Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/LDi7-YcBIX6PiE9GqDealn7Aa0Y.roa
File: LDi7-YcBIX6PiE9GqDealn7Aa0Y.roa (raw, json)
Hash identifier: gddSbsT3n/86SQm5DxIUq4w6sE3hx8/1iMrJ57qL+AI=
Subject key identifier: 2C:38:BB:F9:87:01:21:7E:8F:88:4F:46:A8:37:9A:96:7E:C0:6B:46
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 01936C26EAA5808783ACD35301441244E118
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/LDi7-YcBIX6PiE9GqDealn7Aa0Y.roa
Signing time: Wed 27 Nov 2024 05:45:09 +0000
ROA not before: Wed 27 Nov 2024 05:45:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39013
IP address blocks: 151.237.66.0/24 maxlen: 24
151.237.80.0/22 maxlen: 22
151.237.80.0/23 maxlen: 23
151.237.82.0/23 maxlen: 23
151.237.88.0/23 maxlen: 23
151.237.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:26:ea:a5:80:87:83:ac:d3:53:01:44:12:44:e1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Nov 27 05:45:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c38bbf98701217e8f884f46a8379a967ec06b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:69:2f:b7:55:5a:d3:cf:33:4b:cd:86:d5:
3d:1b:0e:dc:43:30:b3:93:ff:c7:67:9d:31:21:0b:
c8:c9:22:7b:c1:aa:4d:fc:ac:a9:d3:b9:34:26:de:
d8:f8:88:5a:a6:2a:b8:87:ad:90:f8:39:9d:9d:3a:
ad:dd:67:58:bb:3a:27:75:a5:d1:8f:3c:1f:21:0c:
58:71:78:e6:b5:b1:96:59:b3:3f:05:08:42:e7:e9:
cf:c4:f5:00:b4:f0:6d:50:db:5a:9b:e9:2b:51:61:
44:44:ca:47:07:a8:fc:06:9c:5f:f8:71:87:64:80:
6c:2f:12:c2:61:39:90:b1:cf:7d:49:c6:ad:2f:be:
8b:6a:c0:09:d0:83:fd:3a:dc:23:15:5a:41:49:f0:
64:81:cb:a5:67:64:42:1e:90:60:a6:5c:ab:2b:73:
54:ea:21:91:87:0c:43:2b:c5:71:41:0a:dc:ef:07:
77:b9:d5:cf:65:17:31:89:e0:14:0b:ac:7a:2a:9f:
d6:dd:a0:5e:e8:77:ee:60:1c:2b:3e:3f:a3:82:e4:
a8:99:27:48:43:7e:9d:df:9f:14:f8:53:cb:2b:d1:
98:60:e0:e4:35:e6:cb:d0:08:a6:d5:f3:67:21:90:
1b:b3:8c:06:85:c0:63:f0:f3:9b:7e:5d:9c:fd:dc:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:38:BB:F9:87:01:21:7E:8F:88:4F:46:A8:37:9A:96:7E:C0:6B:46
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/LDi7-YcBIX6PiE9GqDealn7Aa0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.66.0/24
151.237.80.0/22
151.237.88.0-151.237.90.255
Signature Algorithm: sha256WithRSAEncryption
a7:ea:8d:38:da:e3:95:ae:2d:20:d8:18:9a:58:8b:25:a6:f7:
72:2c:3c:bd:34:b2:8c:bc:ec:ff:a3:5f:d6:86:1e:83:87:2d:
9c:87:02:7c:c2:b4:17:04:be:47:6c:04:6b:6e:e6:30:53:b3:
40:c4:96:4f:f6:bd:64:2c:3c:21:20:9c:79:fd:4d:65:97:3a:
3a:04:1c:9a:c3:58:98:a1:03:a8:bd:a2:23:56:08:1e:de:6f:
ef:82:4b:1e:35:ce:85:7f:c9:c0:4c:fb:91:eb:64:59:83:d5:
03:ad:fb:34:7f:e8:b9:d9:28:9d:c1:1a:cd:9b:ee:47:b5:c3:
0b:c7:1a:e2:37:49:d8:7d:78:b7:0e:a7:23:25:f2:25:5b:ff:
98:59:97:7b:27:dc:37:e4:31:ff:72:c3:26:0b:9e:1b:8d:6f:
4d:dd:ad:59:f4:63:98:15:28:1b:93:1d:89:8f:b8:9f:fb:6e:
a9:42:45:ce:9c:97:43:ff:ca:1c:dc:7b:5f:3a:08:53:48:02:
0b:58:70:85:b3:c7:58:43:35:7e:f0:3f:10:a9:04:9b:d7:d3:
cc:71:08:5c:97:64:77:82:f1:48:02:a0:d8:64:94:79:6b:7e:
48:68:93:1c:66:85:f1:bd:f8:5d:a1:af:69:95:fb:2d:a5:16:
ca:a0:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:40 2024 by rpki-client on console.sobornost.net