Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/lJbAA8r_zLN-b6rSQ4Z2jbzQaGc.roa
File: lJbAA8r_zLN-b6rSQ4Z2jbzQaGc.roa (raw, json)
Hash identifier: xbio5/2vT1zaqmEIUsA0UKoRMxGT+PT2QJ3guNFJ3s4=
Subject key identifier: 94:96:C0:03:CA:FF:CC:B3:7E:6F:AA:D2:43:86:76:8D:BC:D0:68:67
Certificate issuer: /CN=71a50dd78f03c71104d5d1a26058a920724e859e
Certificate serial: 018D477B4D7AE5FEC7BFF1930E1F78BEDBE7
Authority key identifier: 71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/lJbAA8r_zLN-b6rSQ4Z2jbzQaGc.roa
Signing time: Fri 26 Jan 2024 20:34:39 +0000
ROA not before: Fri 26 Jan 2024 20:34:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6843
IP address blocks: 185.120.36.0/24 maxlen: 24
185.120.37.0/24 maxlen: 24
185.120.38.0/24 maxlen: 24
2a06:8f00::/30 maxlen: 30
2a06:8f04::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:47:7b:4d:7a:e5:fe:c7:bf:f1:93:0e:1f:78:be:db:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a50dd78f03c71104d5d1a26058a920724e859e
Validity
Not Before: Jan 26 20:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9496c003caffccb37e6faad24386768dbcd06867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:ee:2b:91:b5:7b:f5:04:7b:be:2c:1a:da:
6e:de:47:17:13:45:3b:fb:37:52:8d:41:04:6e:28:
e8:cc:98:2b:23:03:59:7e:45:f7:c6:c9:2d:3c:80:
2b:86:eb:8b:1f:c8:49:9f:70:7a:6a:1b:2f:5d:12:
ec:92:10:ea:ab:f8:85:c3:86:b8:2d:25:b2:2a:20:
50:45:29:f5:38:fa:64:44:28:1c:9c:03:d3:ef:9e:
6a:67:f5:66:8b:97:90:87:af:93:f6:fe:d7:d0:a2:
c1:16:3e:81:74:e1:de:f5:e4:bc:66:95:ba:33:ed:
c6:45:79:0a:17:db:52:07:b7:01:6e:c6:ff:6d:71:
ef:74:04:61:9c:ac:39:59:fe:25:6b:89:44:fb:c4:
29:f5:2b:e9:8d:56:3f:26:03:8f:89:4b:d1:0e:45:
3e:5f:81:92:98:19:c2:05:5e:7c:63:94:2f:23:94:
82:97:fb:1f:94:11:fd:7c:10:f0:28:c6:bd:d3:0e:
05:ba:d6:9a:25:5f:a4:12:ed:c3:71:d3:c1:0d:fb:
88:42:d6:97:60:4a:33:a4:a9:93:6d:16:c4:53:d2:
de:11:f4:fe:5c:a9:33:d2:c5:17:58:5a:e1:31:18:
97:ec:df:a3:f6:01:6c:12:95:93:48:26:d9:91:6a:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:C0:03:CA:FF:CC:B3:7E:6F:AA:D2:43:86:76:8D:BC:D0:68:67
X509v3 Authority Key Identifier:
keyid:71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/lJbAA8r_zLN-b6rSQ4Z2jbzQaGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.36.0-185.120.38.255
IPv6:
2a06:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
04:25:a0:4f:6f:ba:c0:1e:1a:a8:ce:f1:4e:df:9a:97:f5:c9:
66:f1:50:80:ce:b8:e8:0c:03:43:9d:e0:67:54:28:2e:22:17:
8b:28:32:f1:fc:0f:82:6a:4e:53:cc:28:10:06:31:a9:74:40:
5a:f3:34:70:51:8e:81:4f:ff:24:ef:75:74:96:6b:3c:f9:22:
24:cb:1c:73:d8:92:98:29:d8:eb:4f:2a:a8:6f:2f:2c:3e:3d:
13:6f:5d:02:e6:af:af:8c:e0:b7:0f:5c:be:6a:05:8a:4c:ba:
24:1f:1a:9d:c7:82:ea:41:3d:f3:f2:1e:2c:5a:34:9c:b0:36:
f5:09:5f:05:e4:71:3e:92:b0:93:26:e8:42:c3:d5:95:66:6c:
46:7d:4f:b2:21:9f:65:a7:d0:db:18:33:ae:63:d5:dc:85:f2:
c2:9a:37:7d:95:f2:c5:1a:25:87:9a:8d:28:cc:c5:02:29:17:
e1:aa:a8:1a:4d:02:64:c7:93:7c:46:11:4f:16:4f:07:5a:10:
60:a1:8b:d4:56:9c:02:09:f9:c1:d6:64:a8:7f:6d:31:30:13:
55:82:ab:65:97:6f:94:c9:a2:b7:b1:82:eb:a2:5d:15:f0:ac:
6c:c1:1d:86:ef:25:51:c2:32:0d:a3:65:35:85:b4:65:60:10:
a7:c3:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:12 2024 by rpki-client on console-ams.rpki-client.org