Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Lao2xNJUTVOZ6y5Yjwe4u0cIowU.roa
File: Lao2xNJUTVOZ6y5Yjwe4u0cIowU.roa (raw, json)
Hash identifier: f/rPCQq9pM2Xt4H03zuDR4x+B0irLZDlJlpuddPQhx8=
Subject key identifier: 2D:AA:36:C4:D2:54:4D:53:99:EB:2E:58:8F:07:B8:BB:47:08:A3:05
Certificate issuer: /CN=371e04ff185b50b9e61ec5f46e2b10877491d882
Certificate serial: 01856CCAF90D86D680B3A3008BC914D6F67E
Authority key identifier: 37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Lao2xNJUTVOZ6y5Yjwe4u0cIowU.roa
Signing time: Sun 01 Jan 2023 10:05:19 +0000
ROA not before: Sun 01 Jan 2023 10:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200020
IP address blocks: 193.105.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f9:0d:86:d6:80:b3:a3:00:8b:c9:14:d6:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371e04ff185b50b9e61ec5f46e2b10877491d882
Validity
Not Before: Jan 1 10:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2daa36c4d2544d5399eb2e588f07b8bb4708a305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:81:35:d4:2a:38:d8:e0:a5:46:ec:dc:55:
d9:c2:da:28:b9:32:cd:d2:d2:dc:e1:7a:91:5a:23:
e1:2e:31:26:20:8d:a0:30:57:1a:cb:e5:96:72:9e:
1d:7c:e4:ea:88:15:8f:09:5f:15:a6:53:a0:4a:a0:
62:af:75:ef:9e:e1:eb:80:d6:36:d3:57:4a:ef:86:
cd:41:ed:f8:53:41:98:e0:48:f9:2a:62:9b:ae:c6:
5e:18:5f:79:8c:5d:c3:04:66:40:cb:c0:b8:9a:82:
bd:a0:6f:31:d8:59:85:6d:1d:8e:37:d9:f1:5b:c4:
53:10:f9:82:bd:08:bc:6d:7d:8d:b7:c0:ed:44:8a:
80:c0:a3:22:0a:d6:e3:45:d7:45:04:49:cb:f5:f3:
4f:b7:86:5f:0f:cc:1a:ac:2e:77:b1:67:c0:2c:9b:
49:6a:b2:e5:6b:1a:c5:a9:da:30:77:e8:d2:84:85:
0e:55:a7:da:db:54:e2:6a:37:43:bc:cc:45:5b:75:
ff:70:b2:c3:d7:27:be:fb:60:0f:b7:40:5a:3b:af:
1c:f4:3a:cd:45:4e:c9:a2:7b:48:98:77:ef:19:fa:
c1:aa:57:42:ac:dc:a9:49:d7:b5:4a:9e:b9:fd:24:
2f:f6:98:17:90:3e:ed:dd:2e:81:fb:64:f1:2e:27:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AA:36:C4:D2:54:4D:53:99:EB:2E:58:8F:07:B8:BB:47:08:A3:05
X509v3 Authority Key Identifier:
keyid:37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Lao2xNJUTVOZ6y5Yjwe4u0cIowU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Nx4E_xhbULnmHsX0bisQh3SR2II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.144.0/24
Signature Algorithm: sha256WithRSAEncryption
28:50:91:cc:09:fe:76:1a:82:15:91:ba:3f:54:8d:c5:a3:72:
72:f1:95:0f:96:2b:9a:35:d4:ba:6d:5f:08:72:ca:f7:cc:7f:
a1:1c:31:af:51:25:50:7a:3b:78:3c:5d:eb:ab:46:aa:2e:35:
e3:96:86:66:ee:48:dd:1c:38:3b:35:7f:5e:97:f1:b4:69:e4:
6e:3f:80:fc:f5:9b:92:4e:7f:32:9e:2e:1b:af:f3:d9:07:bc:
9b:a1:fc:2b:b2:45:f6:2e:dc:32:be:fc:2a:48:4e:58:08:69:
86:e5:19:57:5d:89:cb:ac:92:6c:1a:bd:c0:24:47:ca:36:c3:
50:82:74:7f:7b:a2:fa:e4:c3:e0:57:9c:3f:ea:54:66:06:be:
a2:be:e8:1f:42:21:b9:a9:43:a4:d0:51:8c:8c:61:0b:00:ea:
3e:d1:85:92:4e:79:da:b9:cb:10:e5:f0:b3:72:ca:62:f4:1b:
39:d6:a9:15:c8:cb:8f:3d:cd:b0:d2:d7:71:22:f1:a4:33:b9:
6f:29:76:ac:97:28:37:0a:23:d9:a5:94:c6:96:a4:ae:04:12:
d9:98:2f:9f:aa:ea:03:f7:f6:3c:62:6a:a3:f9:97:03:ea:b9:
b2:c9:3b:83:c8:b8:c2:56:ed:5f:e4:22:8c:f2:60:a2:5b:2a:
26:c1:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org