Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/lAUqn4_ZebExbA4qTwNfJKVH9zA.roa
File: lAUqn4_ZebExbA4qTwNfJKVH9zA.roa (raw, json)
Hash identifier: 86xqUbg+J47l6f1LPAzczZn7yNcxSW9ACDQASQchYzQ=
Subject key identifier: 94:05:2A:9F:8F:D9:79:B1:31:6C:0E:2A:4F:03:5F:24:A5:47:F7:30
Certificate issuer: /CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
Certificate serial: 023F7772
Authority key identifier: AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/lAUqn4_ZebExbA4qTwNfJKVH9zA.roa
Signing time: Mon 03 Jan 2022 08:38:34 +0000
ROA not before: Mon 03 Jan 2022 08:38:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 156.118.4.0/24 maxlen: 24
156.118.0.0/24 maxlen: 24
156.118.2.0/24 maxlen: 24
156.118.8.0/24 maxlen: 24
156.118.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37713778 (0x23f7772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
Validity
Not Before: Jan 3 08:38:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94052a9f8fd979b1316c0e2a4f035f24a547f730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:e9:d1:59:0a:1a:b9:72:c5:62:4c:f6:56:
d3:3c:d0:4b:c9:2d:36:2e:89:ff:2c:4f:8d:4a:ee:
af:b0:a1:c8:be:16:38:7d:ab:cf:f9:01:b7:d5:c6:
5c:37:d3:e9:c8:87:87:ab:04:8c:77:49:7c:f2:bf:
be:f1:6b:77:e5:f0:02:e5:af:b1:8f:c4:71:74:f2:
7e:23:31:fe:37:ca:4f:5d:09:ef:2f:ec:36:91:5a:
a6:fb:b6:7d:99:08:eb:72:ef:84:89:7a:36:b3:e2:
34:6f:56:be:38:ac:e9:92:9a:b6:3e:fa:ae:b8:22:
56:94:23:b2:39:08:81:3c:c3:9e:69:e0:fe:f4:b2:
00:99:a8:97:22:ba:82:01:b8:c4:45:8d:3e:51:ea:
96:ba:2d:1f:46:f3:a0:36:d2:8d:3c:ba:66:b2:ea:
89:b2:4d:c6:c3:29:bd:02:76:e1:4c:dd:bf:a8:93:
ca:7a:10:ae:23:56:0a:4e:0e:c1:d8:c5:6e:eb:10:
80:24:e5:10:54:6c:60:70:fa:cb:82:44:ab:60:1e:
79:85:8a:05:c6:3b:5a:32:0d:42:91:fb:9d:fb:de:
58:7a:3d:13:a8:4e:7c:92:84:4b:13:4e:99:98:84:
07:1b:ec:4e:13:65:10:f5:eb:99:7b:0e:69:6c:bd:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:05:2A:9F:8F:D9:79:B1:31:6C:0E:2A:4F:03:5F:24:A5:47:F7:30
X509v3 Authority Key Identifier:
keyid:AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/lAUqn4_ZebExbA4qTwNfJKVH9zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.118.0.0/24
156.118.2.0/24
156.118.4.0/24
156.118.6.0/24
156.118.8.0/24
Signature Algorithm: sha256WithRSAEncryption
70:77:0e:10:c3:fe:18:07:8f:12:b4:66:40:29:f9:2e:52:76:
34:69:d5:15:fb:64:3e:2b:40:02:31:b8:a9:4e:e4:b8:dd:36:
7f:a7:6a:ba:10:42:f1:33:cb:aa:12:ae:45:78:68:c6:e9:55:
21:ea:80:b2:c9:93:ad:58:22:38:ea:d3:f5:89:7d:6f:64:50:
13:ed:61:17:21:b8:dc:28:6e:87:07:c6:58:f9:4f:e5:ad:ca:
dc:be:7d:4f:f1:29:8c:25:a5:9b:60:64:0e:81:cb:f2:92:d2:
54:b3:e5:92:74:dd:73:5d:d5:03:d2:2a:c2:fe:38:5f:1f:3d:
30:7d:8f:a6:d7:74:87:ee:e1:66:d9:42:7a:ac:52:59:0a:ce:
25:51:e9:14:ee:bf:8b:25:2d:1d:49:3c:1b:de:c0:60:74:c1:
ec:d9:67:2e:b8:94:41:7d:c3:51:66:a6:e0:d0:10:57:0c:15:
c8:d5:27:b5:cd:25:6f:ca:8d:2d:20:66:7c:99:72:d9:14:1b:
22:b4:3a:ea:dd:66:8f:6e:17:a8:d0:7c:a3:95:e0:34:52:dd:
5e:03:73:4d:2a:73:d8:e4:85:63:71:39:48:30:44:8d:c2:ec:
a8:e7:fa:71:dd:50:c1:6b:13:a4:59:1a:f9:46:fb:07:9f:e6:
1c:e3:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:34 2024 by rpki-client on console-fra.rpki-client.org