Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/lavMGEqMUDumsrN0fHGixise8eY.roa
File: lavMGEqMUDumsrN0fHGixise8eY.roa (raw, json)
Hash identifier: k/xeCrJV4YHpdkz+OpSdiMCrvy5mJqrQhHaQSqb8cGk=
Subject key identifier: 95:AB:CC:18:4A:8C:50:3B:A6:B2:B3:74:7C:71:A2:C6:2B:1E:F1:E6
Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial: 01901B6AADB6C9667C910D431D2C7D39F026
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/lavMGEqMUDumsrN0fHGixise8eY.roa
Signing time: Sat 15 Jun 2024 10:21:34 +0000
ROA not before: Sat 15 Jun 2024 10:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204091
IP address blocks: 2a13:3700::/44 maxlen: 44
2a13:3700:10::/44 maxlen: 44
2a13:3700:20::/44 maxlen: 44
2a13:3700:30::/44 maxlen: 44
2a13:3700:40::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:6a:ad:b6:c9:66:7c:91:0d:43:1d:2c:7d:39:f0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Validity
Not Before: Jun 15 10:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95abcc184a8c503ba6b2b3747c71a2c62b1ef1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:76:2f:b5:dc:d6:e8:17:ac:b0:3c:11:be:
d4:b8:b3:d6:cc:e3:5b:81:c9:19:6b:d5:07:0d:61:
9d:bb:a1:fb:50:ca:1a:d4:b9:41:08:4c:69:f5:b0:
e0:be:53:8e:9a:98:e0:a9:12:4c:02:f4:04:91:3e:
fd:ae:e4:f1:31:21:ea:eb:0d:b9:c2:4f:fc:46:4b:
7e:12:70:3e:d2:c6:51:44:de:64:18:6f:cf:56:82:
1b:46:24:c0:78:11:ee:f8:2c:63:92:47:07:6d:d4:
5c:ef:3f:97:5f:be:f0:fc:b1:f0:be:99:2a:e6:e4:
4f:03:db:d2:af:6a:58:17:20:6f:43:a4:25:e6:85:
73:99:97:e1:6e:18:d3:fe:3c:f6:a8:f9:cf:ca:a6:
b7:34:6f:5e:3a:04:74:17:57:43:42:90:b9:27:b3:
ec:71:0f:71:b7:e2:79:c6:cc:de:99:3f:8d:59:4a:
90:c9:eb:98:72:aa:69:4b:31:ad:f6:e8:e4:f9:6f:
cd:b0:85:47:57:ab:83:5f:c2:29:3d:2a:4b:ac:4a:
63:a0:45:ec:25:19:51:ca:37:92:f4:ae:a6:b5:be:
0f:5c:6a:e8:db:6c:85:22:79:80:6d:3c:21:ea:6a:
ec:fd:f9:c5:7b:8f:79:06:6e:44:cf:c6:db:0e:cd:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AB:CC:18:4A:8C:50:3B:A6:B2:B3:74:7C:71:A2:C6:2B:1E:F1:E6
X509v3 Authority Key Identifier:
keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/lavMGEqMUDumsrN0fHGixise8eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3700::-2a13:3700:4f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:14:af:38:10:bb:d7:17:8e:4e:b0:e9:7b:28:31:4f:ac:f2:
e7:5a:3b:24:56:36:2e:0d:8b:52:b2:55:57:37:cf:fe:93:f9:
51:7c:20:1b:ae:bf:49:15:0c:d5:a1:8b:40:5f:42:e7:7d:53:
56:49:a9:78:ea:43:f4:a9:9a:f0:ab:71:3a:75:1f:79:3d:89:
fe:de:4b:d5:60:8b:84:f7:08:5e:d6:d5:f8:65:9e:76:86:e2:
0b:c2:64:e4:81:7e:a1:d4:e5:6d:f4:dc:0e:f4:ed:b7:eb:57:
da:68:4b:44:53:16:6e:e4:66:0d:5b:a4:d0:72:a1:29:de:3a:
ec:5c:af:ef:65:be:ca:22:e3:79:00:76:b7:31:6b:f3:a1:5b:
16:60:0f:09:88:96:82:44:99:77:af:8e:c6:47:1e:62:0c:09:
e4:91:56:2c:a4:b6:37:fb:c5:d3:3e:6d:06:c2:a2:78:73:8b:
74:3c:f1:3f:f5:49:a5:31:2f:ea:6e:92:4a:67:e1:08:2b:a2:
a4:1c:6f:2c:cf:42:f9:94:a4:40:69:4a:f2:f2:fd:2a:7f:3a:
3d:3a:43:21:f3:34:07:9e:62:45:36:0f:c8:98:d8:99:dd:6c:
15:bc:e1:d7:10:0f:e8:a4:78:73:64:db:f1:fa:11:54:d0:a1:
0c:33:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:44 2024 by rpki-client on console.sobornost.net