Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/LbKD6ltq_Ay85o599VouA6hSLJU.roa
File: LbKD6ltq_Ay85o599VouA6hSLJU.roa (raw, json)
Hash identifier: ITuewtIyZkCaPoU00vC5kQhuD7TUQCfO4fSkf78/ioY=
Subject key identifier: 2D:B2:83:EA:5B:6A:FC:0C:BC:E6:8E:7D:F5:5A:2E:03:A8:52:2C:95
Certificate issuer: /CN=3037a5f7679747839a9c5d740e10a94119175772
Certificate serial: 01882086725D3ECD785D129B3015C6BCD06A
Authority key identifier: 30:37:A5:F7:67:97:47:83:9A:9C:5D:74:0E:10:A9:41:19:17:57:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDel92eXR4OanF10DhCpQRkXV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/LbKD6ltq_Ay85o599VouA6hSLJU.roa
Signing time: Mon 15 May 2023 17:47:41 +0000
ROA not before: Mon 15 May 2023 17:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 194.150.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:72:5d:3e:cd:78:5d:12:9b:30:15:c6:bc:d0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3037a5f7679747839a9c5d740e10a94119175772
Validity
Not Before: May 15 17:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2db283ea5b6afc0cbce68e7df55a2e03a8522c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:4e:07:fc:62:85:27:a9:27:19:a2:e0:7c:
fc:83:06:a0:2f:9d:87:80:8d:01:58:29:98:2d:91:
d6:a2:9a:96:fd:ba:95:ca:17:a9:03:73:70:6a:9e:
25:3c:61:9c:27:1f:e7:69:fb:f9:6c:98:f3:c5:01:
2e:8f:7e:28:33:19:69:02:6a:6f:3a:4b:13:08:d2:
63:3a:5c:ab:02:e9:8c:45:58:30:ac:0d:4b:23:f8:
6b:cd:ce:b8:08:64:c1:20:f3:33:18:42:2d:5f:ae:
62:e1:44:ec:ae:b4:27:42:1b:2c:b4:7a:d4:13:56:
26:ef:e7:35:73:12:e0:41:39:04:64:9b:95:73:67:
92:63:fb:37:7f:12:94:0d:0e:f1:6d:32:84:84:ce:
71:10:ad:f2:ce:55:0c:1b:2b:5e:3c:1e:37:30:9d:
10:53:63:a7:8a:34:f6:e5:06:6b:f8:79:ba:3a:6d:
5c:21:4d:3e:52:c7:a5:da:e4:94:4c:e9:a2:54:18:
a7:a9:a6:a1:36:53:8e:40:a4:f3:4b:60:02:b1:71:
9a:2a:d9:95:6c:29:a1:19:1f:f8:43:4e:be:e8:b8:
cc:17:aa:16:4d:19:14:91:0c:e6:74:27:3c:c6:d6:
2e:eb:95:35:04:93:67:9c:24:3e:e1:18:7b:6f:97:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B2:83:EA:5B:6A:FC:0C:BC:E6:8E:7D:F5:5A:2E:03:A8:52:2C:95
X509v3 Authority Key Identifier:
keyid:30:37:A5:F7:67:97:47:83:9A:9C:5D:74:0E:10:A9:41:19:17:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDel92eXR4OanF10DhCpQRkXV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/LbKD6ltq_Ay85o599VouA6hSLJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/MDel92eXR4OanF10DhCpQRkXV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.76.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7d:4b:65:2f:74:82:18:c6:82:b2:ba:19:9d:e4:72:1b:cb:
43:d3:88:15:7a:60:b5:28:5c:66:d9:88:8b:76:34:c7:1d:ba:
f2:56:0e:99:03:3a:de:77:95:f2:45:b7:8c:37:f7:13:c4:57:
1e:ad:d7:e7:e8:48:f0:ce:0c:97:18:f4:a2:f8:8f:0f:e8:97:
a7:41:58:94:20:b1:b0:cd:95:b2:0d:a6:58:66:ae:97:2f:1f:
cb:23:d1:23:e4:2d:3b:f6:d6:c9:8b:8d:de:c5:c7:ef:00:b7:
4f:a5:bf:9b:80:17:e2:48:2f:87:e2:7d:25:7b:c1:4a:55:e5:
c7:58:29:1e:ac:eb:cc:2d:c9:58:cf:ec:17:2c:ee:51:7f:14:
5e:ed:bf:2e:d4:5a:b0:22:eb:74:f6:88:3d:01:c6:e1:71:9d:
08:38:46:1e:a2:8f:2e:21:b6:1c:63:fb:86:31:c5:3f:b3:5b:
c6:53:ab:4f:c2:9c:34:1e:92:d1:65:61:b2:11:29:8b:5e:e9:
0c:63:6a:4d:30:a1:4c:f2:81:93:27:97:68:10:4b:ec:24:2d:
ce:51:d5:2a:12:e8:a4:0d:6d:76:a6:a8:ce:89:5c:a6:48:2b:
fc:2d:cd:90:51:28:68:d1:0f:cd:0c:f8:0a:95:bc:9c:b3:27:
47:a3:81:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:43:47 2023 by rpki-client on console-ams.rpki-client.org