Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/n6oSjMScgjf3sEmptV2SZOlPgdg.roa
File: n6oSjMScgjf3sEmptV2SZOlPgdg.roa (raw, json)
Hash identifier: gg9PnAIoY8yOBXUpXimfyy7Ulq71oZbviiAPDK2IqaM=
Subject key identifier: 9F:AA:12:8C:C4:9C:82:37:F7:B0:49:A9:B5:5D:92:64:E9:4F:81:D8
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 36951F
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/n6oSjMScgjf3sEmptV2SZOlPgdg.roa
Signing time: Tue 22 Mar 2022 11:58:47 +0000
ROA not before: Tue 22 Mar 2022 11:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31898
IP address blocks: 185.254.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3577119 (0x36951f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Mar 22 11:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9faa128cc49c8237f7b049a9b55d9264e94f81d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:37:cc:90:94:92:93:79:4d:57:fd:99:bd:
e4:9f:75:eb:b6:fc:28:b5:67:1e:78:79:2c:1e:c2:
b4:a8:e2:9b:2b:04:cb:47:59:83:f0:1d:5f:49:ea:
cf:06:8a:c3:fc:62:bd:f8:38:40:3a:ac:43:08:80:
69:1e:41:d3:6a:ed:ca:b1:66:b3:f6:ef:cc:39:df:
7b:0a:73:90:41:ec:32:8a:e0:c1:09:73:b3:77:4e:
1f:99:2d:82:8f:04:8f:50:c2:34:bb:8f:21:3a:45:
7e:35:c2:19:cc:a6:56:9c:12:6e:05:0f:86:39:7b:
c3:8a:e0:07:f9:6d:ca:b5:bd:d8:7f:bc:f9:3b:46:
69:33:ea:88:7a:0c:23:b2:59:c8:9a:4a:14:10:94:
36:19:1d:57:db:f5:32:ee:91:b5:fd:60:a6:c6:05:
3c:f6:f3:ad:e3:31:3a:0d:3f:8a:be:09:4b:f8:5c:
02:3d:b9:30:c3:de:7f:fe:c3:15:26:8d:3c:9c:6a:
7c:96:8b:42:2a:d0:3f:82:30:04:aa:74:a6:4e:80:
86:55:cf:c0:ea:f4:14:b0:e9:ea:47:71:ec:51:35:
e7:b1:59:4a:5c:7f:6f:4c:9e:19:a7:2a:1b:16:16:
f4:eb:af:08:22:55:59:8d:aa:ee:55:15:98:46:76:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AA:12:8C:C4:9C:82:37:F7:B0:49:A9:B5:5D:92:64:E9:4F:81:D8
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/n6oSjMScgjf3sEmptV2SZOlPgdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.18.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2a:6d:e3:a2:55:e0:16:50:bf:66:0c:fe:ab:c7:ec:20:4d:
76:04:de:4e:15:fa:f4:e5:67:8d:65:c3:a8:ea:af:99:24:02:
74:94:57:c8:b8:16:d8:8f:05:21:27:d8:34:8d:92:94:3a:cc:
af:fd:b8:1a:71:95:58:21:1a:ef:d2:9f:64:f0:fa:ec:ea:fc:
be:39:72:a3:47:c8:b6:2c:18:ff:c3:29:8a:50:12:0a:0f:ce:
b4:e6:fb:1b:38:e0:d3:5e:f3:16:b2:f9:69:c4:e4:bc:78:de:
58:3e:d0:78:11:3f:a9:76:48:d6:0e:21:b2:9e:cb:ee:08:ba:
9d:dc:05:f6:79:8f:4f:58:e1:6d:9a:87:fb:6b:a7:a5:5d:87:
5c:be:d5:66:41:28:a4:22:49:5a:71:2c:b9:bf:62:1a:55:1e:
f4:53:0a:07:6f:5c:23:ac:c6:5d:e2:e5:31:36:8e:5b:cd:88:
68:af:3e:ce:8e:b4:b7:e1:3d:da:73:13:cc:27:44:6d:ae:40:
97:d4:68:13:38:ea:ef:1d:61:d8:27:d3:d9:44:0a:22:02:f5:
21:e0:99:75:d8:21:8c:c8:65:f5:b1:68:6b:ca:13:17:79:83:
f5:60:09:15:3d:9d:c9:e4:f1:1f:4d:6f:5a:37:b2:ec:c2:73:
28:53:4d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:09 2024 by rpki-client on console-fra.rpki-client.org