Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/LbaoArbDMjzAb6GYMJIT3X8uGwc.roa
File: LbaoArbDMjzAb6GYMJIT3X8uGwc.roa (raw, json)
Hash identifier: MSTLKL0dPM9Pn85PvjfC7GNjK2lexuWh6vT7lphn5hY=
Subject key identifier: 2D:B6:A8:02:B6:C3:32:3C:C0:6F:A1:98:30:92:13:DD:7F:2E:1B:07
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0181EE1C70034FA630B1F3F643A0BF62A505
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/LbaoArbDMjzAb6GYMJIT3X8uGwc.roa
Signing time: Mon 11 Jul 2022 16:34:09 +0000
ROA not before: Mon 11 Jul 2022 16:34:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 85.255.125.0/24 maxlen: 24
85.255.123.0/24 maxlen: 24
85.255.122.0/24 maxlen: 24
85.255.121.0/24 maxlen: 24
85.255.120.0/24 maxlen: 24
85.255.126.0/24 maxlen: 24
85.255.127.0/24 maxlen: 24
178.212.205.0/24 maxlen: 24
178.212.204.0/24 maxlen: 24
178.212.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ee:1c:70:03:4f:a6:30:b1:f3:f6:43:a0:bf:62:a5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Jul 11 16:34:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db6a802b6c3323cc06fa198309213dd7f2e1b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:42:3b:fc:ba:a6:a2:ec:f1:47:de:b4:82:9b:
24:f3:6f:64:2f:6a:63:bb:7e:4c:41:8c:75:63:75:
1c:8f:f7:c6:2e:fb:be:35:88:3d:93:93:b8:24:21:
8d:68:94:73:76:a5:23:ca:ff:2c:25:9f:2e:61:0d:
a2:59:5b:9c:bd:58:c9:30:bb:7c:4a:5f:3d:dc:3e:
82:b7:e0:9c:68:9a:33:1b:b4:d5:70:0f:a5:4b:39:
df:c6:0c:43:71:11:d8:0c:7b:ed:77:48:55:f1:5e:
81:63:4e:c1:d4:ca:ec:3d:52:63:50:75:a0:7f:5f:
6e:ac:43:0c:d5:13:0d:e5:ab:4d:8b:ce:3d:9f:0c:
ac:6e:a8:1a:ac:7f:1a:c5:2f:24:80:0d:cc:8c:b3:
1a:07:49:d1:07:bc:99:a3:fb:b4:d2:2c:07:9b:c2:
d1:cd:04:71:9a:09:13:42:11:06:e7:f4:2b:73:12:
49:82:7a:04:97:9a:37:a2:28:5f:f1:c8:80:36:93:
52:dd:d1:e3:a3:5e:e0:38:c7:ac:b7:e3:b5:86:bb:
e3:6c:dc:c1:49:c5:d0:10:b3:71:37:66:34:07:53:
ba:c9:71:11:1e:f4:ae:b4:f9:90:dd:f8:18:fc:72:
23:f8:41:bc:1e:4e:36:72:bc:2c:6f:af:fb:03:ab:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:A8:02:B6:C3:32:3C:C0:6F:A1:98:30:92:13:DD:7F:2E:1B:07
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/LbaoArbDMjzAb6GYMJIT3X8uGwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.120.0/22
85.255.125.0-85.255.127.255
178.212.203.0-178.212.205.255
Signature Algorithm: sha256WithRSAEncryption
51:b6:46:12:83:aa:10:db:78:31:4a:d2:64:ca:f5:1a:a7:18:
03:c4:45:64:f2:07:de:fe:4d:7e:11:b7:e1:ff:a9:f8:9a:85:
d7:75:11:ca:3c:78:39:a0:c1:b4:62:34:d7:87:d1:85:26:5d:
4f:cf:e0:83:09:c5:4d:40:ba:34:f8:f1:be:cd:cb:c3:df:75:
d0:6a:a2:fd:9a:c1:e6:d1:1b:b3:5d:38:f7:0b:b8:ed:dc:bb:
c6:d3:f2:e6:8b:5a:2c:9e:9d:60:4f:81:76:a5:0c:a8:b3:a7:
37:bd:7b:54:52:75:5a:10:0c:43:85:68:8d:94:1e:5a:99:e3:
08:7a:79:33:8d:75:d6:9f:a5:6f:16:07:07:e7:d8:22:5e:d1:
5a:a7:65:ae:58:27:7d:dc:6b:71:11:a5:a1:b1:1c:8b:30:c0:
e6:51:cc:c6:80:e1:b5:c0:c6:28:a6:05:0f:62:f9:26:fc:6b:
e8:18:91:ab:d9:2d:c3:36:73:e3:17:06:f6:c0:f9:92:81:f6:
12:cf:9e:c3:37:72:6e:a2:4e:23:8b:61:54:55:83:ee:bd:4a:
91:fc:02:81:c2:79:ad:3f:3e:e8:fa:e0:fd:24:d0:30:49:28:
af:8f:8f:db:e0:95:2b:88:0d:d5:86:d0:ea:ed:69:be:52:f9:
6a:16:16:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:46 2024 by rpki-client on console-ams.rpki-client.org