Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/LRJIGt4iXE38BkXjIdNFOYwZoCY.roa
File: LRJIGt4iXE38BkXjIdNFOYwZoCY.roa (raw, json)
Hash identifier: N2MZZBbXPdcVWL+EMJvwltYIZNqT1CCIIUD7Oqz6C80=
Subject key identifier: 2D:12:48:1A:DE:22:5C:4D:FC:06:45:E3:21:D3:45:39:8C:19:A0:26
Certificate issuer: /CN=faaa925b3b3fa776c441199320a2c6a31dee37f7
Certificate serial: 0185728CB4966AD777BB809A7FACE0F82A1B
Authority key identifier: FA:AA:92:5B:3B:3F:A7:76:C4:41:19:93:20:A2:C6:A3:1D:EE:37:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qqSWzs_p3bEQRmTIKLGox3uN_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/LRJIGt4iXE38BkXjIdNFOYwZoCY.roa
Signing time: Mon 02 Jan 2023 12:55:01 +0000
ROA not before: Mon 02 Jan 2023 12:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27176
IP address blocks: 37.77.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:b4:96:6a:d7:77:bb:80:9a:7f:ac:e0:f8:2a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faaa925b3b3fa776c441199320a2c6a31dee37f7
Validity
Not Before: Jan 2 12:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d12481ade225c4dfc0645e321d345398c19a026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:ee:a7:43:ff:69:cd:ae:3d:85:07:5b:f6:
d9:5f:9e:ee:af:db:fa:c5:a4:46:d3:3d:2f:21:ab:
f0:c6:54:fe:fe:2c:48:02:f3:4e:dc:c6:29:61:98:
cf:c7:c7:20:16:05:f4:34:56:11:45:d8:97:fd:42:
47:32:04:f0:88:25:2c:6d:3f:40:e9:14:f9:eb:32:
e5:9d:93:e2:1c:bf:f0:91:c1:7c:96:51:4c:d0:7b:
c7:b5:a3:a2:bd:d4:88:22:50:e8:99:f3:69:13:0b:
f8:f3:ba:13:88:d6:5b:57:15:74:d8:85:fe:95:e9:
c6:81:de:f1:a5:36:7b:fb:31:e0:d3:fb:bd:97:0f:
cf:15:52:6f:b0:36:db:a9:52:ad:07:d6:6a:76:03:
d5:c7:91:d1:22:11:66:7b:11:3e:7a:6b:d7:c7:51:
1f:3e:ab:1b:5a:36:f7:b6:e9:71:0d:a8:e1:aa:ab:
80:d8:5f:e7:51:70:fd:51:70:ef:d2:a1:23:8a:70:
85:4e:e8:bd:77:e1:a8:4f:2f:d6:25:3e:24:7f:6f:
7a:a2:40:b0:b3:03:68:db:3e:64:7a:a0:bc:50:05:
b3:04:ae:e0:2f:28:0d:23:6b:a9:98:a8:c3:10:f3:
bd:32:c0:86:84:a7:9b:36:88:ca:7c:bf:3f:9e:43:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:12:48:1A:DE:22:5C:4D:FC:06:45:E3:21:D3:45:39:8C:19:A0:26
X509v3 Authority Key Identifier:
keyid:FA:AA:92:5B:3B:3F:A7:76:C4:41:19:93:20:A2:C6:A3:1D:EE:37:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qqSWzs_p3bEQRmTIKLGox3uN_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/LRJIGt4iXE38BkXjIdNFOYwZoCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/1-qqSWzs_p3bEQRmTIKLGox3uN_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.146.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6e:58:31:ed:5b:f5:9a:63:17:2e:a4:ca:8e:cc:11:6e:c5:
c3:fd:af:f6:45:cb:59:e1:ba:3f:26:d5:4e:e9:f8:76:5b:26:
08:b4:14:92:da:ce:1e:27:c9:8b:6d:4c:e0:2d:cb:8d:cd:b5:
dc:e3:13:56:77:8f:96:b6:67:91:79:06:c5:ff:1b:42:43:a4:
d8:0f:fb:7f:39:e6:9d:34:ad:d3:9e:f9:c2:2b:a8:85:7d:0d:
2e:cb:ca:0f:15:7f:03:20:60:bf:08:14:76:c8:d9:5e:9c:d6:
3f:af:2e:9d:95:49:0c:32:3a:6a:13:2e:e1:c2:d2:f0:9c:37:
dd:c0:9d:c2:af:f1:dc:36:93:b7:e6:ae:98:8a:bc:10:44:a1:
da:e3:63:17:2b:aa:f0:e0:d4:a7:b0:1d:1a:36:b7:9c:04:1a:
72:62:1b:7d:ee:70:fc:5b:0d:5f:82:79:80:45:74:5f:7b:e8:
3e:ed:86:35:ee:19:5b:00:64:59:54:5a:19:75:29:ef:07:0e:
e1:7c:23:84:12:53:07:d7:6f:4c:ef:8f:a1:f3:2a:3f:2b:7b:
ff:8b:fb:4d:6c:49:af:75:d0:11:41:ac:85:79:db:24:e6:d2:
bb:31:b6:22:2c:4f:c0:ba:d6:7b:25:a1:70:af:de:81:76:ad:
8b:d4:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:14 2024 by rpki-client on console-fra.rpki-client.org