Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/lxUG3iSq6ZMEFoFi0ga-l3pT9Fc.roa
File: lxUG3iSq6ZMEFoFi0ga-l3pT9Fc.roa (raw, json)
Hash identifier: 4NBdhMV+/cZjXtZRrBMJSAVoKfkm9TBTEZhqp8Cxr98=
Subject key identifier: 97:15:06:DE:24:AA:E9:93:04:16:81:62:D2:06:BE:97:7A:53:F4:57
Certificate issuer: /CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Certificate serial: 018570CC13A5F2804F99C0688F757006F2F4
Authority key identifier: 68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/lxUG3iSq6ZMEFoFi0ga-l3pT9Fc.roa
Signing time: Mon 02 Jan 2023 04:45:00 +0000
ROA not before: Mon 02 Jan 2023 04:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197706
IP address blocks: 81.21.232.0/24 maxlen: 24
81.21.232.0/22 maxlen: 22
91.217.73.0/24 maxlen: 24
81.21.235.0/24 maxlen: 24
91.217.72.0/24 maxlen: 24
91.217.7.0/24 maxlen: 24
91.217.6.0/24 maxlen: 24
2a09:6ec0::/29 maxlen: 29
2a0e:3f07::/48 maxlen: 48
2a0d:27c0::/29 maxlen: 29
2a0e:3f00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:13:a5:f2:80:4f:99:c0:68:8f:75:70:06:f2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Validity
Not Before: Jan 2 04:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=971506de24aae99304168162d206be977a53f457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:b2:30:9a:25:85:e0:4a:d8:c8:ca:9b:e8:
53:0f:ab:95:27:0d:88:85:09:6e:25:e7:1e:8b:ed:
a3:d0:0d:92:27:d7:72:80:7f:54:b0:b9:45:00:37:
83:a1:63:6c:e3:b9:23:20:78:1e:cf:b7:92:41:45:
62:20:41:c3:3a:c4:ef:04:1d:76:79:31:51:67:cf:
d5:2f:ea:c2:59:9c:09:77:02:1a:ae:a8:cd:ae:89:
01:9c:66:dc:62:7f:f8:7b:2a:08:e2:6d:59:ae:65:
00:e7:41:0b:01:1b:fe:41:3e:f6:c7:4e:ff:d0:6f:
c5:e1:b7:e5:bc:09:bd:b0:a3:88:cc:63:13:3f:11:
c3:cc:6c:3b:f3:b6:04:d3:a0:49:57:61:87:63:37:
c1:17:0d:f6:ce:d5:45:e3:d9:ca:10:c8:17:3a:29:
cc:fb:11:17:cb:fb:ac:5f:d3:ac:0f:a2:eb:ef:a4:
4e:82:5d:c4:eb:c3:86:da:60:0e:6f:fc:a5:75:b9:
f3:55:cf:fe:83:f1:4b:03:86:20:d7:b4:3c:c5:9e:
a9:5b:5f:22:27:af:53:9c:1b:87:32:07:92:ee:38:
a1:ff:2e:61:6d:48:1c:57:97:7a:95:46:1e:fe:b8:
0f:66:a3:01:a5:7c:0a:f2:11:7d:a1:06:fb:1c:eb:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:06:DE:24:AA:E9:93:04:16:81:62:D2:06:BE:97:7A:53:F4:57
X509v3 Authority Key Identifier:
keyid:68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/lxUG3iSq6ZMEFoFi0ga-l3pT9Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/aDlfuPRSS4pvlFu_qTi49haUBS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.232.0/22
91.217.6.0/23
91.217.72.0/23
IPv6:
2a09:6ec0::/29
2a0d:27c0::/29
2a0e:3f00::/29
Signature Algorithm: sha256WithRSAEncryption
24:30:3a:c0:07:37:e9:9c:da:84:c4:77:61:2d:ae:52:90:2e:
3a:bf:67:32:4c:ad:4d:65:b6:ec:31:9c:24:b5:9b:c5:98:2b:
0b:e8:7b:9a:29:c5:7b:1e:8a:7c:99:41:84:06:de:90:a6:fb:
a2:60:80:67:db:c9:9c:60:f2:99:53:57:1f:20:6e:99:5c:1e:
64:ef:d5:14:37:50:46:54:e6:12:d7:1f:f4:46:5e:e7:dc:46:
99:27:4a:6e:10:65:b3:77:fc:a9:60:76:e2:65:96:3f:f6:0e:
16:0b:c9:1d:b7:88:b2:d0:cc:30:16:67:8d:61:e0:0c:45:2b:
d4:41:26:ef:f9:41:ae:7d:92:23:87:ce:c7:4b:91:bc:cb:25:
0e:7e:31:98:d7:c0:3e:d1:70:ac:2a:af:ff:61:07:a1:db:bb:
4f:c0:fb:02:ff:e2:4a:db:8e:fd:05:87:f3:d4:c4:de:5b:21:
08:8c:12:24:e7:e2:3d:c4:96:6b:04:74:1b:2d:a7:85:f0:31:
19:ea:21:90:ae:39:4b:3f:45:a4:d0:c4:f5:2a:e5:1d:af:fb:
93:82:ec:e2:ad:7d:c4:ad:04:9e:a5:66:85:0a:34:75:c7:18:
e8:89:3f:a4:a3:02:23:f0:73:79:a3:46:be:fe:67:7a:74:3c:
86:c6:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net