Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/4l-2YI4lrMKjGC8ShNQEG5kY-WU.roa
File: 4l-2YI4lrMKjGC8ShNQEG5kY-WU.roa (raw, json)
Hash identifier: YNvP7hnfeN0yatS3A1Ei4RsxNPRKImoIazB5inmq4Gg=
Subject key identifier: E2:5F:B6:60:8E:25:AC:C2:A3:18:2F:12:84:D4:04:1B:99:18:F9:65
Certificate issuer: /CN=72552f3e87bd411356562244f2fb50efa526d203
Certificate serial: 01856F5DAAEFA229967C685C0F381E1A5433
Authority key identifier: 72:55:2F:3E:87:BD:41:13:56:56:22:44:F2:FB:50:EF:A5:26:D2:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clUvPoe9QRNWViJE8vtQ76Um0gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/4l-2YI4lrMKjGC8ShNQEG5kY-WU.roa
Signing time: Sun 01 Jan 2023 22:04:47 +0000
ROA not before: Sun 01 Jan 2023 22:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394814
IP address blocks: 185.235.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:aa:ef:a2:29:96:7c:68:5c:0f:38:1e:1a:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72552f3e87bd411356562244f2fb50efa526d203
Validity
Not Before: Jan 1 22:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e25fb6608e25acc2a3182f1284d4041b9918f965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0e:24:92:7d:a8:77:ca:78:69:79:72:ab:fa:
d4:14:23:c4:a3:a2:17:a2:d9:c7:06:d9:ec:5b:9e:
dd:5b:0f:0e:e9:21:9f:61:17:d5:1e:30:9c:6d:6a:
52:16:aa:be:c6:38:98:89:f6:75:f2:1a:6c:14:32:
30:d3:a8:df:a0:3e:8a:de:00:77:65:58:ab:8d:5e:
32:83:68:ab:f9:30:ff:9d:82:f1:08:2e:5e:0a:1f:
aa:c2:f2:62:61:3d:5c:5f:37:69:2a:6f:17:f0:3b:
e6:1e:d5:6c:36:e4:b7:10:47:74:79:c8:50:13:dd:
1c:64:18:b2:bc:92:cf:b5:3c:a6:5c:fd:b4:25:6e:
9b:33:f3:bc:83:af:c9:51:5e:b4:a9:6d:76:09:0c:
1a:d7:51:60:fe:6c:4b:65:d3:51:6c:74:c2:35:49:
b1:20:c2:de:ad:3a:62:aa:15:12:0d:e6:11:ea:18:
fc:78:47:cc:9d:48:75:51:cc:d7:bf:28:6d:69:28:
fc:7e:cd:84:af:f5:be:d0:40:1a:8b:69:2a:8f:57:
84:a2:fe:3e:07:5b:e4:68:3f:ca:59:3f:ec:1f:e6:
52:fe:b8:01:e1:5e:9d:13:19:2d:39:b4:07:35:90:
a5:8c:3f:58:91:ee:48:96:52:4f:9b:27:57:ba:cb:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5F:B6:60:8E:25:AC:C2:A3:18:2F:12:84:D4:04:1B:99:18:F9:65
X509v3 Authority Key Identifier:
keyid:72:55:2F:3E:87:BD:41:13:56:56:22:44:F2:FB:50:EF:A5:26:D2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clUvPoe9QRNWViJE8vtQ76Um0gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/4l-2YI4lrMKjGC8ShNQEG5kY-WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/clUvPoe9QRNWViJE8vtQ76Um0gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.142.0/24
Signature Algorithm: sha256WithRSAEncryption
97:da:93:29:2a:68:89:1b:94:88:36:ac:73:b5:9e:d6:91:11:
32:49:fe:39:d7:21:9f:6a:6e:a5:1a:27:4a:49:30:03:53:04:
04:48:6c:4e:00:fc:be:03:99:1c:5b:3b:67:77:15:67:28:c9:
09:d7:1d:9a:ea:2c:04:93:e4:8e:17:a0:4e:23:66:ce:ad:f0:
b7:9a:c9:46:59:2b:fa:39:ab:b7:f9:5d:84:f4:07:51:27:33:
bb:09:47:be:20:3b:d9:47:05:74:83:94:62:4f:be:1e:3b:69:
1d:d4:db:c0:bf:b0:21:96:a0:87:37:bf:54:80:b2:68:07:bf:
d7:de:6e:c4:fa:e4:ec:d9:49:5f:5e:ee:28:9e:64:6b:81:90:
cc:4a:8f:3a:70:1b:c0:d6:af:b7:a0:d2:9a:d8:4c:2b:ad:be:
ef:2d:22:2e:4e:6f:e9:e5:b5:e5:28:da:0c:60:c4:20:0b:ac:
63:d7:31:29:6e:de:62:34:39:04:3f:92:1b:52:31:85:1c:93:
c1:cc:bd:47:62:60:a4:d6:3d:19:f7:5f:e4:89:a3:5a:d6:a9:
8d:7f:7b:6c:81:2e:5f:5a:4d:a9:e0:a1:e5:06:b3:00:24:86:
a4:3e:b4:fb:d8:53:2d:fe:fb:62:15:ae:c4:77:c9:10:4a:bb:
35:5c:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:29 2024 by rpki-client on console-fra.rpki-client.org