Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/LeGLZyTZVuHth-zSDLN5I3nRW44.roa
File: LeGLZyTZVuHth-zSDLN5I3nRW44.roa (raw, json)
Hash identifier: N5ppRqO9HStLscGbKYWWJPLx/5K19fW1uoHVGR4QtdQ=
Subject key identifier: 2D:E1:8B:67:24:D9:56:E1:ED:87:EC:D2:0C:B3:79:23:79:D1:5B:8E
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018481BA0B6F3DDACD2751E0C1D225AD855E
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/LeGLZyTZVuHth-zSDLN5I3nRW44.roa
Signing time: Wed 16 Nov 2022 18:36:04 +0000
ROA not before: Wed 16 Nov 2022 18:36:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54975
IP address blocks: 185.254.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:ba:0b:6f:3d:da:cd:27:51:e0:c1:d2:25:ad:85:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Nov 16 18:36:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2de18b6724d956e1ed87ecd20cb3792379d15b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:11:cd:a6:b6:ad:c2:6b:5e:fa:4b:a9:39:
ff:31:0c:21:84:71:89:76:88:b2:f2:46:7a:bf:1c:
7b:fe:28:6e:2c:8e:60:c1:1a:97:17:e7:33:a1:34:
64:6f:e2:06:07:dd:03:79:8e:bd:9b:a6:68:e2:e2:
d4:3c:c9:81:3b:ec:4c:e1:f5:c7:95:cf:76:d0:ad:
9e:12:ec:4b:5c:e4:1a:85:29:d8:e3:ba:df:0d:bc:
7b:ee:9d:a0:4f:56:65:bd:12:59:93:2a:f7:94:35:
00:bf:03:8d:8d:ca:59:e3:78:42:f9:96:82:46:12:
fb:cb:87:54:b5:2b:58:aa:3b:88:36:0b:3b:66:9a:
d8:a8:84:da:74:28:6a:f6:c7:34:66:ff:f1:7b:59:
16:55:e7:57:d0:c8:a4:61:d4:df:65:5a:fb:85:52:
50:04:f4:c4:da:90:cd:34:75:3d:1e:e3:7a:cf:d8:
f4:e3:6d:26:d8:86:80:5f:7b:f5:35:5a:95:cf:8d:
27:b9:36:36:65:0e:47:9d:98:87:d4:99:a8:24:f5:
db:9a:06:5d:99:ac:13:42:fe:3e:5c:bf:e6:75:ed:
55:b1:b4:77:89:17:2e:94:cd:6f:50:6b:3c:d2:8b:
ca:1c:4f:0d:4b:39:bc:60:cf:0c:8e:51:f7:7e:be:
3f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E1:8B:67:24:D9:56:E1:ED:87:EC:D2:0C:B3:79:23:79:D1:5B:8E
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/LeGLZyTZVuHth-zSDLN5I3nRW44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.18.0/24
Signature Algorithm: sha256WithRSAEncryption
42:96:7d:04:db:bd:d4:18:14:b5:10:59:6b:e8:2c:4b:88:a5:
2e:94:cf:bb:14:fa:b7:14:38:8e:05:35:5e:b7:ca:ab:c5:12:
87:0d:0f:5a:49:fa:25:7d:5c:ba:bd:e1:eb:10:de:32:84:75:
50:de:7a:90:f7:25:66:fa:9b:be:6c:2e:2f:32:34:1f:19:97:
de:e6:39:f7:25:e0:19:69:ab:25:ad:1e:56:54:ca:ee:0a:ec:
45:74:f3:73:6e:41:95:5e:55:fe:ac:84:b3:ed:34:53:63:be:
a0:66:32:d5:34:9e:7c:88:84:f6:e9:68:04:88:bd:b9:a5:63:
5a:97:8f:24:b1:18:be:fa:07:ae:a4:71:c8:fe:8e:ef:aa:02:
2d:1b:44:e3:7e:d0:90:87:59:76:66:12:1b:d0:2d:69:69:81:
8f:c6:4b:45:8b:7d:c0:59:46:17:7d:3a:40:70:38:5b:6d:e9:
c5:87:16:f2:b0:37:fc:99:2e:9d:fe:bf:f8:89:31:9c:46:55:
f0:ae:40:a3:5e:31:30:6b:52:19:34:07:98:c7:dc:77:5b:81:
21:eb:5f:84:22:93:e9:59:77:7d:9d:64:7d:28:e7:c0:c8:e6:
b7:99:84:60:8d:39:e4:f1:61:42:1d:bf:d7:8c:79:24:61:b5:
1b:8d:76:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSBugtvPdrNJ1HgwdIlrYVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjIxMTE2MTgzNjA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGUxOGI2NzI0ZDk1NmUxZWQ4N2VjZDIwY2IzNzkyMzc5ZDE1YjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHQRzaa2rcJrXvpLqTn/MQwhhHGJ
doiy8kZ6vxx7/ihuLI5gwRqXF+czoTRkb+IGB90DeY69m6Zo4uLUPMmBO+xM4fXH
lc920K2eEuxLXOQahSnY47rfDbx77p2gT1ZlvRJZkyr3lDUAvwONjcpZ43hC+ZaC
RhL7y4dUtStYqjuINgs7ZprYqITadChq9sc0Zv/xe1kWVedX0MikYdTfZVr7hVJQ
BPTE2pDNNHU9HuN6z9j0420m2IaAX3v1NVqVz40nuTY2ZQ5HnZiH1JmoJPXbmgZd
mawTQv4+XL/mde1VsbR3iRculM1vUGs80ovKHE8NSzm8YM8MjlH3fr4/XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC3hi2ck2Vbh7Yfs0gyzeSN50VuOMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvTGVHTFp5VFpWdUh0aC16U0RMTjVJM25SVzQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf4SMA0G
CSqGSIb3DQEBCwUAA4IBAQBCln0E273UGBS1EFlr6CxLiKUulM+7FPq3FDiOBTVe
t8qrxRKHDQ9aSfolfVy6veHrEN4yhHVQ3nqQ9yVm+pu+bC4vMjQfGZfe5jn3JeAZ
aaslrR5WVMruCuxFdPNzbkGVXlX+rISz7TRTY76gZjLVNJ58iIT26WgEiL25pWNa
l48ksRi++geupHHI/o7vqgItG0TjftCQh1l2ZhIb0C1paYGPxktFi33AWUYXfTpA
cDhbbenFhxbysDf8mS6d/r/4iTGcRlXwrkCjXjEwa1IZNAeYx9x3W4Eh61+EIpPp
WXd9nWR9KOfAyOa3mYRgjTnk8WFCHb/XjHkkYbUbjXah
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:08 2024 by rpki-client on console-fra.rpki-client.org