Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/ewNvVuoZp9tx5rpcXh_V2W7alyM.roa
File: ewNvVuoZp9tx5rpcXh_V2W7alyM.roa (raw, json)
Hash identifier: THaO5Se3jl6DpRbC3Z2eJvwcv1ugzWB9ukt6qAs/RL4=
Subject key identifier: 7B:03:6F:56:EA:19:A7:DB:71:E6:BA:5C:5E:1F:D5:D9:6E:DA:97:23
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 0184D30545E28C733AA7D3ACE9F9158D7676
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/ewNvVuoZp9tx5rpcXh_V2W7alyM.roa
Signing time: Fri 02 Dec 2022 13:27:28 +0000
ROA not before: Fri 02 Dec 2022 13:27:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.254.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:05:45:e2:8c:73:3a:a7:d3:ac:e9:f9:15:8d:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Dec 2 13:27:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b036f56ea19a7db71e6ba5c5e1fd5d96eda9723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:01:99:a8:a9:0e:5e:2f:8a:18:f8:80:a9:
34:36:15:d0:4f:ca:6d:7f:b1:6e:a7:f4:3e:95:b8:
df:07:c1:3e:0c:64:86:c7:66:56:06:3a:59:3d:50:
05:2c:58:c4:11:d4:46:02:6a:95:0c:cd:20:39:73:
fa:e0:80:4b:9e:81:ca:ba:ea:89:ac:0a:a4:bb:23:
7f:be:f4:73:c6:0a:ae:fa:71:f7:f1:1f:f2:26:3b:
4e:44:3f:81:77:7b:20:c4:94:d2:0c:0a:d3:d5:ff:
34:0c:b9:c0:c0:01:71:25:1f:81:f2:9d:02:8b:40:
10:d5:3f:03:c7:18:fc:74:0a:92:5e:12:8b:9c:df:
69:68:f5:c8:ed:78:ac:d7:f8:f1:5d:b4:90:a2:62:
ec:5f:12:80:c4:57:95:38:89:67:b1:fd:75:7a:28:
be:88:b0:fc:2f:ef:b2:2a:cf:68:40:aa:2b:5e:bb:
8e:ac:90:00:85:cc:6d:9c:9f:be:3f:a5:a5:1b:68:
f2:d3:ff:34:79:f7:57:62:17:a5:e6:c6:91:32:ad:
18:7a:6e:14:10:b2:5b:41:b8:62:ec:91:58:61:d6:
02:13:c5:0c:8a:c8:96:ef:79:e7:d6:d3:75:80:1a:
d3:38:c2:e3:34:26:fb:7b:25:16:87:72:10:cb:c1:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:03:6F:56:EA:19:A7:DB:71:E6:BA:5C:5E:1F:D5:D9:6E:DA:97:23
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/ewNvVuoZp9tx5rpcXh_V2W7alyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.18.0/24
Signature Algorithm: sha256WithRSAEncryption
76:07:2e:68:1a:ff:4f:eb:2a:1b:95:a1:25:ba:f7:66:b1:73:
80:3b:c0:3f:5d:7f:db:9b:76:2e:ab:50:5d:1c:50:f6:1d:23:
36:03:77:e4:ea:a9:af:77:03:f5:24:85:ed:25:3e:03:62:14:
7e:92:de:5a:df:02:d2:5f:11:51:72:3d:33:97:67:5b:e2:c1:
34:3d:fa:b7:db:b7:96:17:d0:f1:75:9e:e6:6f:58:ea:75:94:
ab:b2:65:ee:4a:05:53:7b:0e:57:c1:eb:5d:72:19:6c:52:f7:
30:c0:23:8e:00:74:7b:a2:27:23:5c:d0:bd:9c:1f:fa:40:e2:
69:fd:32:9d:53:f8:18:72:7b:a1:7b:6d:12:2a:55:3b:3d:aa:
39:23:cd:0d:fd:00:54:42:6b:6d:6b:39:e4:ab:8f:e9:0c:c5:
db:38:39:3c:2f:e2:bc:70:90:d4:93:11:c9:90:ce:f9:74:11:
b7:4a:22:b8:81:dd:76:7f:16:ea:d1:77:2a:5e:66:24:7a:c2:
94:63:cf:9b:93:92:5f:12:7c:cf:a3:09:dd:e6:e4:30:f5:2c:
df:27:08:31:d2:b1:61:3a:20:cf:12:ed:dd:88:13:27:b5:4f:
c1:c7:05:0e:8b:75:43:58:9d:76:da:dd:dd:be:e2:72:5c:47:
bb:3e:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:48 2024 by rpki-client on console-ams.rpki-client.org