Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LuR1BpPSgq-SUmshiH1n6RKiMFE.roa
File: LuR1BpPSgq-SUmshiH1n6RKiMFE.roa (raw, json)
Hash identifier: H7v8Te8DQEGan/Fsgq5NvYOPzGyAk1b113NvQM0cIe8=
Subject key identifier: 2E:E4:75:06:93:D2:82:AF:92:52:6B:21:88:7D:67:E9:12:A2:30:51
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19B7AE38
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LuR1BpPSgq-SUmshiH1n6RKiMFE.roa
Signing time: Wed 11 May 2022 19:13:06 +0000
ROA not before: Wed 11 May 2022 19:13:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204136
IP address blocks: 185.121.163.0/24 maxlen: 24
185.121.177.0/24 maxlen: 24
2a05:dfc7:5::/48 maxlen: 48
2a06:1280:ce05::/48 maxlen: 48
2a05:dfc7:beef::/48 maxlen: 48
2a05:dfc7:dfc7::/48 maxlen: 48
2a06:a005:8e0::/44 maxlen: 48
2a06:9f40::/30 maxlen: 30
2a05:dfc7:5353::/48 maxlen: 48
2a06:1280:ce04::/48 maxlen: 48
2a05:dfc7:dfc8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431468088 (0x19b7ae38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 11 19:13:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ee4750693d282af92526b21887d67e912a23051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:48:87:85:29:a5:50:bb:46:fb:27:90:14:94:
52:97:62:d1:38:4c:b3:32:37:96:cd:1d:30:33:29:
27:84:0b:81:db:c1:1a:3f:a7:10:ee:39:8f:26:c8:
e6:a4:81:d0:fe:53:7a:ad:d4:29:e0:27:d5:14:a3:
06:0d:b0:ce:81:95:04:eb:fa:b2:35:e0:dc:6f:81:
ae:88:0e:85:ce:55:3d:89:55:59:8a:6b:ca:1a:7f:
a7:6f:e1:00:9a:69:0a:b5:2b:90:68:6f:cb:59:01:
bc:d6:ac:22:ce:a2:92:d9:57:58:4c:cf:6e:5a:36:
3d:e3:34:29:c9:a0:05:e7:81:7f:d0:22:59:59:60:
4e:91:68:5e:a7:d6:ad:19:8a:c6:3a:2b:56:01:a3:
01:5d:99:0e:01:46:9a:2d:4a:91:46:f5:12:44:f3:
f6:0e:6f:89:1e:a5:17:d5:6d:4c:38:07:6b:94:67:
c4:de:f8:06:87:15:e7:1c:d8:15:e1:18:e2:c6:09:
aa:bb:15:b5:38:fe:20:b5:cf:d2:85:2b:95:65:28:
0a:13:21:f0:07:30:a1:7a:73:8f:9d:9f:d9:5e:4a:
7c:f5:6e:b9:cf:bd:55:7a:91:70:26:59:73:f3:34:
1b:dc:02:2a:c2:12:88:54:51:21:76:25:88:ba:cf:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E4:75:06:93:D2:82:AF:92:52:6B:21:88:7D:67:E9:12:A2:30:51
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LuR1BpPSgq-SUmshiH1n6RKiMFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.163.0/24
185.121.177.0/24
IPv6:
2a05:dfc7:5::/48
2a05:dfc7:5353::/48
2a05:dfc7:beef::/48
2a05:dfc7:dfc7::-2a05:dfc7:dfc8:ffff:ffff:ffff:ffff:ffff
2a06:1280:ce04::/47
2a06:9f40::/30
2a06:a005:8e0::/44
Signature Algorithm: sha256WithRSAEncryption
02:21:6e:c3:36:5c:cb:99:13:5c:8f:e0:31:8f:c5:06:c7:36:
5d:68:d0:2f:e5:d1:50:61:ab:b8:29:99:4e:a7:90:77:a2:da:
24:00:e5:cc:be:84:b1:2a:9b:90:6a:87:68:1c:19:6e:69:4b:
25:79:92:1d:e8:17:a4:44:1d:27:27:c2:04:1d:7d:1c:e9:6a:
da:bf:3e:7d:a4:17:47:ca:2b:bf:91:d8:98:6f:3e:8d:fb:b4:
0f:df:b3:a3:35:80:c2:ae:b1:65:a2:58:6b:bf:25:1b:50:1f:
cc:6d:06:e9:c2:29:90:a5:1d:ea:72:06:79:04:3c:81:d3:c6:
29:74:77:ad:b3:41:39:48:d0:9d:b7:d3:a2:ee:0b:4d:73:c9:
4f:49:9a:81:ac:6f:9b:d0:00:d1:87:30:5f:57:7f:55:3e:42:
3a:71:c9:0d:75:f8:15:04:dd:68:20:d0:df:c7:11:19:c9:61:
3d:ba:62:d7:60:57:19:6d:b7:97:97:3d:6d:fb:03:f8:c7:1f:
f6:7d:f9:6a:be:6b:4a:d6:33:a8:68:eb:fb:66:90:3f:14:c5:
2f:1f:5d:e5:59:82:2e:a1:d4:8f:2b:78:fb:63:c4:21:3b:8c:
80:ad:6f:e1:ff:e3:c1:e9:39:50:2f:b9:4a:8f:7b:7d:4d:a4:
18:11:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org