Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/LqF23azgbDrEekDRcaO55k-Hgqc.roa
File: LqF23azgbDrEekDRcaO55k-Hgqc.roa (raw, json)
Hash identifier: gqWAjvRO7b1HNqvNOq4iS7hW3RQrGoBVTXSpnuUGEU4=
Subject key identifier: 2E:A1:76:DD:AC:E0:6C:3A:C4:7A:40:D1:71:A3:B9:E6:4F:87:82:A7
Certificate issuer: /CN=e783c010ee0b0739fbf91ac8d31c0dd30c4a1ea0
Certificate serial: 018570C2D00624439821B0F35C784BC009C6
Authority key identifier: E7:83:C0:10:EE:0B:07:39:FB:F9:1A:C8:D3:1C:0D:D3:0C:4A:1E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54PAEO4LBzn7-RrI0xwN0wxKHqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/LqF23azgbDrEekDRcaO55k-Hgqc.roa
Signing time: Mon 02 Jan 2023 04:34:53 +0000
ROA not before: Mon 02 Jan 2023 04:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44853
IP address blocks: 81.16.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:d0:06:24:43:98:21:b0:f3:5c:78:4b:c0:09:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783c010ee0b0739fbf91ac8d31c0dd30c4a1ea0
Validity
Not Before: Jan 2 04:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ea176ddace06c3ac47a40d171a3b9e64f8782a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:9a:5d:09:a1:9d:60:58:3a:aa:05:27:f8:
90:ea:4d:64:8e:38:b0:b7:30:04:cb:ab:50:ce:c2:
6a:67:6b:17:c1:8c:30:82:ef:d5:21:59:a9:b2:92:
38:05:f4:17:51:74:96:4a:67:31:3d:81:f6:38:a4:
e6:99:71:8d:c8:4e:b7:73:ba:03:fb:14:02:8f:10:
fb:41:63:1c:f4:cf:b5:c9:a4:14:b6:73:b3:c4:ac:
8a:b7:99:c6:94:9c:24:c3:81:d8:99:95:ad:7b:dd:
91:e4:17:5d:93:8f:70:23:df:0c:f4:8a:38:ac:48:
2d:88:8e:ce:ca:90:31:2e:70:a0:ba:d1:6e:7d:87:
51:e5:a3:e1:c7:46:df:de:ce:4c:17:0a:af:23:45:
a9:40:11:80:ef:77:b6:05:4b:d5:6f:a3:10:b0:35:
a8:a9:e4:8c:57:4a:8c:a5:58:88:b8:e3:0d:14:e9:
7d:23:20:5c:55:84:dd:4f:5d:ca:ad:3f:49:4e:94:
6d:c0:42:3f:13:4a:68:ee:32:7b:9e:3b:eb:de:a8:
21:74:5a:57:cb:9d:a2:20:49:00:a5:02:62:03:e4:
4c:68:87:9a:a0:84:b4:27:58:2a:82:ac:ed:f7:aa:
eb:99:88:9f:06:9a:b6:0a:f3:b8:df:a1:08:b2:4e:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A1:76:DD:AC:E0:6C:3A:C4:7A:40:D1:71:A3:B9:E6:4F:87:82:A7
X509v3 Authority Key Identifier:
keyid:E7:83:C0:10:EE:0B:07:39:FB:F9:1A:C8:D3:1C:0D:D3:0C:4A:1E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54PAEO4LBzn7-RrI0xwN0wxKHqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/LqF23azgbDrEekDRcaO55k-Hgqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/54PAEO4LBzn7-RrI0xwN0wxKHqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.24.0/22
Signature Algorithm: sha256WithRSAEncryption
07:e4:e9:5c:03:c7:5f:95:dc:ab:00:7b:21:59:b9:bd:70:28:
a2:43:22:c0:a4:9b:b5:a5:bd:8a:3f:78:d3:c8:7d:f8:e9:6d:
65:f6:a8:99:d7:d5:19:00:a2:23:39:e1:7b:95:ba:80:fd:26:
8a:08:4f:a9:d3:04:5d:2c:8d:8c:79:fc:cc:92:55:94:7d:90:
ef:d2:82:a7:17:c7:c1:36:ff:d7:9d:fc:d3:07:cf:60:b2:d2:
ea:89:26:4c:08:6a:57:2f:97:4a:1d:fc:0c:93:9b:17:d7:33:
eb:a0:26:4b:12:59:04:51:cd:3f:b0:41:24:2b:14:96:ca:86:
70:99:94:e7:d9:7d:ea:0c:ae:f1:6d:0c:40:50:4e:da:34:e5:
a4:a5:43:79:86:82:ac:86:71:dd:e7:76:66:48:ff:82:84:36:
ec:8c:20:e3:b5:a1:ed:ae:b1:78:16:7c:86:37:ae:ba:00:f1:
de:e9:08:c3:0e:10:75:62:af:ce:b8:88:e1:0f:01:f2:00:59:
ba:5c:b2:6a:9a:b0:44:71:2a:48:3e:e1:40:a5:ba:5a:15:0e:
c0:46:31:a5:6a:bd:19:32:12:34:48:43:59:c6:58:4e:2f:72:
ac:78:65:37:64:1c:1e:5a:71:31:e0:71:86:74:25:78:e8:83:
96:93:aa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:56 2024 by rpki-client on console-fra.rpki-client.org