Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/LCgptrpzPe8uK1pJRAcymqWKltU.roa
File: LCgptrpzPe8uK1pJRAcymqWKltU.roa (raw, json)
Hash identifier: J7J4TZjbL7xndjAdEQrBoyK/+nFc7bJUeGgd3fhmiyU=
Subject key identifier: 2C:28:29:B6:BA:73:3D:EF:2E:2B:5A:49:44:07:32:9A:A5:8A:96:D5
Certificate issuer: /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial: 0193B01B0AED90B58E448C154E65A626659F
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/LCgptrpzPe8uK1pJRAcymqWKltU.roa
Signing time: Tue 10 Dec 2024 10:26:22 +0000
ROA not before: Tue 10 Dec 2024 10:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206474
IP address blocks: 185.237.128.0/24 maxlen: 24
185.237.129.0/24 maxlen: 24
185.237.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:1b:0a:ed:90:b5:8e:44:8c:15:4e:65:a6:26:65:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Validity
Not Before: Dec 10 10:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c2829b6ba733def2e2b5a494407329aa58a96d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:42:2c:fa:26:40:68:3a:46:ef:14:2d:de:
22:80:2d:d2:1c:ea:9b:e1:20:fb:3e:ba:ac:97:db:
5b:5c:47:55:3f:96:b7:d8:fd:c0:5b:42:99:f5:7e:
27:2d:42:2d:85:f7:fc:36:97:ee:3e:03:d8:1e:f7:
d7:c4:a2:d0:8f:71:76:fa:75:eb:7f:82:8b:7a:d4:
fe:59:59:d7:fe:af:88:70:3b:a0:9f:b6:62:08:06:
18:ea:cb:8d:9f:de:55:1c:58:59:05:7f:f8:cd:a4:
ef:5a:31:b6:7e:ce:44:3a:df:ae:14:7a:57:d4:29:
76:5c:fc:b9:45:27:43:df:0d:70:ca:f6:32:c5:94:
13:c0:14:9f:c0:b7:d1:d7:0a:7a:32:0e:4c:77:04:
3f:7d:5e:e8:bc:c3:ab:23:93:07:7c:dd:b0:4b:df:
04:50:19:c5:b5:25:53:11:4d:6a:a7:f1:e6:47:bb:
9a:66:98:4c:33:b6:d7:8f:61:74:76:08:56:99:f2:
5b:2c:7f:16:ca:37:26:7d:1e:55:ea:9a:40:4d:a8:
6b:2d:55:d0:3a:d1:7d:85:75:97:b3:dd:08:79:c3:
0f:02:1d:9e:fb:65:47:01:47:2e:d8:d6:c5:5f:73:
6d:d5:ee:23:ae:e3:76:5a:90:dc:d8:ed:94:c1:34:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:28:29:B6:BA:73:3D:EF:2E:2B:5A:49:44:07:32:9A:A5:8A:96:D5
X509v3 Authority Key Identifier:
keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/LCgptrpzPe8uK1pJRAcymqWKltU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.128.0/23
185.237.131.0/24
Signature Algorithm: sha256WithRSAEncryption
77:49:a5:be:8c:9e:78:cd:ad:15:2f:9e:61:4e:5f:51:d8:b9:
25:58:27:96:d8:5d:c9:5a:c7:3b:47:c4:19:d2:44:a8:44:0f:
5b:cd:57:ad:70:2d:65:e3:d0:46:24:71:da:43:ad:98:32:66:
5c:9e:60:05:fc:9c:3f:cc:9e:c0:cb:cd:c2:9e:25:f9:b7:df:
42:e5:6c:c3:5b:6f:c1:72:5d:ec:92:ff:52:2b:0e:b7:94:52:
56:1e:0c:36:d9:1d:de:e0:09:96:20:90:c5:6e:dd:a7:07:07:
e5:24:cb:f4:32:2e:a2:4d:05:ca:cc:d8:04:22:33:8b:7f:57:
4a:3a:ba:02:a0:c3:0c:be:84:f2:87:74:59:19:42:a7:cc:3a:
08:56:e8:a3:19:68:c8:56:a4:7e:16:93:19:35:9b:9b:b3:27:
00:4c:02:53:8f:15:8a:10:64:78:98:3e:39:43:1f:72:8f:77:
22:7e:e7:31:d2:30:7a:09:f3:e4:39:b9:a0:38:11:56:8e:da:
6c:c7:7d:da:d8:04:b4:e4:b5:41:25:1c:38:bf:c2:5f:e1:ad:
57:80:e1:7d:21:9e:05:04:1e:75:b7:b8:d2:e2:b4:48:ff:09:
fe:63:38:89:d7:d2:14:9f:b2:92:fb:18:d1:55:9d:06:9c:ae:
c6:f9:6c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:00 2024 by rpki-client on console.sobornost.net