Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/xB84BgUGFoOeY6X_qIpbuq-gq6c.roa
File: xB84BgUGFoOeY6X_qIpbuq-gq6c.roa (raw, json)
Hash identifier: FT07o2k+UU3wNyP1nXdOHKX3ABP7mpTe0f8srZeZr88=
Subject key identifier: C4:1F:38:06:05:06:16:83:9E:63:A5:FF:A8:8A:5B:BA:AF:A0:AB:A7
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 0184DBD5229A1B0413EFBE88A2E5778C1155
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/xB84BgUGFoOeY6X_qIpbuq-gq6c.roa
Signing time: Sun 04 Dec 2022 06:31:29 +0000
ROA not before: Sun 04 Dec 2022 06:31:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54975
IP address blocks: 185.254.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:db:d5:22:9a:1b:04:13:ef:be:88:a2:e5:77:8c:11:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Dec 4 06:31:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c41f3806050616839e63a5ffa88a5bbaafa0aba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:62:7f:9d:f3:f8:cf:fc:a0:45:91:8a:ee:
95:b8:4f:f9:90:cf:23:b2:44:da:17:d3:ce:1a:f9:
02:c0:93:62:50:26:34:de:b4:72:e2:7e:e6:fc:fb:
8c:54:03:e5:fa:8c:0f:30:b1:13:8a:2b:8d:c3:b5:
7b:bf:ed:6f:a9:df:50:c7:97:18:09:7c:5e:f1:58:
a0:62:66:d7:1d:0f:5e:32:13:c8:2e:41:35:81:53:
00:d3:a6:bf:82:f6:92:2f:39:10:22:17:fd:27:5a:
e2:b2:5b:a8:33:73:6d:04:42:0d:b2:e2:f3:b3:96:
a2:e8:d3:d9:bb:f3:f8:1c:06:7a:97:21:c0:57:cc:
54:bf:a1:bc:c7:31:ad:ea:98:73:b5:65:fb:42:b0:
10:94:f7:3f:84:04:c6:54:47:34:60:a7:df:65:fb:
74:89:f1:89:60:45:dc:8d:48:32:91:f6:5b:33:40:
87:ad:0e:9f:12:d2:4b:a1:19:2b:c5:4d:9e:1d:92:
4f:a1:d5:37:34:e3:e5:89:83:a7:2c:02:63:0b:97:
78:0b:f6:2b:46:ad:c7:67:c7:8b:02:1f:e0:38:5c:
14:b8:b7:cd:cf:b2:f4:f3:57:f2:b9:8b:f5:54:59:
5a:4d:2b:89:91:90:84:ad:d7:84:07:86:5c:bd:d4:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1F:38:06:05:06:16:83:9E:63:A5:FF:A8:8A:5B:BA:AF:A0:AB:A7
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/xB84BgUGFoOeY6X_qIpbuq-gq6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a4:9f:f9:ff:d7:8b:4e:52:ab:f9:49:7e:a7:03:73:51:aa:
25:f1:30:e0:84:df:60:46:bf:66:57:e1:7a:16:e4:ca:cf:d2:
4c:c7:ea:6d:f4:10:5b:6e:1b:b0:ac:82:b2:d2:5a:90:fb:e0:
6c:92:ff:28:0a:5f:45:ad:71:ec:c8:08:c7:c3:33:14:9e:36:
62:8d:48:9d:9c:39:df:6c:ea:c0:bc:ee:8b:79:1c:a8:21:6d:
e7:ad:0b:25:5f:dc:37:a0:5c:92:e1:82:64:0c:b4:84:11:58:
77:ef:04:06:61:f5:62:fe:34:46:65:96:78:1f:d4:25:5d:34:
81:c7:14:24:77:51:36:69:e3:c6:67:13:05:14:22:e4:3f:6e:
ed:2b:52:12:64:12:7f:5a:4f:a7:c2:dc:51:75:2d:5e:df:77:
56:b9:60:0b:3b:c9:66:d3:aa:5c:f9:12:de:37:9a:df:4f:37:
b1:36:71:bc:03:22:73:3c:e5:35:5c:cf:de:04:7c:37:09:b5:
31:b6:ba:15:8c:5f:16:fc:2c:97:89:b0:b6:95:5d:79:2a:f0:
45:b1:7e:13:ff:14:91:5f:79:b1:64:0e:3a:48:af:18:e3:ce:
b6:8a:5b:8d:82:85:ec:25:d0:64:a5:da:9b:8b:26:24:1a:33:
48:0c:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:48 2024 by rpki-client on console-ams.rpki-client.org