Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/MLLuWCsw8gXQ4Pda3Sf9CtSuioY.roa
File: MLLuWCsw8gXQ4Pda3Sf9CtSuioY.roa (raw, json)
Hash identifier: PFz1gf/oEYsn/ZKET5vcjhlwTkCR8updlURoP4JxD2U=
Subject key identifier: 30:B2:EE:58:2B:30:F2:05:D0:E0:F7:5A:DD:27:FD:0A:D4:AE:8A:86
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018CC87072F35727AD5F938951AB9275754F
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/MLLuWCsw8gXQ4Pda3Sf9CtSuioY.roa
Signing time: Tue 02 Jan 2024 04:31:01 +0000
ROA not before: Tue 02 Jan 2024 04:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44992
IP address blocks: 185.254.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:72:f3:57:27:ad:5f:93:89:51:ab:92:75:75:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 2 04:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30b2ee582b30f205d0e0f75add27fd0ad4ae8a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:86:d6:e7:ed:b6:e4:9b:9f:05:01:2f:b4:
dd:31:3d:46:b3:e2:e0:0f:17:dd:7b:ac:3a:be:96:
6d:c9:f8:b1:98:83:0a:77:ee:cb:80:bd:f0:b0:70:
1d:41:09:d2:d5:c1:92:c2:f9:69:61:2a:e3:89:9e:
af:35:37:e1:f0:3d:3f:e3:02:be:57:9b:35:65:e3:
64:00:cc:0f:02:3a:e1:75:22:08:34:f9:cd:d7:8f:
3e:e6:f9:d9:34:e3:ee:aa:c6:70:0e:61:87:08:88:
23:bd:82:2e:fb:89:d8:73:f4:ce:c5:fe:33:08:af:
d5:f4:26:23:dc:43:18:fc:ad:06:6b:34:1b:38:ad:
94:48:ff:e6:42:37:84:69:33:10:da:f1:5b:a1:32:
9c:6d:86:a2:a3:c6:38:84:b6:96:33:f6:22:cf:96:
a9:ea:05:b2:e2:86:42:6d:83:94:fb:98:ab:90:28:
b3:2f:20:8b:b4:0f:dc:9c:0a:72:55:75:10:79:3d:
84:f1:4f:75:d9:f1:15:67:c3:28:c1:c1:10:78:1b:
cd:d9:6a:33:4c:01:b5:8f:4f:08:f0:50:3e:fc:b1:
6d:36:ba:21:a5:cd:02:a5:b7:3f:dc:89:5c:e4:7a:
9e:39:cf:8d:bc:15:9d:94:10:ba:39:46:97:f1:c4:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:EE:58:2B:30:F2:05:D0:E0:F7:5A:DD:27:FD:0A:D4:AE:8A:86
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/MLLuWCsw8gXQ4Pda3Sf9CtSuioY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.18.0/24
Signature Algorithm: sha256WithRSAEncryption
36:43:b3:9c:b4:74:4e:bb:34:10:d3:a4:d7:d1:d2:c6:d4:d9:
52:4f:04:ce:9a:58:94:84:36:71:7e:dc:c9:bb:a4:6b:ee:c5:
f4:1c:a1:a9:04:24:21:7c:50:a9:15:c2:76:4d:49:ba:1c:9d:
7d:a3:38:38:37:1f:bc:36:8b:74:a8:ce:f9:b4:77:b9:90:d3:
fe:fd:28:8b:28:7c:8b:3e:45:09:6a:8e:e1:94:49:b0:e6:b1:
35:8d:38:7a:4e:28:20:40:f1:b9:9d:ef:a6:73:a4:c9:2b:29:
a0:31:e8:9b:60:d5:71:3a:30:c4:f0:6b:88:9e:1c:96:cf:86:
26:2d:df:83:65:43:aa:fb:36:94:88:34:a1:2b:00:43:e9:c4:
2c:e3:64:c0:d9:fa:d1:6a:50:91:c9:94:c2:07:c8:04:ef:a3:
01:c2:19:88:d4:4a:f0:0a:54:4f:92:e3:9b:7b:f5:37:f5:08:
a9:5c:1e:2c:be:80:01:05:21:c1:8d:92:e2:d4:85:9d:fa:87:
9b:7d:33:02:fd:b2:c2:5a:09:69:2f:ac:00:ee:6f:16:07:cd:
5c:47:d7:bb:b6:a6:95:f8:6d:b6:e7:5b:3d:10:9d:e6:04:3c:
9b:39:7a:55:08:dd:fd:26:dc:02:4e:a8:18:7b:39:cc:e4:57:
71:f3:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:47 2024 by rpki-client on console-ams.rpki-client.org