Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/lHedAzTdHZVnnH6oqIUffkCEu7U.roa
File: lHedAzTdHZVnnH6oqIUffkCEu7U.roa (raw, json)
Hash identifier: xncWADSIp37XXjBdRbUeJ2sIPfCkluAmtNVKHA1P/yo=
Subject key identifier: 94:77:9D:03:34:DD:1D:95:67:9C:7E:A8:A8:85:1F:7E:40:84:BB:B5
Certificate issuer: /CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Certificate serial: 177F9463
Authority key identifier: 70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/lHedAzTdHZVnnH6oqIUffkCEu7U.roa
Signing time: Wed 30 Mar 2022 04:57:38 +0000
ROA not before: Wed 30 Mar 2022 04:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34655
IP address blocks: 95.128.120.0/24 maxlen: 24
109.71.165.0/24 maxlen: 24
2a03:9c40:800::/48 maxlen: 48
2a03:9c40:600::/48 maxlen: 48
2a03:9c40:400::/48 maxlen: 48
2a03:9c40:200::/48 maxlen: 48
2a03:9c40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394237027 (0x177f9463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Validity
Not Before: Mar 30 04:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94779d0334dd1d95679c7ea8a8851f7e4084bbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:78:c9:59:fa:fe:8d:00:75:13:a1:93:f1:
59:b7:1d:28:ec:75:9d:c8:c1:24:a4:d5:1d:cc:ba:
ee:4c:3b:f4:1e:ca:66:a3:01:64:4f:b6:fc:1c:92:
86:37:ae:0a:66:a5:b5:50:d6:aa:15:26:58:e2:b7:
04:11:22:b0:c7:13:87:69:fe:55:99:8f:6f:75:bb:
d6:8b:a1:3a:82:b4:f2:9c:fd:77:44:42:32:6a:1a:
28:f5:43:3a:60:f2:08:ca:83:1d:00:8b:59:a3:b0:
3b:40:18:8b:b6:91:46:5b:f9:77:cc:4c:55:90:e1:
ab:5a:a6:5d:ae:42:fd:d8:fd:3a:c0:1c:11:10:a2:
c7:1a:1f:07:6f:07:cd:6c:24:ac:ab:dc:ca:7d:d2:
62:51:9a:8b:9c:86:06:43:d4:70:fd:2f:69:5d:95:
42:d7:b8:55:f8:9f:1f:58:e6:dc:b2:7d:b7:58:64:
31:cc:a7:2b:52:4c:d9:6e:21:61:2c:3e:23:8d:7f:
e2:06:e4:c6:10:23:10:2b:f8:da:43:34:9c:67:80:
16:50:95:8e:85:95:92:fa:6f:71:b6:98:3f:d6:fc:
69:88:2f:1d:b1:91:02:ea:ca:1b:4a:5e:5f:c8:e2:
36:e5:86:2e:77:65:02:8f:37:34:89:fa:ad:cc:ef:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:77:9D:03:34:DD:1D:95:67:9C:7E:A8:A8:85:1F:7E:40:84:BB:B5
X509v3 Authority Key Identifier:
keyid:70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/lHedAzTdHZVnnH6oqIUffkCEu7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/cE6wMksWcpndYGTbvzQNL5nEAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.120.0/24
109.71.165.0/24
IPv6:
2a03:9c40::/48
2a03:9c40:200::/48
2a03:9c40:400::/48
2a03:9c40:600::/48
2a03:9c40:800::/48
Signature Algorithm: sha256WithRSAEncryption
3d:87:81:26:37:5e:d6:54:56:8a:cb:c4:1b:16:5f:c7:2d:91:
f7:ea:c5:9f:0c:e2:f1:5d:62:8f:70:6d:a2:53:dc:e6:a8:b7:
18:33:75:b8:ac:6f:77:24:b6:ac:7c:ee:d8:af:0e:b9:a0:9b:
d4:75:c8:ac:f8:01:16:04:01:fb:26:51:c4:8b:14:0f:5e:66:
5e:72:0c:e9:27:a2:58:14:b0:0d:3c:b9:39:d7:36:9c:92:b0:
93:20:f4:91:52:ba:87:ee:89:25:ac:94:aa:d6:57:8d:71:8b:
a4:29:65:4f:2e:7e:6c:b3:0c:27:a0:d6:af:a8:df:79:b6:aa:
2b:d5:2d:29:80:19:b6:89:bd:cf:e2:10:8f:b9:59:7a:25:44:
19:25:82:77:00:e6:34:f6:b0:b9:f6:db:1f:4d:54:bd:61:75:
d1:98:47:3e:ff:64:61:3c:79:34:3d:97:c0:6f:ad:a0:1f:5d:
32:6f:5d:dc:66:f4:70:04:59:54:92:81:bd:c7:b3:50:2c:6f:
d0:f1:b4:de:7b:40:42:37:e8:ec:f9:b2:4d:d0:ca:35:8f:fe:
a9:2a:2b:d8:ca:51:6c:cf:25:03:70:19:ab:42:d9:58:87:17:
80:2d:3f:39:83:4e:f4:ea:2b:fc:cd:9a:9e:ca:81:af:c1:ae:
64:02:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:56 2024 by rpki-client on console-fra.rpki-client.org