Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/Llx_99tzcf7IKAg7py0H5emf3lk.roa
File: Llx_99tzcf7IKAg7py0H5emf3lk.roa (raw, json)
Hash identifier: 8AbB/oPe7uVEaEm5PC2SlbFuphNc66esxOBM+z1neKw=
Subject key identifier: 2E:5C:7F:F7:DB:73:71:FE:C8:28:08:3B:A7:2D:07:E5:E9:9F:DE:59
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 01857094FE4D06B860407FB341DFA5059375
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/Llx_99tzcf7IKAg7py0H5emf3lk.roa
Signing time: Mon 02 Jan 2023 03:44:50 +0000
ROA not before: Mon 02 Jan 2023 03:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.28.156.0/24 maxlen: 25
194.28.158.0/24 maxlen: 25
194.104.4.0/24 maxlen: 25
212.69.132.0/24 maxlen: 24
194.104.5.0/24 maxlen: 25
194.104.6.0/24 maxlen: 25
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:fe:4d:06:b8:60:40:7f:b3:41:df:a5:05:93:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jan 2 03:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e5c7ff7db7371fec828083ba72d07e5e99fde59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:b6:92:bf:de:87:30:ea:49:bb:c5:05:c4:
21:1c:2b:6c:4b:32:b0:76:fe:b0:98:cc:ae:15:8c:
f1:22:12:e1:a5:49:c5:3f:2f:67:b6:db:f0:1f:bf:
d0:7f:77:78:f0:86:dd:ca:dc:d5:86:28:15:f4:44:
89:9f:96:5e:ba:75:71:f1:53:c2:a5:8f:56:11:87:
a1:4e:9a:76:9a:87:ca:8a:89:06:de:9a:2b:f7:d4:
36:eb:03:0d:65:13:64:8a:e9:8b:c7:ad:b2:8f:91:
2a:28:26:41:cc:ba:94:17:26:5a:7e:43:5d:9d:57:
4d:3d:8a:1d:ce:fd:85:c9:88:14:f3:c4:f6:82:ab:
62:92:fd:47:10:d9:5c:56:1f:39:bf:e1:2e:22:53:
26:39:f0:04:7f:ce:e6:22:8c:39:47:9f:10:de:ff:
97:d1:ff:7f:7b:97:a4:9d:d3:cb:b2:41:9d:1d:df:
b2:c6:57:82:02:d3:20:21:67:fe:78:07:2c:b5:10:
71:9e:df:a1:22:5c:5a:69:6d:85:e6:c4:f5:2a:38:
e3:3f:44:2c:f8:a1:49:f0:63:96:52:9d:13:e8:0a:
51:f8:a8:da:96:b9:10:d2:51:b0:8b:d7:de:72:90:
0b:73:37:ad:96:60:36:d4:71:c7:fe:90:96:f8:e0:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:7F:F7:DB:73:71:FE:C8:28:08:3B:A7:2D:07:E5:E9:9F:DE:59
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/Llx_99tzcf7IKAg7py0H5emf3lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
1d:ab:ba:7b:c7:ae:6c:f5:ca:2c:8e:7c:f9:3b:49:5d:44:67:
23:ac:a6:09:da:d0:81:ca:87:d6:06:b0:2e:b0:19:83:7e:b9:
f4:41:ee:84:88:73:b9:f7:92:ef:f0:3d:c4:d1:34:21:1e:bc:
4e:a5:c8:b4:ca:40:e7:ff:31:24:e7:c8:4f:f1:64:21:73:70:
77:4b:bc:c9:bc:ed:2b:d3:66:51:59:49:91:d9:73:64:cc:d7:
b1:84:2b:36:02:64:12:0b:96:4e:2a:ca:03:95:57:05:2f:62:
77:82:3c:46:03:6b:71:d0:37:0d:eb:33:a3:e0:37:e8:16:5f:
d3:66:92:aa:71:69:d6:80:37:37:02:56:8a:21:d1:d3:a3:a9:
c6:35:de:d2:22:84:24:fe:28:58:79:cc:73:d4:c6:0c:09:ba:
36:9d:c8:dc:52:30:76:40:07:b2:21:c4:71:76:93:35:a6:c9:
26:c8:fe:1f:cd:b1:5f:18:c1:f2:fd:05:0f:c5:2d:fa:27:19:
04:45:00:9f:fd:f3:39:eb:6a:c2:82:7c:18:55:45:bf:eb:f7:
75:c8:dc:c4:b8:de:c5:a1:78:f3:8f:63:e9:09:13:01:8b:05:
2c:b5:f0:6d:a8:18:aa:27:4d:72:10:d4:2e:43:61:52:52:08:
50:d0:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:59 2023 by rpki-client on console-ams.rpki-client.org