Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Lp8-1D-LNtislqoXntup9qUlCIk.roa
File: Lp8-1D-LNtislqoXntup9qUlCIk.roa (raw, json)
Hash identifier: jLGt5i1P2WQ/8S8/hRAMAJCDZLECEEYQxcLoD+5jEdU=
Subject key identifier: 2E:9F:3E:D4:3F:8B:36:D8:AC:96:AA:17:9E:DB:A9:F6:A5:25:08:89
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0191933189BB634916AFB92FCB2821F4B24F
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Lp8-1D-LNtislqoXntup9qUlCIk.roa
Signing time: Tue 27 Aug 2024 09:36:22 +0000
ROA not before: Tue 27 Aug 2024 09:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21487
IP address blocks: 46.48.128.0/20 maxlen: 20
78.31.216.0/21 maxlen: 21
80.73.64.0/19 maxlen: 19
80.73.64.0/20 maxlen: 20
80.73.80.0/20 maxlen: 20
91.185.224.0/19 maxlen: 19
91.185.240.0/20 maxlen: 20
94.245.128.0/18 maxlen: 18
94.245.128.0/19 maxlen: 19
94.245.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:31:89:bb:63:49:16:af:b9:2f:cb:28:21:f4:b2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 27 09:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e9f3ed43f8b36d8ac96aa179edba9f6a5250889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:a6:c7:76:6f:91:34:98:8c:11:95:2a:21:
2d:69:1d:e7:e8:12:b2:4a:4e:f3:3e:5f:b4:cf:3f:
41:e0:89:f8:3c:fb:d2:50:d6:4e:3d:25:ee:77:ef:
35:89:e9:83:49:1f:18:8b:2b:32:75:97:ac:94:07:
0e:ae:9a:30:31:bd:a4:76:14:5f:59:c7:d6:63:95:
b9:0f:b8:f4:44:d1:26:59:f9:59:eb:fc:1d:35:eb:
3b:3e:3c:96:4b:71:f1:a9:28:38:ec:29:98:4d:6f:
62:ea:de:55:41:00:6d:90:22:c8:5a:95:7c:86:10:
14:fc:7c:de:7d:d2:27:48:52:de:e5:87:e9:b1:fb:
a9:05:33:af:d0:c3:e5:63:78:a3:e1:0b:56:57:a0:
bf:aa:69:cd:5a:59:f0:bc:d3:52:f8:37:88:07:4c:
5d:25:50:6d:1a:47:5a:60:c1:bb:6d:2d:03:cc:4a:
ef:57:e1:36:09:8a:96:41:d6:0a:f3:69:bb:b2:d9:
5a:8a:f2:52:ce:3c:7b:37:22:07:ba:d0:c4:d9:75:
ea:fd:8f:c4:fe:fd:a2:3b:be:d8:50:47:d9:5e:94:
d8:14:76:88:48:fd:0f:6e:26:8a:11:ef:fe:d4:ca:
96:36:42:a7:7c:cd:70:48:a9:c7:83:57:4a:e6:1c:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9F:3E:D4:3F:8B:36:D8:AC:96:AA:17:9E:DB:A9:F6:A5:25:08:89
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Lp8-1D-LNtislqoXntup9qUlCIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.48.128.0/20
78.31.216.0/21
80.73.64.0/19
91.185.224.0/19
94.245.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:a7:51:ac:c2:e6:cb:53:db:c8:d3:85:76:2d:db:6a:ee:c2:
77:d1:4f:10:88:5b:42:23:8e:d0:89:ed:80:28:ff:25:b1:2b:
c1:ff:2d:dc:e2:eb:bc:8f:37:45:f2:c8:30:8d:80:95:7b:e1:
f6:d9:c0:58:b4:41:d3:10:c6:49:02:f6:5e:ec:41:b4:8b:3b:
10:f0:ca:55:ed:3c:08:cd:64:f2:c9:ae:d0:46:d3:e0:a6:10:
84:b3:a8:af:9d:f9:05:97:39:da:32:e5:cc:03:48:59:9f:ef:
15:c5:24:f0:25:08:e3:00:e5:0c:f7:fc:82:16:79:da:6d:e4:
b8:f6:dc:6e:f2:f0:f7:9d:9b:83:3a:d2:b5:af:ee:95:52:d1:
f6:b5:00:da:8a:bf:94:c0:1e:54:c4:3c:b2:71:3a:b0:f9:38:
a2:2f:44:fd:f7:34:34:8b:06:70:b3:b9:9d:a8:f3:1d:23:c7:
b5:a3:a1:eb:3c:34:33:d2:fe:9b:fe:2f:2d:e3:cb:67:d8:a6:
56:78:46:fa:3f:d5:d4:57:ef:15:ab:94:42:69:aa:c2:1c:57:
f9:7c:9c:5f:11:3a:2a:be:6a:ef:75:ca:99:21:c8:0d:e8:a9:
2e:43:73:ee:a0:b6:a2:c2:75:c4:2c:57:31:b8:20:50:c4:30:
35:75:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:13:23 2024 by rpki-client on console.sobornost.net