Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/Lj-xrURdLqHT9gr8znf2nNUMLo8.roa
File: Lj-xrURdLqHT9gr8znf2nNUMLo8.roa (raw, json)
Hash identifier: ZCXHMZt58eEHMhO5HRVEYHxmu2mK6BUEjdC+jmj3vdM=
Subject key identifier: 2E:3F:B1:AD:44:5D:2E:A1:D3:F6:0A:FC:CE:77:F6:9C:D5:0C:2E:8F
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 019194384A7210BA0FA4708071964E42357C
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/Lj-xrURdLqHT9gr8znf2nNUMLo8.roa
Signing time: Tue 27 Aug 2024 14:23:22 +0000
ROA not before: Tue 27 Aug 2024 14:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199533
IP address blocks: 89.34.124.0/23 maxlen: 24
185.144.115.0/24 maxlen: 24
2a0f:ac80::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:94:38:4a:72:10:ba:0f:a4:70:80:71:96:4e:42:35:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Aug 27 14:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e3fb1ad445d2ea1d3f60afcce77f69cd50c2e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b5:07:7e:95:3a:82:73:17:85:07:e1:4f:2e:
09:23:27:67:7f:7b:82:81:6d:ce:27:98:5c:4d:be:
5d:a6:ca:f9:dc:c8:e6:85:12:be:64:5e:bd:ab:5d:
93:ab:7d:a4:ed:a7:6f:93:07:13:13:e6:f1:0c:e6:
99:3c:47:73:27:ff:a3:26:a0:85:fc:f0:8b:3b:a0:
96:98:00:a6:f4:2d:a0:12:e3:b4:97:e2:7c:c3:0a:
e4:3b:fb:e5:f5:78:85:31:2f:5b:49:14:91:9a:36:
ff:a3:3e:f5:d6:d6:1e:93:49:4e:a5:d6:64:02:bc:
c5:ea:92:80:bb:0f:36:07:cc:35:fa:70:40:58:81:
51:e2:c8:84:98:1e:32:18:16:b9:12:49:73:b6:8a:
02:f7:9f:e9:9f:d7:b1:fd:81:87:9c:e1:23:99:0e:
c3:b2:d8:dc:5a:b7:e1:2f:7e:5e:22:ee:80:3a:f0:
06:33:f9:b8:3b:de:0d:60:7c:e7:17:98:a3:e4:79:
fd:d1:08:43:79:7d:98:98:36:58:d9:1a:15:a4:64:
ae:3c:95:15:20:c7:0f:a1:78:95:12:b5:4a:7c:f4:
f8:83:7d:6a:ea:80:62:c2:3c:ae:c9:7a:7b:f2:03:
cf:6c:e0:7d:39:af:6b:04:89:e4:c4:35:ad:62:2d:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3F:B1:AD:44:5D:2E:A1:D3:F6:0A:FC:CE:77:F6:9C:D5:0C:2E:8F
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/Lj-xrURdLqHT9gr8znf2nNUMLo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.124.0/23
185.144.115.0/24
IPv6:
2a0f:ac80::/32
Signature Algorithm: sha256WithRSAEncryption
33:35:26:21:99:1c:78:13:a3:d5:df:53:6a:1f:27:56:0e:bb:
d9:72:88:0b:c1:1f:9c:55:fb:9e:b0:ef:d7:8c:6b:bc:0d:10:
ac:c9:1f:96:08:ff:0b:44:fa:9f:34:b6:85:49:bd:37:aa:bf:
8d:93:21:5b:00:63:f1:26:b3:89:de:d3:70:46:d3:f6:c4:b0:
88:4d:89:87:22:a2:77:ee:5d:4a:eb:71:9e:1d:21:1c:ac:10:
87:6e:e3:3a:e0:cb:d5:fe:8f:d9:02:47:6e:51:69:1e:c3:77:
8b:56:45:4f:cb:57:9c:14:14:13:d1:de:bd:24:bd:61:4a:22:
00:68:fe:31:46:2a:67:79:96:10:a5:ee:a0:53:04:f5:03:d6:
56:15:bc:8d:46:5b:6c:dd:0d:f0:04:0e:a2:e3:37:a5:26:7e:
a8:fd:1d:ba:eb:48:ac:03:fc:e8:ac:27:72:5e:ce:5a:cc:89:
89:5c:a5:87:7e:28:67:d0:8b:86:ce:b3:e7:d6:b1:ea:85:12:
62:a0:15:43:26:99:46:9d:8b:f1:e2:e6:63:fe:4b:21:ef:41:
7c:26:8b:3a:cd:08:93:ec:af:22:18:03:82:cc:e6:54:50:32:
ce:8c:8d:e6:fc:81:cf:7b:61:b2:c1:ae:af:c8:61:a9:0c:0c:
26:8f:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 18:19:23 2024 by rpki-client on console.sobornost.net