Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/leKdApiNfj58nA_ovsV0vYh2T5k.roa
File: leKdApiNfj58nA_ovsV0vYh2T5k.roa (raw, json)
Hash identifier: HSnq/tS2aZJGRrYR5ofexrdLaKPHPA0+FAL4kwRPnqg=
Subject key identifier: 95:E2:9D:02:98:8D:7E:3E:7C:9C:0F:E8:BE:C5:74:BD:88:76:4F:99
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 018ED3417771B5FF4716C5BB9487AA56ADE1
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/leKdApiNfj58nA_ovsV0vYh2T5k.roa
Signing time: Fri 12 Apr 2024 17:01:06 +0000
ROA not before: Fri 12 Apr 2024 17:01:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205053
IP address blocks: 185.226.64.0/22 maxlen: 22
185.226.64.0/24 maxlen: 24
185.226.65.0/24 maxlen: 24
185.226.66.0/24 maxlen: 24
185.226.67.0/24 maxlen: 24
213.134.5.0/24 maxlen: 24
2a0c:5e00::/32 maxlen: 32
2a0c:5e00::/48 maxlen: 48
2a0c:5e00::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d3:41:77:71:b5:ff:47:16:c5:bb:94:87:aa:56:ad:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Apr 12 17:01:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95e29d02988d7e3e7c9c0fe8bec574bd88764f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:16:3d:4c:b4:74:5f:f7:7b:08:d6:bf:d9:db:
fe:cf:51:5b:97:db:ec:95:65:22:f2:18:8c:09:de:
c5:1d:89:a5:bf:40:5d:b9:52:b6:cd:e1:a3:b6:c3:
89:40:08:37:ea:fa:06:bc:93:82:8a:dc:6b:a1:a8:
0a:d2:c7:0d:ec:38:7b:6b:0e:01:76:6e:8a:66:c2:
ce:02:0e:8e:22:44:69:21:32:24:3b:a8:db:79:41:
9a:10:a4:a7:2f:ec:ab:80:de:f9:c1:30:c9:77:cd:
d8:ae:9b:9d:73:98:a0:76:7a:13:2a:7d:f4:38:13:
e7:29:57:87:c6:6a:05:1c:4c:f2:95:b3:3e:83:db:
91:c9:e1:b6:21:b0:12:4d:9a:77:be:75:7c:9b:59:
0a:01:47:88:1f:ee:73:4a:a4:b2:78:a2:f7:0f:a8:
d1:02:5b:77:2f:41:bf:3b:ea:76:68:fc:0f:6f:47:
08:cf:21:9d:7c:33:29:9b:24:0d:ca:a7:1c:9a:b5:
81:ac:c0:fb:e8:86:69:02:a6:4d:ac:90:7a:91:71:
d3:24:ea:fc:27:57:25:b7:0e:79:67:0e:71:a2:ce:
38:e2:df:bf:0f:b1:a3:3a:24:8b:a5:27:39:cc:c9:
1c:66:b7:a6:f2:52:34:0a:8a:8c:52:30:94:31:fd:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E2:9D:02:98:8D:7E:3E:7C:9C:0F:E8:BE:C5:74:BD:88:76:4F:99
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/leKdApiNfj58nA_ovsV0vYh2T5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.64.0/22
213.134.5.0/24
IPv6:
2a0c:5e00::/32
Signature Algorithm: sha256WithRSAEncryption
af:fe:49:3f:10:f8:6b:51:0f:d9:a6:56:68:71:a5:c3:fe:2d:
21:8f:4b:48:0a:ff:02:f9:9a:bb:2e:3c:84:af:34:4a:e9:51:
bb:fd:f5:d4:bf:61:fe:e1:38:71:ac:1e:92:0f:24:72:b9:b0:
e6:b2:6a:64:f7:21:65:97:d8:cc:10:eb:97:8d:6a:64:ac:f1:
7d:c0:a2:73:be:e3:81:2a:a0:60:34:e2:81:4e:6c:4b:d2:f6:
00:ae:02:e2:45:b1:c0:11:cb:79:21:85:1c:1a:7d:d6:ae:df:
17:20:04:95:9e:2c:d6:94:26:a2:6c:a1:7a:08:0d:ff:7f:24:
d8:2d:c7:1b:37:54:cd:07:13:32:82:af:ea:69:f6:b8:ca:d1:
77:51:97:9f:6c:45:ab:8c:23:69:16:c1:f9:94:6d:5d:ae:20:
05:3c:8d:de:f8:34:e5:9f:89:7c:98:94:06:77:df:90:9f:4a:
c5:f3:fe:9c:b5:ef:4f:33:80:69:f2:71:89:48:db:a8:84:ef:
e3:a3:59:42:71:4e:57:e9:18:f0:60:b5:79:fc:b1:73:db:de:
b5:e2:c7:18:c3:84:de:71:41:fb:f8:36:b0:ff:0e:fd:90:46:
78:65:93:e5:45:46:fa:fc:b2:e2:78:f9:a4:b7:75:e2:8a:c5:
bd:0d:24:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:24 2025 by rpki-client