Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6b7daf-f02c-46d4-aae7-e4f2c0498f84/1/ldYE3EguKruOiIvRl0sprFGvtkA.roa
File: ldYE3EguKruOiIvRl0sprFGvtkA.roa (raw, json)
Hash identifier: 81OZ2wDCrw4omvCKYhaQPS2wJH1k/0kcR3o6xf9ceYY=
Subject key identifier: 95:D6:04:DC:48:2E:2A:BB:8E:88:8B:D1:97:4B:29:AC:51:AF:B6:40
Certificate issuer: /CN=266ae156688b87e26e0f40f126102cbc87e7fc7d
Certificate serial: 018B37913A51939C417791A39F755CEC40A5
Authority key identifier: 26:6A:E1:56:68:8B:87:E2:6E:0F:40:F1:26:10:2C:BC:87:E7:FC:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmrhVmiLh-JuD0DxJhAsvIfn_H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6b7daf-f02c-46d4-aae7-e4f2c0498f84/1/ldYE3EguKruOiIvRl0sprFGvtkA.roa
Signing time: Mon 16 Oct 2023 08:19:06 +0000
ROA not before: Mon 16 Oct 2023 08:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205223
IP address blocks: 185.223.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:91:3a:51:93:9c:41:77:91:a3:9f:75:5c:ec:40:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266ae156688b87e26e0f40f126102cbc87e7fc7d
Validity
Not Before: Oct 16 08:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95d604dc482e2abb8e888bd1974b29ac51afb640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1d:61:6c:5f:77:8e:39:1d:1f:89:eb:c6:1f:
d8:15:7c:5f:76:31:f0:66:4e:ac:3c:ab:34:05:8a:
5b:9e:7f:df:93:9e:a0:0b:10:5d:90:ad:6e:05:2c:
2e:4c:49:6f:ea:78:fc:4c:7f:72:54:09:f9:59:b3:
22:c6:5f:60:2a:02:ec:dd:94:cb:39:ca:51:f6:fd:
f9:cc:b9:2e:35:bf:87:c2:66:4a:1c:3e:6f:55:ea:
57:de:d6:57:c5:bb:f5:b9:f0:de:ec:61:fa:f6:44:
b7:13:f7:fe:27:67:97:ad:66:0e:b1:96:74:67:e6:
1c:35:85:db:66:c3:90:3f:ab:9c:f1:4f:3d:42:6a:
25:2a:1e:43:ee:52:97:3c:63:ae:c9:1c:06:41:40:
d2:9d:16:0c:7a:a7:60:e0:35:d1:0a:ca:37:ed:b1:
80:5c:52:7b:aa:86:2d:0c:ea:25:a4:b9:5e:f2:f0:
e0:aa:af:b0:ed:24:f3:26:9a:6d:34:3e:c5:79:8f:
cf:44:86:73:b7:7b:2c:86:e3:8c:1c:93:e1:a8:08:
4b:10:e8:12:e5:32:7d:e5:10:a3:c0:e8:90:c2:95:
4b:9d:76:82:35:3d:b0:24:10:72:a8:4b:c9:fa:4d:
9c:cf:f8:cb:0e:32:36:52:5b:32:7e:38:01:a8:a8:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D6:04:DC:48:2E:2A:BB:8E:88:8B:D1:97:4B:29:AC:51:AF:B6:40
X509v3 Authority Key Identifier:
keyid:26:6A:E1:56:68:8B:87:E2:6E:0F:40:F1:26:10:2C:BC:87:E7:FC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmrhVmiLh-JuD0DxJhAsvIfn_H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6b7daf-f02c-46d4-aae7-e4f2c0498f84/1/ldYE3EguKruOiIvRl0sprFGvtkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6b7daf-f02c-46d4-aae7-e4f2c0498f84/1/JmrhVmiLh-JuD0DxJhAsvIfn_H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.218.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:15:df:94:a5:37:db:ea:d4:60:f5:1e:c0:ff:6e:f5:a6:7f:
93:59:d6:02:bb:a9:91:0f:a4:91:17:e4:65:d9:79:76:9c:ca:
c9:b3:84:84:b7:df:00:10:d9:b5:77:66:09:6d:67:c1:3a:90:
1a:4e:ea:1b:5d:b5:5a:04:22:e8:ed:aa:1c:05:5b:83:5b:1b:
6f:97:f8:da:82:3d:59:b3:2d:07:e0:ee:53:0c:d3:59:b6:e8:
3b:9d:85:40:b8:9d:27:2a:ca:c7:75:ba:6e:06:4d:ad:b5:03:
d8:ac:8e:81:e0:ec:37:66:a8:72:5d:86:9c:d8:f9:7a:ee:4d:
94:11:33:f1:74:6c:99:e8:ee:0a:5f:82:59:35:05:6b:29:4b:
37:0b:ce:8a:37:43:a7:c0:b9:bf:b3:79:df:74:32:b6:cc:e2:
ae:df:44:30:3b:95:0a:88:f0:85:ff:86:f7:ca:d5:37:64:87:
12:99:7e:6c:46:d5:bf:35:7f:b5:5d:2e:b0:f1:b1:cb:f5:6f:
62:21:5d:ac:e3:1f:58:1c:58:1c:ad:3d:07:a6:59:07:af:e4:
48:a8:b3:c4:74:b0:a8:81:05:f7:91:75:bf:be:4c:2d:92:c0:
5c:eb:ae:12:07:c4:70:de:8c:b8:67:be:57:9b:49:2f:d8:94:
35:27:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:32 2024 by rpki-client on console-fra.rpki-client.org