:90:70:91:39:fb:dd:2f:c4:aa:23:b0:2a:
d3:02:26:77:a4:ea:57:bf:2b:58:63:ed:f6:2b:ae:bd:cb:01:
62:0d:f6:35:3a:4c:5a:05:c1:59:c5:fa:3d:c7:a8:71:1d:cf:
40:1d:cf:b5:2a:b1:a6:41:8c:b0:47:a1:24:d5:ca:60:3b:f4:
25:ed:8b:c5:56:5a:91:9d:67:83:bc:09:e4:6b:5f:ce:f3:55:
c8:09:be:a8:39:23:da:b7:22:4b:89:ec:b2:38:86:40:6e:fd:
f8:b8:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net