Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/LG-s0QQP8p6Fh4ovQ4a31mzB2po.roa
File: LG-s0QQP8p6Fh4ovQ4a31mzB2po.roa (raw, json)
Hash identifier: KjLzK7StvrhTu7hQLusAA+0mKb6KFTP7wZ75iR7sdMU=
Subject key identifier: 2C:6F:AC:D1:04:0F:F2:9E:85:87:8A:2F:43:86:B7:D6:6C:C1:DA:9A
Certificate issuer: /CN=aa9318ec68abf7fea3bc9972bca3bde8a14cbd54
Certificate serial: 0185719E6A2B04703436BFA57299A4DC52D8
Authority key identifier: AA:93:18:EC:68:AB:F7:FE:A3:BC:99:72:BC:A3:BD:E8:A1:4C:BD:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpMY7Gir9_6jvJlyvKO96KFMvVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/LG-s0QQP8p6Fh4ovQ4a31mzB2po.roa
Signing time: Mon 02 Jan 2023 08:34:45 +0000
ROA not before: Mon 02 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 193.163.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:6a:2b:04:70:34:36:bf:a5:72:99:a4:dc:52:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9318ec68abf7fea3bc9972bca3bde8a14cbd54
Validity
Not Before: Jan 2 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c6facd1040ff29e85878a2f4386b7d66cc1da9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:72:a2:90:3b:1c:29:4e:b7:f9:39:36:8f:
f8:4d:f8:8a:a5:ee:0d:1d:94:0a:da:c3:30:eb:18:
ff:be:e6:63:71:9c:0e:ca:5f:2f:f6:ee:a4:79:50:
ec:d4:9e:49:a1:1e:a6:0b:f6:be:04:87:50:66:fe:
e7:b2:c8:4a:97:50:d0:f9:2a:dd:b3:91:b5:42:92:
35:61:37:72:56:0e:f7:1f:49:1e:57:ef:53:b3:22:
a3:a7:de:06:27:81:83:37:04:5c:1a:ff:17:2c:e3:
57:ee:1c:ff:6f:13:7a:bf:4e:fa:50:95:41:93:5c:
af:fc:6e:18:aa:f2:82:a4:84:ee:27:92:c3:d5:d4:
26:8e:bb:c9:f2:af:64:3f:c6:2a:2a:ac:76:1d:e8:
19:48:93:ac:4d:71:10:a7:34:a0:2c:42:1a:75:c3:
7c:0b:8e:53:b6:4e:56:51:68:d3:7a:16:c1:62:54:
8b:dd:61:20:e2:21:db:cd:b9:96:17:e1:84:13:05:
25:af:fe:88:fe:71:32:28:87:96:90:8c:fd:57:50:
a4:e0:22:e4:c4:c2:8f:a7:49:a7:6a:d5:1f:cf:c4:
d9:bf:a6:5d:98:f2:be:8b:e1:27:80:8e:51:fa:34:
d5:fe:5e:a7:77:c3:65:20:60:58:84:ce:69:08:18:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6F:AC:D1:04:0F:F2:9E:85:87:8A:2F:43:86:B7:D6:6C:C1:DA:9A
X509v3 Authority Key Identifier:
keyid:AA:93:18:EC:68:AB:F7:FE:A3:BC:99:72:BC:A3:BD:E8:A1:4C:BD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpMY7Gir9_6jvJlyvKO96KFMvVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/LG-s0QQP8p6Fh4ovQ4a31mzB2po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/qpMY7Gir9_6jvJlyvKO96KFMvVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.207.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b5:81:c0:06:f3:e6:59:cc:fb:87:4f:1b:96:a7:40:5b:92:
ea:f2:73:93:89:24:40:2a:83:b5:cb:0e:2e:4d:47:d8:8f:d2:
1f:84:c5:37:85:86:70:20:e7:82:78:c9:60:5a:87:83:9f:49:
25:ca:f4:e2:c6:d9:48:9a:5e:e2:6d:06:ba:c0:27:71:21:d4:
75:f4:27:10:44:3b:5c:17:df:39:de:5b:42:6c:22:2d:f9:8c:
d8:86:93:41:42:32:35:fe:9b:b6:fe:a7:22:ff:e8:31:bf:e8:
12:de:ed:86:d8:b8:e4:22:b8:42:1b:b5:f3:4f:3b:c2:8e:fc:
75:2f:e8:86:2b:d3:25:d8:25:2f:da:35:cd:93:3b:90:f2:5c:
61:9c:06:81:d9:2d:b0:13:06:06:18:ea:d2:6e:1d:ef:54:33:
a6:ff:c5:1d:13:a4:95:fc:ec:62:d8:db:a3:10:2d:81:30:c8:
28:7a:aa:8c:cb:57:f2:bf:68:67:11:0a:b3:e9:35:57:76:8a:
1c:8d:97:4b:f6:6a:9b:11:b2:72:6c:c9:39:16:f2:c3:ee:60:
e1:69:d2:92:e3:d2:f3:8b:3a:1d:7a:6e:5e:ef:3b:3a:93:bb:
75:dd:fa:cb:4c:0d:95:8c:6c:a1:c6:87:2b:ab:f3:64:24:ee:
ca:6a:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:53 2024 by rpki-client on console-ams.rpki-client.org