Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/L-oI71cIwDFKjTeBb1agDsPWBdg.roa
File: L-oI71cIwDFKjTeBb1agDsPWBdg.roa (raw, json)
Hash identifier: vFPPPefsW545FzvtK0JgUK0jRRyNItpxTV/cUCPxQtY=
Subject key identifier: 2F:EA:08:EF:57:08:C0:31:4A:8D:37:81:6F:56:A0:0E:C3:D6:05:D8
Certificate issuer: /CN=265ca77090379a21985d5fe133f143b9568ec311
Certificate serial: 01855D967FCC5CEA00AF482E59F135FC9677
Authority key identifier: 26:5C:A7:70:90:37:9A:21:98:5D:5F:E1:33:F1:43:B9:56:8E:C3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlyncJA3miGYXV_hM_FDuVaOwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/L-oI71cIwDFKjTeBb1agDsPWBdg.roa
Signing time: Thu 29 Dec 2022 11:13:42 +0000
ROA not before: Thu 29 Dec 2022 11:13:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208041
IP address blocks: 185.222.5.0/24 maxlen: 24
185.222.6.0/24 maxlen: 24
2a0c:8440::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:96:7f:cc:5c:ea:00:af:48:2e:59:f1:35:fc:96:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265ca77090379a21985d5fe133f143b9568ec311
Validity
Not Before: Dec 29 11:13:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fea08ef5708c0314a8d37816f56a00ec3d605d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:26:72:a7:3f:35:5d:bf:7c:69:c4:ba:35:
0c:49:c0:9c:44:81:18:8c:0c:d4:d2:ca:de:dc:98:
32:1e:1c:80:f2:76:3c:43:50:f5:26:16:ef:0e:45:
0a:8f:b6:81:92:a2:e6:16:95:bd:21:ea:1e:98:e2:
ee:39:88:62:d9:d7:d7:c1:e1:3f:8e:8a:c3:7a:e1:
ca:2c:10:ac:13:a3:9a:b0:f4:b7:42:22:5a:45:39:
fb:74:7e:67:04:a4:49:8c:d5:dc:8d:1a:8b:ca:68:
ba:88:37:70:5b:01:69:e5:50:d1:83:18:7b:d7:b3:
97:e4:eb:8b:94:42:70:15:3b:48:f9:fa:02:f0:20:
ae:60:81:49:01:88:c9:c1:dc:f8:08:9b:23:9c:fa:
d6:08:79:c0:84:1e:71:65:5e:dd:29:18:3b:11:7c:
d9:14:11:02:9b:1d:5f:3a:0e:ed:1e:be:41:e7:9e:
96:ef:54:07:d6:64:33:6b:71:75:6a:98:8f:7d:66:
da:9e:6f:c5:f3:07:07:0f:36:5d:31:95:b7:9a:10:
98:35:c7:d7:14:6a:f1:a9:a7:19:4e:32:43:2d:94:
93:a9:45:90:18:0b:6d:4c:3c:ef:96:92:ea:ff:27:
76:0e:e5:4c:ba:db:9c:42:fc:6b:8b:8c:71:01:4b:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EA:08:EF:57:08:C0:31:4A:8D:37:81:6F:56:A0:0E:C3:D6:05:D8
X509v3 Authority Key Identifier:
keyid:26:5C:A7:70:90:37:9A:21:98:5D:5F:E1:33:F1:43:B9:56:8E:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlyncJA3miGYXV_hM_FDuVaOwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/L-oI71cIwDFKjTeBb1agDsPWBdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/JlyncJA3miGYXV_hM_FDuVaOwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.5.0-185.222.6.255
IPv6:
2a0c:8440::/48
Signature Algorithm: sha256WithRSAEncryption
42:77:76:bf:a1:f4:68:56:d9:f6:c4:03:ea:94:0a:fc:4f:c2:
92:25:cd:8c:fc:20:95:58:ee:6c:42:c6:ed:7c:3d:1a:58:1f:
1e:19:ff:fc:42:c1:37:32:6b:04:ac:51:fb:a5:a4:2a:3e:c3:
d0:58:31:93:35:15:0a:ed:51:d9:d6:90:83:70:d5:45:e4:1b:
c9:71:64:c6:15:f3:43:ee:de:24:f6:e2:57:fb:46:55:b4:65:
4c:36:9c:a4:2f:a5:e9:aa:51:28:f1:83:eb:8e:1a:8d:56:de:
b6:3d:ee:cd:2c:01:af:ff:79:6d:54:a5:11:19:d0:60:19:89:
bc:4e:8c:4d:0e:94:0c:18:5c:29:24:51:1e:6a:a5:66:09:e1:
77:28:31:2d:df:4a:99:46:93:d4:41:c3:be:8b:c0:1f:6c:48:
c5:78:db:ef:97:4b:30:f8:19:20:fe:34:17:bb:30:e0:45:57:
83:ae:f5:e9:0b:ef:7a:97:5c:61:01:2b:f0:fd:03:be:ab:b7:
b9:eb:d8:33:3c:47:c8:72:60:54:8f:9b:a9:98:30:42:a8:75:
56:3d:d1:9a:de:67:45:3b:2d:93:65:a3:21:e6:43:6c:16:db:
46:2f:c0:54:0a:71:63:32:6f:89:87:8a:cb:fa:fb:2a:d9:ad:
be:3d:95:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:29 2025 by rpki-client