Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/LYnvVYBNfO02NGLb8OqwSQvvmss.roa
File: LYnvVYBNfO02NGLb8OqwSQvvmss.roa (raw, json)
Hash identifier: 1MQQ4c4toBssZ0IWA56QMnp9/TwVfcL6IZ4tyLL1axo=
Subject key identifier: 2D:89:EF:55:80:4D:7C:ED:36:34:62:DB:F0:EA:B0:49:0B:EF:9A:CB
Certificate issuer: /CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Certificate serial: 018CC3B74293BA96779333AD2DDDBA5F8727
Authority key identifier: 5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/LYnvVYBNfO02NGLb8OqwSQvvmss.roa
Signing time: Mon 01 Jan 2024 06:30:16 +0000
ROA not before: Mon 01 Jan 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205053
IP address blocks: 185.226.64.0/24 maxlen: 24
185.226.64.0/22 maxlen: 22
185.226.66.0/24 maxlen: 24
185.226.65.0/24 maxlen: 24
185.226.67.0/24 maxlen: 24
2a0c:5e00::/64 maxlen: 64
2a0c:5e00::/32 maxlen: 32
2a0c:5e00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:42:93:ba:96:77:93:33:ad:2d:dd:ba:5f:87:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Validity
Not Before: Jan 1 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d89ef55804d7ced363462dbf0eab0490bef9acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:d4:70:dd:c7:87:29:f7:11:5c:a4:c9:51:
cd:b6:92:5e:5d:28:75:30:15:f3:a3:43:61:3a:22:
45:07:35:5a:91:e5:f6:3f:3c:78:42:a4:0d:df:a0:
3f:bb:22:8a:5c:58:71:f5:8d:4b:56:9e:4f:55:91:
98:a4:4c:12:04:39:45:fa:ea:13:0e:ea:1c:b0:05:
23:4c:b2:55:e8:02:35:03:93:a8:35:88:7c:5c:32:
b6:02:a5:b0:d6:4d:e7:78:fa:8b:45:e8:e1:15:67:
79:c0:55:3c:b0:4d:09:c8:61:ae:4a:4a:da:96:70:
0c:e6:c3:66:2c:74:ab:d2:5c:03:0a:b5:08:5c:04:
1c:e6:ea:1d:6a:13:f8:8e:dc:5b:fc:4a:01:80:3e:
0d:12:17:ca:60:36:d6:93:a8:a5:c0:5f:d6:31:88:
a2:8c:60:62:a6:80:32:43:ca:ad:e0:ea:b1:7c:d2:
6d:ac:86:11:99:6e:76:66:5f:4f:02:bb:0f:06:72:
7c:ab:54:83:b2:43:08:ce:9c:42:a0:7d:56:20:a4:
10:77:8b:32:49:ae:b0:fb:08:3b:02:88:51:54:d0:
29:dd:94:86:32:ed:44:9d:6f:78:8e:e2:55:bf:b3:
2a:0f:e7:27:6a:cb:89:ba:81:3e:cb:44:9c:bd:23:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:EF:55:80:4D:7C:ED:36:34:62:DB:F0:EA:B0:49:0B:EF:9A:CB
X509v3 Authority Key Identifier:
keyid:5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/LYnvVYBNfO02NGLb8OqwSQvvmss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/WvK_GR_9YrnydHUAnI-z4KFKIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.64.0/22
IPv6:
2a0c:5e00::/32
Signature Algorithm: sha256WithRSAEncryption
25:12:3b:b0:78:11:27:8a:f8:50:ad:c0:48:2b:b0:8c:9c:f7:
3b:ce:67:e2:48:aa:c4:99:42:5e:ea:9b:b9:f1:dc:4c:4d:b8:
9c:39:f8:c6:8c:a7:e4:5a:44:04:5e:69:a2:66:8c:9d:55:76:
19:d8:82:e9:07:65:fb:fc:b0:25:3a:ff:b9:82:63:95:ab:8c:
ad:17:1c:a1:61:1e:f7:7a:36:36:ba:1e:db:24:d4:55:a2:70:
c1:b1:c3:e6:c7:65:4a:62:fc:9b:95:81:9c:d4:6f:5c:a4:ee:
72:4a:b3:2e:41:64:89:0f:18:1c:85:8a:18:de:7b:05:a4:7f:
71:25:c2:8b:94:c2:67:a9:17:25:88:59:43:0e:84:38:57:67:
e3:4a:33:b3:c5:ea:2d:47:14:03:1d:8a:20:c1:88:7a:d1:d1:
94:88:77:4f:77:65:ac:c4:7f:db:72:99:85:42:15:70:01:fa:
58:ea:d9:49:0d:fb:7b:cd:7a:65:6f:b2:db:27:e4:3f:08:cf:
17:1e:ca:7c:f4:0c:a4:6f:4c:e5:f5:a6:65:6c:e8:40:39:d8:
53:3f:bf:96:8a:cb:c1:0b:56:d4:1f:d0:95:28:fe:d8:24:fa:
9b:f2:4e:a2:5a:21:a3:ec:6e:80:26:f1:a0:64:2a:f7:28:b1:
23:a3:72:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 12:41:59 2024 by rpki-client on console.sobornost.net