Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/LmkxjvlCMJJQ2QMD5k5rA9mjeuw.roa
File: LmkxjvlCMJJQ2QMD5k5rA9mjeuw.roa (raw, json)
Hash identifier: YYwm/XVBuG/UvhHpWdM4/5LoKdKtzyHHmIKhATE5yG8=
Subject key identifier: 2E:69:31:8E:F9:42:30:92:50:D9:03:03:E6:4E:6B:03:D9:A3:7A:EC
Certificate issuer: /CN=720606eddbcec7a57211941a67cc729b42915c5e
Certificate serial: 018D8431D853500C3F6703CBBFF9F5BE471A
Authority key identifier: 72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/LmkxjvlCMJJQ2QMD5k5rA9mjeuw.roa
Signing time: Wed 07 Feb 2024 15:31:15 +0000
ROA not before: Wed 07 Feb 2024 15:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 109.94.163.0/24 maxlen: 24
109.107.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:31:d8:53:50:0c:3f:67:03:cb:bf:f9:f5:be:47:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720606eddbcec7a57211941a67cc729b42915c5e
Validity
Not Before: Feb 7 15:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e69318ef942309250d90303e64e6b03d9a37aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:ad:1f:7a:b4:e2:66:7b:b0:1e:2b:ab:d0:
de:e0:5c:4d:bf:25:66:d8:13:5c:0d:a3:a4:16:48:
f9:87:7a:df:d3:db:a5:3b:04:01:a5:10:4f:36:06:
14:b2:91:58:a4:c0:d2:84:a9:97:e0:be:26:10:bf:
c2:f0:f0:1a:72:67:67:c0:ea:5b:94:cd:52:9a:ef:
c5:f6:bd:a3:46:29:8d:4b:bd:fe:b9:01:dc:99:67:
15:07:43:e4:ea:50:b1:0b:d2:05:7c:50:e1:d0:54:
57:51:95:aa:8f:e3:68:02:87:52:4b:ed:c1:c6:6b:
2c:d1:84:94:c1:5e:13:8b:cc:d2:e8:8b:ac:19:bc:
6b:ad:15:81:99:77:21:30:2d:62:ac:ce:d3:3a:0f:
8c:e5:a2:ee:f0:fe:ad:eb:95:3b:88:47:d9:14:45:
d6:d6:e2:55:00:5e:f6:14:80:b1:20:91:e7:6b:ce:
fb:06:d4:ae:a2:45:b0:15:c8:8d:1f:b9:d0:95:1d:
c2:98:55:ee:db:13:e2:d8:e4:dd:81:52:9c:96:c9:
56:ff:62:45:9e:a4:e4:4c:87:f5:4a:d7:18:8f:09:
82:e6:6c:57:9e:53:ac:53:c9:10:17:24:ed:9e:70:
7f:56:50:f3:8c:88:e2:94:24:41:0a:11:d0:03:cf:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:69:31:8E:F9:42:30:92:50:D9:03:03:E6:4E:6B:03:D9:A3:7A:EC
X509v3 Authority Key Identifier:
keyid:72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/LmkxjvlCMJJQ2QMD5k5rA9mjeuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.163.0/24
109.107.144.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e0:7f:9b:2a:e7:b4:a4:58:14:60:6e:66:27:b2:ab:05:08:
f2:50:c3:91:06:48:4d:cf:6c:9a:13:41:dd:44:1c:9e:b1:35:
5e:82:1b:30:af:26:cc:ff:17:f3:9e:73:e8:55:04:5f:ad:ad:
0c:54:ff:29:54:fb:3a:38:c9:23:f4:a3:05:91:59:8a:2f:09:
c0:60:52:e7:80:ea:fd:ac:b9:f9:ca:91:55:13:40:ed:b6:52:
fc:57:05:4f:97:43:87:d0:20:3d:32:a1:31:76:80:23:91:39:
88:9e:6f:68:c1:b9:03:e5:71:48:48:1a:5c:9c:43:07:61:10:
85:e4:e5:33:d1:41:7e:75:51:71:50:de:42:58:84:57:58:02:
ee:09:2d:38:63:5f:26:03:de:ff:c5:5b:e4:9d:a9:ef:ed:43:
ad:a0:0a:03:cf:b0:15:6c:48:e9:75:ec:7e:08:d1:06:24:dc:
64:08:93:6a:d3:c0:85:37:a1:d3:93:11:d3:8c:c5:a5:e4:7d:
52:8e:e5:ff:d4:c9:9c:14:9a:7b:b7:6e:15:be:74:c4:65:e3:
e0:a4:14:e2:64:84:c0:d1:6d:99:74:8f:7e:4e:f5:29:dc:f8:
4f:c7:c8:fc:cf:ef:e4:9d:3a:b0:53:c6:57:aa:4e:4c:40:12:
bb:4b:65:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:40 2024 by rpki-client on console-fra.rpki-client.org