Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/lEeUs-POGLNE7tdCgcsr7kKSDDs.roa
File: lEeUs-POGLNE7tdCgcsr7kKSDDs.roa (raw, json)
Hash identifier: 6hMOefJ1TUieibN+94d+CK8pva/OdRgcraEUB5ATcbw=
Subject key identifier: 94:47:94:B3:E3:CE:18:B3:44:EE:D7:42:81:CB:2B:EE:42:92:0C:3B
Certificate issuer: /CN=52b554da0ebbe41bf54fb2d813e0b2ec6d482c54
Certificate serial: 01891CBF5CE78AE893976CC278E9F680A471
Authority key identifier: 52:B5:54:DA:0E:BB:E4:1B:F5:4F:B2:D8:13:E0:B2:EC:6D:48:2C:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrVU2g675Bv1T7LYE-Cy7G1ILFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/lEeUs-POGLNE7tdCgcsr7kKSDDs.roa
Signing time: Mon 03 Jul 2023 17:14:10 +0000
ROA not before: Mon 03 Jul 2023 17:14:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43655
IP address blocks: 193.148.2.0/23 maxlen: 24
78.24.136.0/21 maxlen: 24
2a00:e70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:bf:5c:e7:8a:e8:93:97:6c:c2:78:e9:f6:80:a4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b554da0ebbe41bf54fb2d813e0b2ec6d482c54
Validity
Not Before: Jul 3 17:14:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=944794b3e3ce18b344eed74281cb2bee42920c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:f5:69:20:4c:62:c1:2a:21:7c:89:c0:47:
16:e2:c6:df:4f:05:3e:dc:43:64:fd:8c:ab:63:bd:
5d:6b:8a:7e:02:b7:a9:71:db:ec:d0:fa:d4:6e:69:
b7:63:61:81:16:42:05:33:9f:d9:76:5f:b7:8f:42:
a9:a7:48:a7:42:87:e2:98:43:d1:82:86:60:18:39:
c9:b2:55:59:37:23:9f:30:e2:e3:64:eb:b4:22:d4:
a1:90:1e:7d:b2:49:41:db:7b:db:8d:70:20:53:30:
26:55:c4:5d:9b:86:27:ba:5e:7c:61:e8:0e:d5:62:
17:1a:c0:ae:7b:07:00:8f:47:20:a4:51:39:78:9a:
a8:25:dc:2d:af:06:9d:8f:25:18:b1:6a:8b:74:18:
17:aa:ba:26:9b:6b:70:88:b3:ab:c2:5b:40:40:99:
7e:8c:64:ee:e0:46:62:c8:9a:bf:f1:03:15:13:57:
96:8f:65:08:6a:7f:51:b0:bb:d8:a0:77:6f:ed:91:
3d:c3:1a:70:eb:4f:33:a0:71:88:7e:11:a4:93:5e:
f3:3c:9c:67:dc:4a:80:92:58:51:1b:db:1c:af:78:
3d:96:09:73:9b:99:64:69:7a:3c:ef:f7:fe:a8:6a:
fe:e4:76:7d:96:0a:f4:ed:a3:a2:df:7e:dd:b5:cd:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:94:B3:E3:CE:18:B3:44:EE:D7:42:81:CB:2B:EE:42:92:0C:3B
X509v3 Authority Key Identifier:
keyid:52:B5:54:DA:0E:BB:E4:1B:F5:4F:B2:D8:13:E0:B2:EC:6D:48:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrVU2g675Bv1T7LYE-Cy7G1ILFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/lEeUs-POGLNE7tdCgcsr7kKSDDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/UrVU2g675Bv1T7LYE-Cy7G1ILFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.136.0/21
193.148.2.0/23
IPv6:
2a00:e70::/32
Signature Algorithm: sha256WithRSAEncryption
18:20:26:a1:e6:0b:d1:b2:8d:85:e7:b1:70:76:1c:53:a5:ce:
07:d2:b1:e7:14:21:27:99:31:90:b0:69:ba:f3:72:39:ba:98:
cf:85:4a:11:bb:84:e8:e2:5d:01:d9:d0:dc:8d:f3:9a:30:11:
88:51:7d:0e:43:8b:2c:20:bf:45:ca:ea:cf:4e:a8:52:7b:0e:
a1:23:4a:8f:25:ad:54:3a:af:6a:6f:ba:a2:af:7d:14:7a:fe:
69:79:25:02:b5:66:55:88:32:90:c4:82:67:24:ad:5a:b8:c3:
b0:9a:3c:cb:bb:a3:6f:92:0e:be:f7:99:d0:f1:79:f5:60:8b:
72:07:33:73:37:8d:15:01:d5:5a:bb:d1:99:ae:ab:41:19:7e:
18:ab:0e:3d:93:e8:4f:e9:96:8b:b5:fc:42:8a:90:d6:ed:fb:
5c:30:57:2b:e0:51:04:8d:d8:fe:95:9a:fb:84:0c:f8:0d:c6:
2e:e6:7b:aa:d2:70:a7:0b:a1:00:e3:ed:7f:2c:48:91:43:79:
19:d0:43:0f:00:cf:a1:fa:45:bb:6e:98:ec:ab:f6:66:1a:e9:
5b:6b:c9:74:0f:e9:16:37:12:6e:0a:b8:af:3a:f8:95:a6:dd:
5a:35:eb:15:69:d1:67:e3:df:35:7e:b8:03:db:a4:47:fa:37:
9b:cc:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:20 2024 by rpki-client on console-fra.rpki-client.org