Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LX-_g6NQFiakRQIfqP1F6lAh_uU.roa
File: LX-_g6NQFiakRQIfqP1F6lAh_uU.roa (raw, json)
Hash identifier: 8LDTe9zXqYTChVWHM+gd0UIa3rLSaDDiC7lFl3jUOoM=
Subject key identifier: 2D:7F:BF:83:A3:50:16:26:A4:45:02:1F:A8:FD:45:EA:50:21:FE:E5
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01919280D72E1155CFDF4EF99F09EE1D6C5E
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LX-_g6NQFiakRQIfqP1F6lAh_uU.roa
Signing time: Tue 27 Aug 2024 06:23:22 +0000
ROA not before: Tue 27 Aug 2024 06:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43793
IP address blocks: 5.175.96.0/19 maxlen: 19
5.175.96.0/20 maxlen: 20
5.175.112.0/20 maxlen: 20
31.47.128.0/19 maxlen: 19
31.47.144.0/20 maxlen: 20
46.183.80.0/21 maxlen: 21
78.111.240.0/20 maxlen: 20
78.111.240.0/23 maxlen: 23
109.205.144.0/21 maxlen: 21
185.43.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:80:d7:2e:11:55:cf:df:4e:f9:9f:09:ee:1d:6c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 27 06:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d7fbf83a3501626a445021fa8fd45ea5021fee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:48:7a:9f:66:b8:3b:55:af:e3:13:1d:ee:
83:77:11:8f:e5:45:6b:3c:5c:f2:9d:4b:99:b3:3d:
78:a2:60:b7:83:d2:95:7b:b1:89:64:5d:50:18:82:
60:45:af:c2:e1:39:64:cb:58:54:0f:59:f3:53:48:
ad:4c:f5:92:c7:02:d3:5b:29:55:66:84:47:75:86:
42:74:55:40:d2:de:24:62:ea:8a:1c:88:f2:f0:69:
32:90:a1:cf:54:50:cd:1b:22:92:3d:4a:4d:7f:95:
10:3f:ed:7d:77:93:f6:a7:06:f7:a6:41:e7:d3:bf:
4a:d2:63:5c:1d:65:c3:0f:5c:f3:57:d7:14:57:d1:
fa:3f:4a:78:b8:d8:88:7e:c7:c4:86:06:b9:cc:14:
14:4a:9e:7d:37:34:c4:c5:4c:d4:30:27:95:46:9b:
66:81:1f:b4:f0:82:d6:29:d0:b8:15:68:3d:d7:a5:
81:2d:b8:8f:3b:a7:e1:d2:b2:bc:bf:8c:56:f8:37:
d4:e2:73:34:8e:99:71:cf:75:44:de:71:71:1c:c0:
41:5e:4f:3e:59:7d:43:28:fd:e0:da:ee:39:a9:8d:
2e:a0:fa:1e:52:f8:64:e7:aa:23:37:09:70:a0:ef:
8d:82:4e:a1:c4:88:ab:78:9c:0a:f4:93:ce:47:5c:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7F:BF:83:A3:50:16:26:A4:45:02:1F:A8:FD:45:EA:50:21:FE:E5
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LX-_g6NQFiakRQIfqP1F6lAh_uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.96.0/19
31.47.128.0/19
46.183.80.0/21
78.111.240.0/20
109.205.144.0/21
185.43.100.0/22
Signature Algorithm: sha256WithRSAEncryption
36:dd:61:0d:48:73:de:35:b3:b0:da:99:26:82:74:a0:cb:a7:
5b:6f:8a:a5:22:25:b5:e1:b9:37:95:8d:98:61:52:c7:ce:b1:
5f:34:04:d7:a2:c3:88:79:bb:f1:8f:7a:d2:6f:aa:21:60:71:
8d:0b:04:79:c0:9f:3d:4e:d7:ce:09:a5:64:0d:93:1c:28:39:
eb:76:11:a4:29:02:ba:30:79:0f:d4:67:d0:30:ed:a6:cd:9d:
76:37:36:26:2f:de:a2:87:07:e1:47:94:9e:8a:4b:0a:e8:4b:
9f:10:2f:e3:ed:38:f5:90:2f:1c:1b:37:e4:7d:fc:d3:e8:4d:
9c:06:c0:b0:95:7b:a5:44:55:eb:08:84:52:a2:7f:4a:1e:a3:
d0:54:ab:5e:ff:36:38:7f:8f:80:3d:25:bf:33:ad:aa:75:fe:
bc:82:6b:a3:a4:05:a0:97:f2:2c:89:d0:75:57:0e:44:fc:2a:
2d:d7:94:f0:60:b7:58:d7:5d:8f:b1:1f:61:c7:c5:62:20:de:
29:40:47:47:f3:93:1b:83:54:89:ee:d8:02:22:b1:de:ce:c5:
a2:1c:86:5e:95:f8:7f:bc:13:b6:22:ba:68:e0:01:68:5f:b4:
98:ba:2e:99:85:41:bc:b3:36:56:03:8d:84:09:e4:aa:26:03:
b6:1a:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:23:06 2024 by rpki-client on console.sobornost.net