Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/LbOLsbut51cQLdBkJDTEXwFV_0M.roa
File: LbOLsbut51cQLdBkJDTEXwFV_0M.roa (raw, json)
Hash identifier: +9+XCx0natl4OC54FLP4wzqM2qF+zFcN1RnGgiIa+e8=
Subject key identifier: 2D:B3:8B:B1:BB:AD:E7:57:10:2D:D0:64:24:34:C4:5F:01:55:FF:43
Certificate issuer: /CN=057a0525a9781c22652b9fbdbf0298900eee161c
Certificate serial: 018262F77EA05E56B0EE03988028D96079EF
Authority key identifier: 05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/LbOLsbut51cQLdBkJDTEXwFV_0M.roa
Signing time: Wed 03 Aug 2022 09:09:23 +0000
ROA not before: Wed 03 Aug 2022 09:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44788
IP address blocks: 178.250.0.0/22 maxlen: 24
178.250.4.0/22 maxlen: 24
91.199.242.0/24 maxlen: 24
185.235.84.0/24 maxlen: 24
185.235.86.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
2a02:2638::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:f7:7e:a0:5e:56:b0:ee:03:98:80:28:d9:60:79:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057a0525a9781c22652b9fbdbf0298900eee161c
Validity
Not Before: Aug 3 09:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db38bb1bbade757102dd0642434c45f0155ff43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:4d:73:5d:83:05:a7:1e:f9:e9:49:bc:0b:
37:75:f8:34:76:db:32:6c:2f:de:d0:9f:37:03:5c:
6f:98:b7:f4:7b:51:d0:87:7c:a5:19:4e:fb:ce:9e:
ab:28:8d:7c:ed:ea:00:0c:3b:f0:12:d0:b9:e3:67:
ab:e2:34:b9:37:33:30:e5:e4:f0:a1:2f:83:3a:f8:
0a:e9:b7:f5:9f:fc:27:52:d7:5b:60:b6:27:8f:c6:
35:6a:2b:cf:e8:c8:53:2c:35:f1:bb:56:8e:73:52:
1f:06:08:b9:9f:d8:58:33:d3:e2:23:70:35:76:d6:
3b:41:b4:1c:1c:ad:7d:76:bd:36:6f:c1:7a:cd:92:
18:d4:b0:3a:97:cb:f3:cb:72:ff:e7:ad:bf:48:a1:
07:ed:4d:42:8c:6b:30:fa:ab:83:be:98:5a:b5:15:
a1:af:a4:bb:87:68:96:3e:f4:b6:d5:6c:29:8c:d5:
c1:f9:9b:f4:e6:0b:a6:f4:0e:db:d3:38:e9:ad:41:
08:1d:df:04:3e:1a:3c:a7:eb:63:96:1c:33:de:dc:
cd:c6:c8:f5:b9:43:64:8b:df:cf:c6:a6:e8:d8:49:
18:7d:2b:aa:8c:9b:05:7e:b3:e4:b1:53:54:72:1d:
fd:8a:8e:4f:7a:20:78:bc:e3:7c:93:1e:bf:43:7e:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B3:8B:B1:BB:AD:E7:57:10:2D:D0:64:24:34:C4:5F:01:55:FF:43
X509v3 Authority Key Identifier:
keyid:05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/LbOLsbut51cQLdBkJDTEXwFV_0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
178.250.0.0/21
185.235.84.0/24
185.235.86.0/24
IPv6:
2a02:2638::/32
Signature Algorithm: sha256WithRSAEncryption
97:ea:67:82:7e:1e:d0:e1:fd:68:b7:d3:5c:8b:be:24:9e:33:
6c:37:f5:c1:8e:45:e1:8f:6d:a5:59:76:43:4b:af:11:6e:c5:
7f:6e:be:34:2b:80:17:af:2d:e3:5b:c4:2b:aa:7d:0b:6d:4b:
76:10:e2:0d:da:d9:93:0e:80:ff:8a:96:7c:81:11:4f:d9:ae:
24:0a:5e:4a:1a:a2:f5:e6:66:11:37:d1:5e:29:e8:33:65:4f:
d9:86:94:7b:5f:9b:ba:d7:a2:38:a7:d8:68:61:1d:0c:04:5a:
73:a9:7a:0f:d7:11:bd:49:f6:bf:01:54:90:1e:46:3f:46:3c:
fb:0f:a4:7f:61:17:9a:b5:59:c2:52:1e:4d:cb:69:a2:84:b1:
73:ee:5e:3b:5b:f8:29:bf:89:d4:e3:d6:c3:66:f0:f8:0f:0a:
f2:3f:19:0f:eb:bb:e5:fc:72:da:f9:b0:e3:4d:49:05:e1:f4:
ac:99:a7:b6:44:e5:5b:52:87:7d:dd:e1:45:2b:53:d3:e0:4a:
34:85:7a:e5:85:5a:b3:f5:fd:6a:e9:ad:30:62:97:51:47:e6:
66:77:92:ba:b8:6d:fd:52:6e:90:8f:95:5e:05:a1:22:f7:44:
98:32:40:e1:45:4a:91:f4:34:fe:32:19:0b:7d:59:ee:12:85:
f0:1c:fe:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-fra.rpki-client.org