Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/LyVHuzBBYij5WG6Fbv6FIJoXj-0.roa
File: LyVHuzBBYij5WG6Fbv6FIJoXj-0.roa (raw, json)
Hash identifier: tt/9uc5FVzM1s03vovcrR2bVZg9qtf0feWt9Gdw+ol8=
Subject key identifier: 2F:25:47:BB:30:41:62:28:F9:58:6E:85:6E:FE:85:20:9A:17:8F:ED
Certificate issuer: /CN=e6cadafdab31563b722f103e2709cad31650ef85
Certificate serial: 0191B2D0C4EC0DCAD553B857693BB768A3B9
Authority key identifier: E6:CA:DA:FD:AB:31:56:3B:72:2F:10:3E:27:09:CA:D3:16:50:EF:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sra_asxVjtyLxA-JwnK0xZQ74U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/LyVHuzBBYij5WG6Fbv6FIJoXj-0.roa
Signing time: Mon 02 Sep 2024 12:58:31 +0000
ROA not before: Mon 02 Sep 2024 12:58:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5631
IP address blocks: 79.173.128.0/18 maxlen: 18
79.173.128.0/19 maxlen: 19
79.173.128.0/20 maxlen: 20
79.173.128.0/21 maxlen: 21
79.173.136.0/21 maxlen: 21
79.173.144.0/21 maxlen: 21
79.173.152.0/21 maxlen: 21
79.173.160.0/19 maxlen: 19
79.173.160.0/21 maxlen: 21
79.173.168.0/21 maxlen: 21
79.173.176.0/21 maxlen: 21
79.173.184.0/21 maxlen: 21
83.143.224.0/21 maxlen: 21
83.143.224.0/22 maxlen: 22
83.143.228.0/22 maxlen: 22
2a00:5840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:d0:c4:ec:0d:ca:d5:53:b8:57:69:3b:b7:68:a3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6cadafdab31563b722f103e2709cad31650ef85
Validity
Not Before: Sep 2 12:58:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f2547bb30416228f9586e856efe85209a178fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:a4:a0:60:5c:68:f2:69:8c:dc:17:61:b4:
23:44:5b:02:7c:2d:49:c7:94:42:62:d4:5c:51:b2:
b2:8e:a9:11:8e:9d:07:f8:65:17:7d:4e:e7:43:b1:
ef:c2:93:f4:68:b4:52:c2:0b:26:bc:b9:35:d8:d3:
3a:08:21:a8:d9:22:5c:7e:05:c2:c3:ec:07:26:4f:
db:8d:b1:37:9a:f9:41:de:67:32:f5:79:6f:55:dd:
a0:fa:03:0c:12:54:ff:a4:61:90:e7:0f:91:5d:fd:
e3:de:c3:98:ba:5e:04:ad:b4:fb:93:b7:1a:af:9f:
89:7f:0f:e2:98:83:a6:84:b7:70:e0:1d:86:c3:4e:
59:b0:4e:f0:6c:e2:e6:e8:bc:27:49:9f:e8:10:73:
e6:ce:04:f8:23:90:34:5b:79:c7:c4:14:05:98:5d:
a7:b2:ba:6e:fa:f6:f0:13:09:e1:e8:bd:da:f3:7d:
82:33:cb:c7:44:53:3e:c5:42:e9:63:10:e0:69:ab:
17:3a:71:e5:8a:50:61:00:53:4c:45:f7:11:87:aa:
48:5e:4c:cb:44:11:16:42:ba:46:6c:d0:55:01:4a:
d7:52:6c:79:d1:5a:38:c1:dc:33:47:fe:2a:b4:b2:
59:40:0d:cd:2d:ad:2f:9e:84:68:43:7b:b5:b2:48:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:25:47:BB:30:41:62:28:F9:58:6E:85:6E:FE:85:20:9A:17:8F:ED
X509v3 Authority Key Identifier:
keyid:E6:CA:DA:FD:AB:31:56:3B:72:2F:10:3E:27:09:CA:D3:16:50:EF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sra_asxVjtyLxA-JwnK0xZQ74U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/LyVHuzBBYij5WG6Fbv6FIJoXj-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/5sra_asxVjtyLxA-JwnK0xZQ74U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.128.0/18
83.143.224.0/21
IPv6:
2a00:5840::/32
Signature Algorithm: sha256WithRSAEncryption
1c:03:f3:40:57:3a:f5:43:26:70:db:91:c5:cb:74:db:a8:7f:
15:ce:46:3d:16:7f:8d:d9:6f:f8:ed:75:98:6b:3b:f1:f8:cf:
28:67:9b:96:9b:73:9f:1a:e5:91:c5:d3:33:d6:26:33:88:1a:
62:b1:9a:e2:49:51:42:38:01:01:e9:0c:68:2a:d7:d6:6c:ee:
2b:9c:31:17:48:e6:6b:d1:9d:7b:f6:29:36:cc:fb:9c:de:fd:
f6:73:85:9c:4b:5a:8b:18:77:19:ab:25:76:39:d6:5d:e7:82:
6d:5f:aa:a3:f9:31:a0:f6:dc:a1:c3:b0:44:06:f5:ca:e0:5f:
47:9b:49:e4:fb:8b:cf:10:17:99:c6:de:8a:bd:9c:d2:5a:d5:
67:fa:da:a6:3d:79:7a:df:d2:fb:4a:1f:25:d7:1b:58:8d:29:
43:e4:5a:54:61:8d:25:de:1a:8a:f2:16:fa:92:c2:36:33:c1:
44:bc:a2:39:57:c8:f0:c2:87:5f:15:1c:23:32:af:92:bd:02:
b5:3e:ad:e0:e5:6a:70:26:fe:85:f7:cc:f7:3b:83:a3:d7:2e:
68:0f:da:0d:6e:70:94:47:22:48:85:e2:c1:f7:e2:3e:5e:ad:
a5:31:64:6f:70:fa:4d:18:4a:b2:47:12:aa:58:14:30:52:47:
e0:77:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:46:57 2024 by rpki-client on console.sobornost.net