Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/LIUBOme4i3T1_sE9grXjIqJaqWM.roa
File: LIUBOme4i3T1_sE9grXjIqJaqWM.roa (raw, json)
Hash identifier: 9b6FtmnAOZpb4OwgQtCpwazQSvzoZOmA1DuDgV4f1T0=
Subject key identifier: 2C:85:01:3A:67:B8:8B:74:F5:FE:C1:3D:82:B5:E3:22:A2:5A:A9:63
Certificate issuer: /CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Certificate serial: 01856F4B8EC32389FB2363B01122BAB20B2A
Authority key identifier: D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/LIUBOme4i3T1_sE9grXjIqJaqWM.roa
Signing time: Sun 01 Jan 2023 21:45:00 +0000
ROA not before: Sun 01 Jan 2023 21:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47264
IP address blocks: 185.75.240.0/24 maxlen: 24
2a05:5500:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:8e:c3:23:89:fb:23:63:b0:11:22:ba:b2:0b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Validity
Not Before: Jan 1 21:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c85013a67b88b74f5fec13d82b5e322a25aa963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:55:9e:ca:f7:56:41:90:e5:e4:9c:03:91:89:
b2:17:5d:57:33:52:9f:3d:10:ed:eb:0c:d2:b8:cd:
a8:3d:1b:0f:5f:59:17:65:8f:01:75:49:42:a9:a2:
15:31:d9:4a:0e:30:b4:32:73:01:b9:30:11:fc:09:
95:74:cf:1b:4b:65:15:81:f7:05:7d:5e:56:2e:d9:
ce:9f:c5:f9:97:69:12:77:78:8b:68:f9:c2:5f:05:
4c:83:c8:02:49:f9:df:84:eb:fe:ea:9c:08:f5:28:
54:19:83:7e:41:2a:f9:ed:5b:cf:10:e9:31:ef:0c:
49:42:66:8b:e3:8f:78:c6:3e:52:45:27:3c:95:66:
cc:cb:11:b9:58:fe:66:0d:17:8d:4e:84:7a:51:aa:
a7:c5:e1:f8:32:ea:a6:66:6f:bf:e7:90:14:bf:06:
fe:97:e4:24:2f:94:74:56:f5:c8:7e:04:10:dc:33:
67:30:50:65:3a:95:c6:22:fd:d4:9d:20:42:6c:0a:
b0:52:93:08:e9:8a:c2:1b:ad:de:39:e9:89:3f:be:
2a:d0:4c:e4:e6:03:94:54:43:6b:19:f5:1a:2f:0a:
52:f7:c6:c7:33:e1:dc:50:eb:6f:ce:66:1b:17:1c:
e2:c7:09:9f:2b:f1:a8:ce:76:1d:e1:02:ca:50:ac:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:01:3A:67:B8:8B:74:F5:FE:C1:3D:82:B5:E3:22:A2:5A:A9:63
X509v3 Authority Key Identifier:
keyid:D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/LIUBOme4i3T1_sE9grXjIqJaqWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.240.0/24
IPv6:
2a05:5500:11::/48
Signature Algorithm: sha256WithRSAEncryption
3a:53:2f:fa:08:e0:ae:c6:d5:96:dc:c1:fd:28:7b:44:0a:84:
d1:d4:c1:c1:21:e9:70:09:5c:3d:ab:b7:fa:1d:ae:49:63:e5:
25:cf:f1:c5:22:eb:02:b7:eb:14:f1:26:a2:6e:2e:d8:93:30:
db:ed:21:f6:16:69:59:99:c3:93:cd:54:c2:6a:0d:88:e9:50:
69:c2:46:3a:f7:3b:14:76:07:c2:ac:72:e7:03:5b:92:cf:b8:
07:0e:ec:84:e0:b8:d3:5f:27:2e:5c:eb:99:a2:2a:2b:d7:26:
8a:ce:d6:25:fa:78:a2:ca:fd:56:3e:44:0c:0e:b8:14:88:2d:
32:ed:af:61:34:e6:dc:b8:87:9e:5a:dc:97:bb:0b:3e:16:0d:
9e:09:6e:cd:41:e1:a6:da:e8:13:ff:41:39:30:76:2e:fc:e7:
7e:60:a4:48:05:c9:f4:db:e8:a4:30:1d:46:c5:f2:ef:e1:c7:
ea:5f:92:b6:df:98:22:aa:bc:5d:c4:f6:5e:10:32:ef:40:77:
7a:93:a6:f8:24:5d:2e:a2:88:69:a3:57:f5:01:92:a8:65:c8:
63:ee:c5:9a:8e:14:b0:a8:d9:bc:d4:88:62:f5:eb:31:93:aa:
ad:23:ca:14:69:e6:54:cb:ae:77:58:25:81:94:f3:23:c6:a0:
3e:6d:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-fra.rpki-client.org