Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e4fcb0-ab2e-4f62-bb91-bf21d5ef7bb1/1/2gN6Gjnt4TU3IoYRlt6AixJI-N0.roa
File: 2gN6Gjnt4TU3IoYRlt6AixJI-N0.roa (raw, json)
Hash identifier: X04GBEx4JCFaVOSbf416wuAcvFAz+YGX8L2Qynu81M0=
Subject key identifier: DA:03:7A:1A:39:ED:E1:35:37:22:86:11:96:DE:80:8B:12:48:F8:DD
Certificate issuer: /CN=45cd2ab4a6d326b1efd34d0721810597099e5cbb
Certificate serial: 02D0A719
Authority key identifier: 45:CD:2A:B4:A6:D3:26:B1:EF:D3:4D:07:21:81:05:97:09:9E:5C:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc0qtKbTJrHv000HIYEFlwmeXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e4fcb0-ab2e-4f62-bb91-bf21d5ef7bb1/1/2gN6Gjnt4TU3IoYRlt6AixJI-N0.roa
Signing time: Sat 01 Jan 2022 14:55:43 +0000
ROA not before: Sat 01 Jan 2022 14:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213006
IP address blocks: 185.21.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47228697 (0x2d0a719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45cd2ab4a6d326b1efd34d0721810597099e5cbb
Validity
Not Before: Jan 1 14:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da037a1a39ede1353722861196de808b1248f8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:6d:93:0c:f0:6f:64:13:dd:42:a0:b3:a1:
bb:b0:58:b3:e4:dc:fc:84:d9:9a:46:24:e5:79:8d:
5b:00:96:32:36:0f:6f:c4:a8:49:5d:74:92:4f:74:
bd:fc:dc:fb:08:e9:92:ca:c9:9c:67:f5:5d:ef:b4:
b6:2f:62:a6:99:fc:f6:39:94:c8:03:b8:35:64:90:
e8:a1:6c:6b:ac:db:12:44:22:dd:e2:5a:e4:ef:38:
60:69:0c:fd:e9:ec:23:90:fc:95:89:48:cf:82:9d:
86:95:0d:bf:d8:10:c4:3f:a7:71:a4:af:dd:cd:86:
3c:1a:46:fa:c6:f4:5d:3b:19:fe:3b:ea:33:91:d9:
ce:d5:2c:ac:f1:64:9f:33:6c:3e:05:25:a9:9f:16:
f2:41:85:0f:83:01:46:7a:f2:43:17:c7:f4:fb:80:
ca:7c:1c:a5:e5:8c:26:af:db:b6:c1:aa:39:33:61:
70:69:fa:80:45:c4:7d:6e:0c:22:86:5e:45:89:a7:
13:47:d6:25:2a:1c:87:73:6b:fc:d1:87:62:69:fd:
06:33:cb:5b:f7:d1:4e:a9:ba:4a:f1:cd:31:2d:0a:
01:62:f5:0b:82:ef:2f:4f:7f:3c:a3:a6:dc:da:53:
74:2a:c9:a2:0d:21:4e:bb:61:51:37:33:28:5a:b5:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:03:7A:1A:39:ED:E1:35:37:22:86:11:96:DE:80:8B:12:48:F8:DD
X509v3 Authority Key Identifier:
keyid:45:CD:2A:B4:A6:D3:26:B1:EF:D3:4D:07:21:81:05:97:09:9E:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc0qtKbTJrHv000HIYEFlwmeXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e4fcb0-ab2e-4f62-bb91-bf21d5ef7bb1/1/2gN6Gjnt4TU3IoYRlt6AixJI-N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e4fcb0-ab2e-4f62-bb91-bf21d5ef7bb1/1/Rc0qtKbTJrHv000HIYEFlwmeXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:99:e5:6b:82:41:40:e1:19:6a:6e:4c:0e:a2:b6:14:88:01:
16:32:9f:62:ee:3c:d0:76:94:33:23:d4:cd:04:7b:40:f8:ef:
ac:08:43:b8:fa:1a:e0:b4:ae:39:0c:36:49:fc:b2:40:ff:0a:
8e:8a:87:5e:13:b6:22:38:91:0d:f0:9c:f7:ac:d6:31:13:6d:
e6:f1:d4:81:ff:55:29:b6:55:cf:2a:93:c7:c6:24:9b:fe:67:
d3:66:53:d5:8d:02:f9:e0:91:5e:fe:f9:46:41:0a:29:68:0b:
52:d9:b8:52:15:12:e6:53:3a:03:8a:cc:46:b7:5c:c0:99:cd:
fa:81:69:b1:3d:b0:e3:2e:8e:1c:d4:77:2e:83:5b:7a:10:58:
87:de:15:01:1d:3b:95:f0:2b:31:eb:6d:31:1d:95:05:a1:d0:
28:1f:81:4c:4a:43:57:22:4d:c5:1f:50:65:7d:64:b9:69:66:
0e:4a:4e:d2:d6:b1:8e:96:ec:2c:d1:7f:1c:92:7e:e7:7e:6b:
2f:51:b0:78:39:c6:5d:c6:ca:8d:1f:a3:35:d4:ce:1c:f9:0c:
a8:46:4d:3a:01:fa:3c:84:46:32:30:b4:4e:ac:12:9a:04:d0:
f1:88:94:3c:12:bc:22:3d:2c:f0:a2:e1:82:2b:b2:4b:ba:34:
7b:20:16:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:08 2025 by rpki-client