Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/LXkrydrP2WBiBEFWAIdNj01paLw.roa
File: LXkrydrP2WBiBEFWAIdNj01paLw.roa (raw, json)
Hash identifier: A7xR6Xut6jZPl3i0QT2oOBJZ0DwrbutrsQQmaCb64dU=
Subject key identifier: 2D:79:2B:C9:DA:CF:D9:60:62:04:41:56:00:87:4D:8F:4D:69:68:BC
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 0191B6F20FA73B4FF17DA5CDDDF639EEF9D6
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/LXkrydrP2WBiBEFWAIdNj01paLw.roa
Signing time: Tue 03 Sep 2024 08:13:22 +0000
ROA not before: Tue 03 Sep 2024 08:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8491
IP address blocks: 81.95.32.0/20 maxlen: 20
81.95.42.0/24 maxlen: 24
81.95.46.0/24 maxlen: 24
82.194.224.0/19 maxlen: 19
82.194.232.0/24 maxlen: 24
82.194.237.0/24 maxlen: 24
87.238.96.0/21 maxlen: 21
87.238.101.0/24 maxlen: 24
89.188.160.0/19 maxlen: 19
2a03:8640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:f2:0f:a7:3b:4f:f1:7d:a5:cd:dd:f6:39:ee:f9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Sep 3 08:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d792bc9dacfd9606204415600874d8f4d6968bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a0:61:1a:29:99:ce:aa:3b:c0:d5:de:32:7c:
93:f7:42:07:3d:04:6e:9e:f7:e3:ee:9a:39:43:36:
4f:75:cf:5e:fc:34:12:7d:3f:ed:c3:8d:a5:d7:26:
36:d8:bb:6c:5c:d9:c2:9a:a6:03:b5:35:fa:d7:8e:
86:d7:b9:6a:89:c2:07:78:3a:95:d6:6f:01:37:dd:
f3:ff:f6:37:a1:d7:06:01:0d:57:2f:e9:e1:ed:fd:
ce:ee:7a:53:3c:d1:21:83:e4:24:80:b0:39:61:86:
8b:14:43:e7:79:6a:99:27:b1:73:67:52:ca:39:fd:
98:8c:ef:51:35:d5:51:32:d1:bc:ad:64:8c:12:4b:
d2:76:8d:2f:28:fb:4c:e8:ff:ed:e5:89:34:88:92:
58:ce:09:6c:a0:46:cb:25:28:98:dd:45:86:5e:87:
6c:f1:69:40:0c:f1:6c:cb:f0:f8:17:44:4c:54:0e:
21:80:04:0e:8b:4d:54:82:95:23:0d:19:a4:48:7d:
dd:d2:14:00:14:be:b7:47:41:23:33:fc:bf:15:77:
c2:78:d7:11:03:06:fa:02:a0:da:c7:b2:00:06:96:
01:62:4d:08:e8:bf:0f:ef:54:d7:93:2b:8c:51:a6:
5c:2a:9e:86:44:3e:50:56:4d:d3:bb:c3:1c:87:54:
02:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:79:2B:C9:DA:CF:D9:60:62:04:41:56:00:87:4D:8F:4D:69:68:BC
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/LXkrydrP2WBiBEFWAIdNj01paLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.32.0/20
82.194.224.0/19
87.238.96.0/21
89.188.160.0/19
IPv6:
2a03:8640::/32
Signature Algorithm: sha256WithRSAEncryption
2a:c6:73:db:33:46:f9:f3:ca:2c:6d:8a:7d:c0:a4:b6:49:e1:
a0:34:dc:d9:5d:6f:a1:97:d1:b6:8d:69:93:cf:f9:83:af:63:
5b:f2:8a:7b:ac:a0:56:60:fa:fd:52:85:44:73:11:c8:54:ec:
d0:33:d1:97:d7:a7:d6:ab:48:b4:64:f5:76:90:8a:8d:27:98:
e0:bb:c3:7b:9a:bc:19:dd:75:23:69:f0:08:d4:8d:5a:36:6d:
d7:45:89:cc:79:05:94:55:45:22:9b:21:ad:da:4b:0b:36:65:
ef:16:7c:00:a8:93:57:8b:2f:fc:85:61:91:67:e0:80:cc:7c:
f1:08:1f:18:35:05:b5:87:2d:02:79:78:f1:3d:57:82:6c:db:
a5:78:0f:05:f2:e1:49:0f:1a:f9:7d:1e:af:7c:6e:6f:3c:16:
96:f9:4d:98:0f:81:50:78:4f:91:f5:e4:46:f8:9f:2b:01:df:
59:88:eb:65:19:0b:ac:6d:6d:88:45:b9:60:b6:d0:65:1b:07:
c2:0d:9a:50:4a:32:39:17:c3:f4:b4:f8:e4:93:64:ad:1e:16:
2d:e1:da:36:d4:8e:2e:62:1a:e0:5e:c2:d8:73:f4:09:d3:9f:
4c:8f:9d:97:fc:5e:ab:19:8e:a9:f3:31:89:c1:51:7c:e9:92:
c0:7c:c9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:49 2024 by rpki-client on console.sobornost.net