Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/LMU8RAZ9X_EQo3qrwDQYX5ASzWg.roa
File: LMU8RAZ9X_EQo3qrwDQYX5ASzWg.roa (raw, json)
Hash identifier: 7Z5EXwdfa5sxW/Zqu6wEsfIZmK6ClEOymMKmkoLwboE=
Subject key identifier: 2C:C5:3C:44:06:7D:5F:F1:10:A3:7A:AB:C0:34:18:5F:90:12:CD:68
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 01919E45D66C8E8BBC51792D63B6D8DEBB72
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/LMU8RAZ9X_EQo3qrwDQYX5ASzWg.roa
Signing time: Thu 29 Aug 2024 13:14:22 +0000
ROA not before: Thu 29 Aug 2024 13:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215217
IP address blocks: 89.34.124.0/23 maxlen: 24
89.150.55.0/24 maxlen: 24
2a0f:ac80::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:45:d6:6c:8e:8b:bc:51:79:2d:63:b6:d8:de:bb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Aug 29 13:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cc53c44067d5ff110a37aabc034185f9012cd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:9e:51:20:7f:2c:05:4d:26:05:a5:60:56:
45:37:4a:54:3c:ee:ce:a4:f2:73:c4:dc:ea:e6:36:
54:27:8f:ff:00:bf:e3:62:1a:e6:70:bc:41:30:e8:
05:5a:48:f6:e0:24:da:78:c1:34:5f:64:1c:ba:cd:
5d:08:68:f6:31:81:42:3b:88:b6:cf:54:66:f3:ab:
44:b2:b9:6b:bb:e2:1f:4d:30:50:eb:99:34:d6:31:
9d:12:f3:8e:c1:2c:40:a3:c0:3a:00:70:32:b8:d1:
c2:76:e4:16:f4:ee:32:67:6c:dc:4f:e9:77:35:5f:
ee:ab:54:e0:f5:ab:c6:73:ec:c4:27:9f:cc:61:55:
7c:32:3a:d2:b2:05:be:44:74:c7:f0:90:52:f1:3d:
29:c1:02:63:61:79:d6:f9:66:9d:d2:46:e4:e9:2a:
e8:ba:70:1e:df:01:3a:1d:fe:bf:74:a6:d1:84:bb:
35:9f:6e:1a:93:84:71:7e:eb:67:4a:a4:5d:61:2a:
d2:ef:cb:57:c5:58:4a:d9:79:88:05:c2:5f:3f:f3:
19:ca:f9:b2:c3:2d:d8:99:da:43:11:1e:bd:77:84:
21:7e:0c:54:1c:52:c0:e8:eb:2a:c1:b6:fa:d3:02:
a5:1b:c8:02:79:fb:cc:53:3e:7f:9f:a5:c7:cd:63:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:3C:44:06:7D:5F:F1:10:A3:7A:AB:C0:34:18:5F:90:12:CD:68
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/LMU8RAZ9X_EQo3qrwDQYX5ASzWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.124.0/23
89.150.55.0/24
IPv6:
2a0f:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
05:b7:22:bb:34:df:19:9e:62:53:8d:b7:eb:44:be:00:bf:fe:
2e:d9:0f:3c:96:38:1c:1e:6c:77:af:c5:35:4c:bf:d9:88:68:
d2:c3:e4:6c:84:27:bd:6e:d5:ce:c0:74:a2:c6:bb:4c:d3:b6:
9a:0f:1f:c3:1c:98:7a:37:33:ef:bd:36:c8:93:bf:03:da:b8:
66:c5:29:9e:c5:88:7c:b3:e0:5c:95:2b:96:fd:3a:3d:55:24:
80:f6:fb:8a:11:3f:1b:76:ea:63:31:5d:01:04:bb:8e:8e:87:
29:87:de:b6:af:a5:1d:23:e7:fa:8f:2d:70:16:f0:ac:60:97:
2b:2f:2b:3e:d8:25:9f:47:c4:a9:d5:65:15:58:d2:06:80:c0:
c5:fa:34:e1:bc:05:3b:25:55:a0:22:b4:0d:9c:d8:a4:01:2b:
d1:aa:06:ef:b1:ec:d1:b4:f5:55:fa:81:53:65:eb:99:c8:f3:
41:cf:4d:eb:d5:9c:50:47:0c:ce:29:b2:ac:c8:81:07:ee:0f:
a4:d8:e1:26:f3:5f:0c:52:15:f0:4b:c2:8c:11:c7:25:8b:ef:
67:11:6a:8c:c8:e5:e1:8b:d9:63:98:d1:eb:af:93:46:fe:d6:
f3:a3:88:a7:e3:88:f4:97:51:dc:04:75:32:12:6a:90:da:dd:
d0:78:47:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:15 2024 by rpki-client on console.sobornost.net