Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/LbeDXKc7hbw8n9ixeWqdGihO8WU.roa
File: LbeDXKc7hbw8n9ixeWqdGihO8WU.roa (raw, json)
Hash identifier: u3U9Ju7juC4T2BGXwQwtq8UICdMH10KlzHYFpFDqG60=
Subject key identifier: 2D:B7:83:5C:A7:3B:85:BC:3C:9F:D8:B1:79:6A:9D:1A:28:4E:F1:65
Certificate issuer: /CN=ba94caab27375edf61bf8c99cc1c2b6abbafff15
Certificate serial: 018571D7E1D1CF8918628F744F994E776009
Authority key identifier: BA:94:CA:AB:27:37:5E:DF:61:BF:8C:99:CC:1C:2B:6A:BB:AF:FF:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upTKqyc3Xt9hv4yZzBwraruv_xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/LbeDXKc7hbw8n9ixeWqdGihO8WU.roa
Signing time: Mon 02 Jan 2023 09:37:31 +0000
ROA not before: Mon 02 Jan 2023 09:37:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 185.94.32.0/22 maxlen: 22
185.68.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:e1:d1:cf:89:18:62:8f:74:4f:99:4e:77:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba94caab27375edf61bf8c99cc1c2b6abbafff15
Validity
Not Before: Jan 2 09:37:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2db7835ca73b85bc3c9fd8b1796a9d1a284ef165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:99:aa:0b:4d:0b:4b:8f:ea:87:9e:f5:5c:
19:b7:61:c6:a5:6c:c7:bb:14:1d:36:f9:b8:cc:6b:
3f:e1:28:ff:c6:53:22:20:05:aa:83:00:9d:a0:ac:
d3:30:78:10:8e:4e:0b:ec:4f:4c:91:25:f3:d1:10:
5d:b9:75:0c:50:99:08:a9:ba:a1:c6:54:53:e7:d3:
e0:81:02:fe:1f:0b:93:f1:fa:a9:fc:f7:4a:60:40:
b4:a4:7f:10:ef:4c:bf:23:7b:7e:52:83:c4:4d:e3:
d4:d0:e9:40:ab:79:29:89:e4:03:f1:e2:b4:25:ec:
33:72:c3:df:fd:e9:31:c1:cf:4a:81:ac:aa:13:9a:
75:7b:e0:6c:9b:29:e6:b7:28:2c:51:da:5e:50:5f:
4c:85:8d:6b:66:9d:46:44:07:4b:97:28:48:d2:04:
90:c8:b8:04:bb:ac:29:03:9f:b7:f1:96:96:59:93:
eb:6d:bd:f1:1d:bd:72:6e:bd:5e:41:64:33:44:6e:
70:7d:40:e7:2d:41:16:97:1e:3f:79:de:15:ab:fd:
46:5a:c5:4a:b6:0e:99:d5:e8:72:97:20:77:27:d2:
36:6a:da:2e:7d:07:b5:b3:a1:2f:c3:f7:62:cd:3f:
30:a9:93:b3:ca:95:ca:b0:02:86:02:ec:ed:ec:6f:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:83:5C:A7:3B:85:BC:3C:9F:D8:B1:79:6A:9D:1A:28:4E:F1:65
X509v3 Authority Key Identifier:
keyid:BA:94:CA:AB:27:37:5E:DF:61:BF:8C:99:CC:1C:2B:6A:BB:AF:FF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upTKqyc3Xt9hv4yZzBwraruv_xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/LbeDXKc7hbw8n9ixeWqdGihO8WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/upTKqyc3Xt9hv4yZzBwraruv_xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.152.0/22
185.94.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:1c:80:b0:ec:d0:99:1b:61:78:fa:b5:da:69:e3:6b:0c:77:
c3:26:e0:66:1d:be:46:20:db:97:f2:38:7c:35:61:0f:ac:0a:
fd:51:45:81:f4:65:58:fd:a9:2e:b7:9e:30:ed:2b:40:95:e9:
aa:3c:33:29:67:8a:bd:ee:1b:d7:8f:27:76:7c:ba:f4:7d:e8:
33:5e:f0:39:92:47:ed:85:5a:01:2b:a5:a7:63:d3:25:0d:30:
03:a1:b4:5e:9a:2a:db:34:33:10:8e:82:98:63:a9:97:35:6c:
da:86:cc:6a:5d:9a:0f:b0:02:1e:32:61:3e:56:5b:7e:37:c9:
d4:39:a9:57:f0:08:47:78:6e:f5:72:18:70:f9:c5:40:b2:32:
f0:9d:3d:28:7d:fa:10:60:32:e3:10:bc:c1:76:15:7b:06:49:
c9:20:98:1b:b5:2a:ca:d1:88:8d:d4:6c:e2:3d:4f:4b:4f:ba:
59:0b:2b:b0:da:81:c3:3c:a1:65:2a:8e:44:58:fb:c3:15:a3:
60:8e:54:ed:0b:c1:1f:07:1b:17:02:68:f8:c1:1e:c8:c7:b9:
20:a6:9c:a2:a2:18:f3:03:72:87:9e:3d:ad:ae:d9:80:e4:f3:
3a:e7:e0:2e:c6:7a:c9:da:58:67:2e:92:45:cc:9b:dc:fb:5f:
a2:01:5c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:41 2024 by rpki-client on console-ams.rpki-client.org