Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/lqN2kHaa2YU0p43vKZiPstdSnxM.roa
File: lqN2kHaa2YU0p43vKZiPstdSnxM.roa (raw, json)
Hash identifier: Gx1z1Om50lkDi5/kQhfabmyFqSqSLPT2tdSeMwnz5LU=
Subject key identifier: 96:A3:76:90:76:9A:D9:85:34:A7:8D:EF:29:98:8F:B2:D7:52:9F:13
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 0191034D045B937468013E23287F28853168
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/lqN2kHaa2YU0p43vKZiPstdSnxM.roa
Signing time: Tue 30 Jul 2024 11:01:04 +0000
ROA not before: Tue 30 Jul 2024 11:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41997
IP address blocks: 109.237.112.0/20 maxlen: 20
185.55.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:4d:04:5b:93:74:68:01:3e:23:28:7f:28:85:31:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Jul 30 11:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96a37690769ad98534a78def29988fb2d7529f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:be:b1:e2:58:d4:b8:44:93:59:c2:4e:e5:
63:22:3a:b0:9d:bc:a2:9d:af:55:60:02:f4:cf:00:
7d:95:67:7c:20:80:36:9a:e3:19:d7:1c:7a:16:30:
c1:b3:bf:d4:a6:6b:8b:59:32:ca:46:31:5a:23:1c:
97:d0:53:df:86:75:1b:05:e8:ed:aa:f5:a0:68:58:
2e:08:e2:ce:fe:cb:27:9f:3f:77:59:ed:3d:56:27:
f3:5b:a7:93:3d:ad:32:da:b3:7f:a0:cd:47:66:79:
d9:30:fc:22:0f:37:0e:d9:bc:a5:8c:b0:6f:77:43:
fd:11:9c:ca:b7:d5:49:77:18:e8:21:ca:82:c4:a0:
67:05:8e:3c:03:66:9f:ee:25:68:33:75:82:f9:fb:
94:82:2e:31:9b:63:28:8c:0c:0e:c1:d5:5c:bf:85:
e9:39:0e:41:47:8f:be:ec:bc:fc:59:77:f8:84:e8:
d0:bb:5b:77:c8:15:77:0a:08:74:6f:62:0e:85:8c:
6b:14:f4:c3:af:cc:b5:4d:aa:1a:72:3d:4c:c3:eb:
f1:bf:e9:49:8d:60:dc:a4:bf:cb:c7:1e:72:22:f3:
ed:8f:0c:1c:9e:6f:08:68:5a:d2:1b:35:03:58:55:
6c:23:4b:38:4e:b8:cd:e7:34:e3:4c:2b:2a:03:62:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A3:76:90:76:9A:D9:85:34:A7:8D:EF:29:98:8F:B2:D7:52:9F:13
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/lqN2kHaa2YU0p43vKZiPstdSnxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.112.0/20
185.55.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:d0:c1:96:3e:79:99:a2:b1:b8:7f:0f:9d:48:2e:d2:5f:74:
51:0a:df:12:e9:eb:43:7f:61:a5:3e:97:36:7c:9c:25:5f:70:
69:2e:d0:e3:96:21:4e:13:90:69:10:c2:eb:4f:8d:83:4a:cf:
32:79:51:47:2e:89:2a:1e:b0:62:64:a3:8a:6d:1d:8e:f6:13:
29:f6:65:6a:93:bc:94:36:09:a7:a1:f4:34:ab:0d:e4:82:87:
50:e0:a8:c1:7e:75:72:94:50:c6:01:61:01:07:70:58:be:6c:
ba:af:d6:5f:a2:be:ab:95:68:9a:db:48:1e:64:e3:be:3c:1b:
19:24:56:df:c0:e8:bc:82:bd:10:e9:d6:87:94:32:18:c9:56:
c0:46:4b:0e:c0:3b:b4:a6:b1:3f:33:6d:b9:98:b8:6a:e0:9d:
22:12:90:95:3b:11:9e:bb:45:af:8a:21:99:c4:e5:79:e9:03:
24:e0:a7:72:61:28:e3:77:11:49:cf:a0:11:dd:30:f1:10:da:
71:3e:a3:72:97:e1:06:e3:cc:cc:54:ee:cc:0f:73:df:18:10:
fc:ac:a9:0d:9b:17:20:56:b1:5d:8f:30:bb:97:d8:4f:bf:35:
94:a5:2a:c2:46:b0:45:cf:18:81:25:96:61:89:15:79:28:4d:
7b:ca:bd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 04:11:31 2024 by rpki-client on console.sobornost.net