Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/LU-KA-QSFhGOd_7HggQ24gkOqH0.roa
File: LU-KA-QSFhGOd_7HggQ24gkOqH0.roa (raw, json)
Hash identifier: r8Xr/28Wn/66g6sTtEakewwQfdhTjOn4wL0YD8NiKJ0=
Subject key identifier: 2D:4F:8A:03:E4:12:16:11:8E:77:FE:C7:82:04:36:E2:09:0E:A8:7D
Certificate issuer: /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial: 0186EF2CAA6E2FDF3434B94A10F047F44EC3
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/LU-KA-QSFhGOd_7HggQ24gkOqH0.roa
Signing time: Fri 17 Mar 2023 10:45:27 +0000
ROA not before: Fri 17 Mar 2023 10:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ef:2c:aa:6e:2f:df:34:34:b9:4a:10:f0:47:f4:4e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
Validity
Not Before: Mar 17 10:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d4f8a03e41216118e77fec7820436e2090ea87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:93:53:d7:a4:27:66:f7:21:9c:72:b8:27:
3c:24:e1:78:8f:32:ce:50:5b:84:60:c5:52:45:41:
57:8e:c3:6f:be:6f:75:31:fc:ce:61:f3:c6:cc:6c:
1d:91:3e:08:8c:4d:f8:96:b2:a9:bb:f2:b9:90:ef:
05:fd:e0:aa:47:7a:9c:cd:46:12:13:9e:90:d4:1f:
e7:94:85:4c:d7:7e:6d:6c:5f:48:d6:a2:36:18:85:
2a:2a:42:f5:bb:84:de:19:93:29:45:a6:97:8e:19:
19:1b:23:67:9f:0b:7f:c8:a9:82:e7:42:17:bb:75:
bc:6b:23:0e:d0:94:09:53:f1:0d:d0:cf:c0:97:d5:
4c:2a:3b:ea:dd:84:7a:b1:55:47:dc:64:09:b0:01:
fd:dc:aa:e2:f9:0b:bb:a8:ce:b0:16:d4:a0:9e:60:
a2:91:3f:7b:ac:03:38:82:87:66:75:f5:72:9e:3f:
59:0f:16:2b:75:f9:88:ef:5c:29:3a:90:59:51:59:
1d:19:c1:97:38:38:c6:c0:a3:2e:17:92:e0:c2:11:
c7:f5:02:0f:74:fd:f9:5f:09:8e:19:45:b5:c9:32:
be:59:fe:85:10:f7:b0:07:ee:a5:90:0d:e0:b6:36:
8d:d2:d6:73:6c:c5:a5:3e:96:89:ad:68:97:60:19:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4F:8A:03:E4:12:16:11:8E:77:FE:C7:82:04:36:E2:09:0E:A8:7D
X509v3 Authority Key Identifier:
keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/LU-KA-QSFhGOd_7HggQ24gkOqH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:30:3e:94:bb:fd:77:41:55:0a:95:ee:5f:78:d9:13:2b:43:
15:70:c5:78:8a:95:87:8e:e6:a8:6a:74:9b:90:f7:e2:39:76:
f8:e7:8c:32:d1:3b:3d:f7:ff:2b:be:14:fc:ae:c8:93:77:1f:
4b:f3:31:4c:55:26:fe:37:14:08:74:2d:88:09:e5:f2:51:da:
58:59:1e:6d:aa:bf:71:a5:3f:e7:1a:7b:5c:99:86:c2:76:b0:
2d:bf:4f:45:d7:ed:66:70:53:92:0d:22:86:23:f5:9c:60:01:
08:15:d3:a3:7d:8b:b5:5a:f7:d9:a2:0f:18:06:1f:dc:9f:1a:
8f:1b:3c:30:08:70:c6:f8:69:67:38:32:75:9b:4f:a2:52:83:
d8:c8:54:d7:19:1b:48:21:30:1d:08:c7:8b:fe:21:02:d1:98:
34:04:cb:4c:5c:68:49:41:98:d7:c8:29:7b:84:4f:b6:e4:67:
22:29:f3:a7:67:5c:52:0a:f9:59:04:da:38:09:ec:56:54:4e:
f0:6b:1b:db:58:fd:9c:36:17:15:21:10:3e:8e:76:06:47:af:
24:51:f3:b6:ce:03:33:93:db:44:92:db:89:ff:2d:29:ae:6a:
b6:f7:fa:29:2b:98:00:60:44:ac:c3:97:c2:bd:d3:5d:b1:36:
6b:34:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:46 2024 by rpki-client on console-ams.rpki-client.org