Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/3aEjkLK2YPJcPCTW46l6pjhF7pg.roa
File: 3aEjkLK2YPJcPCTW46l6pjhF7pg.roa (raw, json)
Hash identifier: Cq+mUX0vTmyWA7+zCFJXhC9x4opdw43ZFujjJo5QCdQ=
Subject key identifier: DD:A1:23:90:B2:B6:60:F2:5C:3C:24:D6:E3:A9:7A:A6:38:45:EE:98
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018C8ED515A2FCAEF25B19B4B8F51BD1F035
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/3aEjkLK2YPJcPCTW46l6pjhF7pg.roa
Signing time: Fri 22 Dec 2023 00:02:58 +0000
ROA not before: Fri 22 Dec 2023 00:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 185.21.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:d5:15:a2:fc:ae:f2:5b:19:b4:b8:f5:1b:d1:f0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Dec 22 00:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dda12390b2b660f25c3c24d6e3a97aa63845ee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:d7:23:7c:ef:40:90:53:5f:05:87:3a:45:
86:2a:44:05:aa:1f:43:f5:d5:96:f8:c3:63:44:93:
b6:30:a4:31:82:a7:8c:65:52:ff:1d:33:fe:40:96:
42:a6:10:b9:8d:5d:7b:1c:9a:ba:3d:4f:a8:89:60:
55:7c:b4:ba:c3:7a:cd:7a:e6:fb:f4:bd:26:e6:42:
69:ff:bf:3c:82:31:a3:5a:f8:14:57:fb:47:2c:80:
11:bf:97:ba:32:bc:38:23:21:cc:c2:4f:6d:1f:1f:
7d:c6:81:b8:9f:bf:d0:1a:a4:2f:ef:23:a1:63:47:
0e:a6:01:e2:94:11:ce:6e:d4:a2:39:da:f2:0d:8a:
0b:91:5b:be:c8:5c:e9:ab:4c:08:59:ad:a4:e1:22:
7f:46:71:96:79:ee:b1:d2:db:ae:d3:bb:6f:87:64:
c7:e5:7e:e8:a7:3c:85:36:4a:b1:2e:1f:b1:66:76:
6f:1c:37:2c:8c:02:ea:12:38:40:7b:4d:d6:80:31:
1e:f6:f8:e6:ff:a7:35:41:07:12:d0:f4:87:82:7d:
aa:16:52:6e:8f:6c:7a:1a:ec:08:a8:1c:1b:fa:b5:
e2:17:0a:15:52:1b:a0:34:57:7d:46:13:52:79:83:
a2:f4:31:a9:02:ee:2e:3c:01:52:3e:55:0c:4d:33:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A1:23:90:B2:B6:60:F2:5C:3C:24:D6:E3:A9:7A:A6:38:45:EE:98
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/3aEjkLK2YPJcPCTW46l6pjhF7pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.252.0/24
Signature Algorithm: sha256WithRSAEncryption
59:40:bd:1f:2f:d1:94:6b:bf:6c:72:20:fb:51:24:61:c4:98:
69:04:50:06:24:6d:a3:0d:73:d6:ad:bc:55:23:83:ef:0b:4e:
6a:56:37:47:2b:98:f6:c0:cb:9a:8c:22:f9:f2:df:6d:f2:fa:
f2:b2:5b:f7:6d:49:9d:15:97:96:23:78:f9:a2:c6:bf:fa:e3:
18:22:41:c0:48:da:a8:6d:90:b7:6e:07:a4:c0:2f:5e:73:d5:
3d:69:fb:db:cd:c1:a7:26:d5:52:1e:e0:71:94:5f:b9:a6:81:
b0:f6:cc:05:2e:bb:24:b3:2f:ef:3a:ce:c2:d8:55:a5:fd:cb:
9e:8f:f6:b6:a8:f5:a5:61:0c:83:cf:0e:48:91:35:08:04:68:
fb:4e:15:65:dd:32:32:08:ed:78:a7:1d:ab:01:b7:68:77:53:
39:59:9d:f5:62:84:64:0a:e2:f1:15:b1:5c:3a:f5:c9:9c:e2:
55:85:36:06:c4:f2:80:09:aa:24:a1:64:77:74:72:5d:d3:e5:
61:48:de:2f:dd:7d:a6:96:e5:43:15:35:b6:1f:e7:d4:03:23:
42:0b:f4:93:63:0a:03:8b:3f:d8:60:36:58:56:7b:f7:f6:91:
81:c5:66:e2:18:37:41:bc:67:21:b8:18:92:8c:cf:2d:26:5c:
60:bb:96:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:48 2025 by rpki-client