Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/LEJtODxjb82d2QmYHzUW9rAykKM.roa
File: LEJtODxjb82d2QmYHzUW9rAykKM.roa (raw, json)
Hash identifier: LYUeRIHvjsk4zHaFN83zANp1mMtShNazXBlW0rUFyME=
Subject key identifier: 2C:42:6D:38:3C:63:6F:CD:9D:D9:09:98:1F:35:16:F6:B0:32:90:A3
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0928DA11
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/LEJtODxjb82d2QmYHzUW9rAykKM.roa
Signing time: Tue 05 Jul 2022 08:16:26 +0000
ROA not before: Tue 05 Jul 2022 08:16:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 178.254.168.0/24 maxlen: 24
109.111.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153672209 (0x928da11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jul 5 08:16:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c426d383c636fcd9dd909981f3516f6b03290a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:50:96:34:af:ed:26:c8:60:5b:5b:e6:b4:
50:a5:b5:df:b7:50:d5:c0:ce:51:89:c4:3e:da:30:
aa:96:0a:ec:a1:e7:2f:12:2a:84:1c:db:8f:0d:05:
8b:cb:71:af:18:38:9a:c9:b6:c3:ab:87:c4:33:41:
7a:ba:48:6b:4d:1f:c6:4b:be:3e:90:0f:5e:a7:27:
94:3f:93:69:12:d9:79:87:b8:0e:74:5f:e2:f7:d8:
bd:79:40:78:fd:e3:5b:ab:fa:94:39:05:0b:22:db:
5d:b4:e6:20:44:99:a3:57:8c:0d:c5:22:13:ac:bf:
ab:c3:6c:f4:10:f2:48:03:48:fe:7d:29:cf:aa:06:
c2:7f:e5:c8:7b:78:e1:81:42:ee:49:58:3b:e0:ce:
e3:ed:ce:d3:97:ab:a9:2d:a5:ac:8a:a5:d9:10:2b:
44:35:f3:6d:16:2e:64:11:d7:ac:28:cd:7c:67:b3:
e0:7e:35:53:88:f7:20:33:0d:f7:0d:b2:9a:c2:63:
c4:da:a2:82:1b:76:6a:a9:8c:80:dc:80:ea:38:90:
d4:4a:8b:86:9d:34:3c:71:63:9b:b2:a9:b5:a5:68:
e3:3f:b0:3d:77:f1:e4:a0:6d:96:b8:68:b3:fe:c6:
11:78:f0:1d:26:ec:b5:2b:b8:78:a2:2f:d2:9b:67:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:42:6D:38:3C:63:6F:CD:9D:D9:09:98:1F:35:16:F6:B0:32:90:A3
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/LEJtODxjb82d2QmYHzUW9rAykKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.245.0/24
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8d:cc:57:4d:6e:01:23:58:87:53:76:41:40:38:08:0b:4a:
f3:27:e5:4b:97:30:7a:66:3a:5c:36:93:fa:52:42:a1:02:44:
fb:0f:be:81:eb:64:ae:8f:e7:6a:7a:dd:2a:dd:71:c3:a8:80:
18:02:99:d6:e8:f9:38:30:21:03:f6:b7:1c:6a:59:ac:54:3e:
71:75:c8:07:d2:ad:4f:e9:58:50:11:ba:15:0c:50:1e:5a:0b:
60:94:e5:35:a0:64:e1:d5:88:c6:41:5b:d0:57:71:1e:3f:b1:
1c:3c:79:27:19:03:7f:58:6e:1f:4a:53:ee:80:7a:57:56:2e:
e2:6a:71:4e:2c:b7:ae:05:cb:13:01:8e:0d:92:b7:c4:bf:d3:
ae:d7:e0:4e:ee:62:be:2c:71:a9:ef:7a:75:b2:22:c5:1f:a9:
e9:f4:80:f9:e5:f9:23:62:64:09:e2:71:08:b7:fe:35:b1:e0:
64:32:00:8d:3c:f0:7a:21:a4:07:50:df:fc:1a:b4:b7:58:91:
fa:be:61:ce:66:30:ff:30:c3:a6:b6:96:3e:19:ae:c6:eb:10:
1d:a0:45:94:0b:7f:c6:0e:33:91:69:7c:fe:ce:28:15:24:c8:
c0:e2:8d:5b:c4:dd:84:52:74:90:4b:89:bd:86:60:81:67:f8:
09:fe:10:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net