Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/LLEn295CONXQaGEf1L4KQ_lydFw.roa
File: LLEn295CONXQaGEf1L4KQ_lydFw.roa (raw, json)
Hash identifier: kRgShtOPHDxaspU2eVkZTIFHNaxBYUxYWhTDQucoOnI=
Subject key identifier: 2C:B1:27:DB:DE:42:38:D5:D0:68:61:1F:D4:BE:0A:43:F9:72:74:5C
Certificate issuer: /CN=60f66e54f694bce7e32c8a326136e5c283a38498
Certificate serial: 70D947
Authority key identifier: 60:F6:6E:54:F6:94:BC:E7:E3:2C:8A:32:61:36:E5:C2:83:A3:84:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPZuVPaUvOfjLIoyYTblwoOjhJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/LLEn295CONXQaGEf1L4KQ_lydFw.roa
Signing time: Sat 01 Jan 2022 02:51:03 +0000
ROA not before: Sat 01 Jan 2022 02:51:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7395655 (0x70d947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f66e54f694bce7e32c8a326136e5c283a38498
Validity
Not Before: Jan 1 02:51:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cb127dbde4238d5d068611fd4be0a43f972745c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:2e:02:cf:7b:3b:63:88:89:b3:af:1c:04:
c5:8d:e8:3c:b8:b9:8f:ef:f3:39:db:71:fa:16:80:
4e:0a:d0:8c:5b:bb:d8:1f:bd:52:79:91:ef:82:01:
80:5d:90:c6:0c:cf:6e:de:01:33:ca:38:7d:84:50:
5e:3e:8a:c7:5c:eb:73:25:44:1e:13:de:3e:71:db:
f7:2e:fd:36:fd:0f:dd:2d:7a:b3:47:8c:7c:de:ac:
0f:ed:a4:24:29:8b:7f:ba:4f:6a:6a:6e:94:4d:75:
99:f4:8f:8d:a3:57:9b:1d:49:95:b1:8e:2d:ed:03:
0e:e4:c1:fd:16:71:9e:8a:1f:cc:32:42:65:42:6c:
9b:6f:cb:81:e9:39:05:c2:0d:b9:de:2a:c5:e1:e0:
13:b8:ab:0d:8d:6d:ae:70:17:2e:68:e8:ef:52:bc:
94:02:50:eb:a6:3e:b0:22:4c:6d:67:69:a4:72:fb:
62:e1:ee:af:6a:10:bc:6e:78:f2:95:bd:bf:f9:7c:
e3:14:c4:83:c0:c5:0e:61:75:26:e3:a2:4a:3b:09:
2a:db:42:13:03:a6:7d:ee:f4:87:c7:17:6a:13:d1:
d6:83:a7:c4:03:88:0e:60:65:e3:1f:00:79:e4:91:
a0:a4:e7:67:f6:86:fb:28:87:59:a3:ad:6e:a1:70:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B1:27:DB:DE:42:38:D5:D0:68:61:1F:D4:BE:0A:43:F9:72:74:5C
X509v3 Authority Key Identifier:
keyid:60:F6:6E:54:F6:94:BC:E7:E3:2C:8A:32:61:36:E5:C2:83:A3:84:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPZuVPaUvOfjLIoyYTblwoOjhJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/LLEn295CONXQaGEf1L4KQ_lydFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ea867-df9a-48e0-b8e3-5559915f3759/1/YPZuVPaUvOfjLIoyYTblwoOjhJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.132.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e4:f6:d8:57:ba:1f:2e:89:d5:b9:3c:b5:ba:7d:56:74:54:
17:cb:7c:9c:67:ea:54:be:f6:76:e5:df:cf:37:cb:ad:c6:5d:
9b:60:68:97:dd:38:dc:d3:bf:76:2f:bf:3d:33:a2:56:a9:d4:
aa:43:4e:ee:f9:dc:8f:ef:f0:6b:ce:8b:d5:52:46:4b:6c:9e:
c5:05:55:c6:97:be:be:23:93:15:b5:d0:8e:be:50:34:de:c4:
ad:4d:b4:05:b9:f7:ad:5f:aa:8e:57:2b:fd:9c:e8:6f:03:5e:
ab:10:55:9c:9f:fc:65:1a:32:0c:7b:74:fc:f7:4d:b5:30:9c:
b7:55:1a:f3:b9:7b:04:25:dc:78:66:b1:c2:0d:fe:ca:9d:d9:
3c:76:24:d0:c1:9a:f5:c5:27:a2:cf:7d:db:ac:38:4a:df:aa:
36:4f:6a:28:0b:00:95:db:d1:b0:dc:10:4b:2e:7a:90:c0:ac:
e5:83:09:a3:04:7f:c9:c8:93:62:c2:b5:9f:ac:f8:d2:48:3e:
ef:6b:e5:f9:57:89:25:5f:76:5f:5f:5b:34:f1:12:fa:ab:8f:
6a:ba:12:0e:80:66:d2:80:53:a5:4b:0a:6c:78:4c:71:d5:12:
73:7e:0c:bc:6f:19:44:8a:d8:f7:bd:04:d4:f7:0d:0a:0e:4a:
e8:0a:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:46 2025 by rpki-client