Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/LL00jLioRqxrzEIqGq4L9KSsOOw.roa
File: LL00jLioRqxrzEIqGq4L9KSsOOw.roa (raw, json)
Hash identifier: BfsIVu0pRykCIzcp4KvbmsAp93Jh+8gBar9uDU9FdZc=
Subject key identifier: 2C:BD:34:8C:B8:A8:46:AC:6B:CC:42:2A:1A:AE:0B:F4:A4:AC:38:EC
Certificate issuer: /CN=961140100393d2fbab2dc81c199b3506abe4e7d0
Certificate serial: 018573BA904ACF90787FF1C66B2058125070
Authority key identifier: 96:11:40:10:03:93:D2:FB:AB:2D:C8:1C:19:9B:35:06:AB:E4:E7:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhFAEAOT0vurLcgcGZs1Bqvk59A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/LL00jLioRqxrzEIqGq4L9KSsOOw.roa
Signing time: Mon 02 Jan 2023 18:24:44 +0000
ROA not before: Mon 02 Jan 2023 18:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29505
IP address blocks: 149.249.127.0/24 maxlen: 24
149.249.64.0/18 maxlen: 18
185.111.68.0/22 maxlen: 22
85.233.0.0/19 maxlen: 19
2a07:6c40:a1a0::/48 maxlen: 48
2a07:6c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:90:4a:cf:90:78:7f:f1:c6:6b:20:58:12:50:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961140100393d2fbab2dc81c199b3506abe4e7d0
Validity
Not Before: Jan 2 18:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cbd348cb8a846ac6bcc422a1aae0bf4a4ac38ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:b0:75:9a:36:24:31:4e:7f:1a:42:b7:b4:
48:ea:57:ab:85:a6:a7:65:22:38:12:34:b0:05:e0:
aa:94:2d:1b:63:8e:08:60:80:04:9f:43:15:43:d8:
16:40:77:13:f7:e9:d1:23:df:22:6a:ea:c2:33:9a:
04:94:1f:a4:0e:83:98:96:4d:d2:ed:bb:c8:76:4c:
29:23:80:85:38:7f:8e:63:6f:92:06:de:6f:42:47:
6c:81:04:ba:5e:0c:a8:0f:68:9d:f0:4c:e0:cd:e6:
e3:aa:32:d9:58:af:0f:3c:33:16:ff:ed:13:64:05:
2b:00:bd:2e:a3:54:54:89:2b:51:c1:2d:8b:65:b4:
68:3a:49:38:b0:80:ab:24:34:73:a8:4b:13:3e:22:
2e:c1:d0:81:12:48:ce:e4:4f:17:66:40:19:fd:11:
70:ea:30:65:d4:30:03:e1:c4:22:16:9c:bf:1e:bf:
3c:dc:3b:a1:ed:7f:76:79:a1:a0:32:a4:b3:8e:db:
50:75:6b:36:ad:86:99:94:86:c0:40:a1:8b:95:13:
a9:bc:26:c7:28:0d:32:6f:6b:0a:8c:e4:4b:08:b2:
e4:79:b2:e6:38:5a:24:26:99:9c:25:51:08:4e:4e:
61:39:d2:8c:b2:16:d7:a0:a0:19:bc:3a:e5:52:b1:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BD:34:8C:B8:A8:46:AC:6B:CC:42:2A:1A:AE:0B:F4:A4:AC:38:EC
X509v3 Authority Key Identifier:
keyid:96:11:40:10:03:93:D2:FB:AB:2D:C8:1C:19:9B:35:06:AB:E4:E7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhFAEAOT0vurLcgcGZs1Bqvk59A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/LL00jLioRqxrzEIqGq4L9KSsOOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/lhFAEAOT0vurLcgcGZs1Bqvk59A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.233.0.0/19
149.249.64.0/18
185.111.68.0/22
IPv6:
2a07:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
26:e4:aa:38:d2:c2:a8:4e:04:64:d3:40:42:15:43:4b:be:0d:
2c:23:9b:85:19:c7:6f:34:36:5c:f1:50:d1:83:c7:c8:6d:9b:
4b:ec:c7:6a:7d:eb:eb:25:4f:64:cc:7f:11:57:b8:92:2c:08:
30:1a:99:3c:c9:44:23:48:a5:06:46:aa:1f:4f:0b:d7:85:63:
01:73:24:86:97:30:90:63:04:d8:2d:13:4e:37:f4:9f:bd:00:
65:a5:38:a7:69:91:fb:80:62:bf:b1:fb:62:c6:24:3a:5b:ff:
c4:b6:ea:ab:74:13:4f:59:50:38:af:c0:5f:68:29:a6:55:5b:
9a:22:25:ef:50:c9:0e:4c:6b:8f:9f:06:8b:e2:48:e4:d5:5a:
63:ba:6d:e3:67:65:5b:78:c9:ae:50:02:05:3b:d1:66:92:c2:
e5:82:ed:9d:c3:d5:0f:06:46:09:6e:4b:f2:d8:9c:cb:d9:fd:
1c:ce:08:6d:86:83:2a:99:04:0c:ac:ff:9f:b4:25:49:55:01:
61:74:58:a4:9e:c7:1b:5a:9c:97:d2:01:62:48:c2:51:9d:3f:
54:9d:84:12:f8:de:a4:7a:5e:4d:76:64:56:be:63:80:fa:e7:
d6:b4:e3:c4:cf:0d:20:be:8e:a9:5a:78:0a:e3:5b:81:1f:b9:
00:51:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:29 2023 by rpki-client on console.sobornost.net