Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/la5GIKKzCyFIcGcTlJZwPs4xQq0.roa
File: la5GIKKzCyFIcGcTlJZwPs4xQq0.roa (raw, json)
Hash identifier: x0RIl+X8bwUsYXKPCVc4LCkWNnhRotC2CVfCOk4rObQ=
Subject key identifier: 95:AE:46:20:A2:B3:0B:21:48:70:67:13:94:96:70:3E:CE:31:42:AD
Certificate issuer: /CN=c485c1c3921e190fbb2a40eb0e0d509f7415a0eb
Certificate serial: 0188C4AEA932EBA193E84834AB375F1BED2B
Authority key identifier: C4:85:C1:C3:92:1E:19:0F:BB:2A:40:EB:0E:0D:50:9F:74:15:A0:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIXBw5IeGQ-7KkDrDg1Qn3QVoOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/la5GIKKzCyFIcGcTlJZwPs4xQq0.roa
Signing time: Fri 16 Jun 2023 14:49:20 +0000
ROA not before: Fri 16 Jun 2023 14:49:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62440
IP address blocks: 185.35.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:ae:a9:32:eb:a1:93:e8:48:34:ab:37:5f:1b:ed:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c485c1c3921e190fbb2a40eb0e0d509f7415a0eb
Validity
Not Before: Jun 16 14:49:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95ae4620a2b30b21487067139496703ece3142ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9c:db:1a:72:09:b9:46:9c:36:00:34:14:8f:
b9:50:54:93:b5:18:84:e6:e6:3d:41:da:f0:d1:fe:
c0:85:cb:b0:b2:01:ef:d8:af:18:60:80:3e:83:2b:
b0:32:1d:7d:01:6b:b0:64:3f:bf:80:94:c1:f6:56:
40:c6:db:c2:27:10:41:7f:bf:69:99:1c:90:bf:9f:
55:a4:58:79:b2:68:80:07:dc:17:40:11:0b:0d:a1:
89:b3:66:88:bc:13:0f:db:1d:38:55:be:e3:05:cc:
56:8c:93:6d:7a:fc:c6:82:a6:18:96:b9:fe:2d:61:
dd:16:f6:e3:05:65:e0:f6:1e:b8:4c:eb:3f:a1:ca:
3e:68:a9:1f:f3:cc:f0:48:ec:ea:f1:bc:eb:19:43:
31:31:e9:51:e0:ce:e6:d0:5f:0f:5f:f4:c9:39:6e:
75:fb:85:1f:9d:0e:c4:e8:d7:4c:cb:0d:14:9c:97:
40:1e:b1:3d:81:e4:a0:d5:5c:70:f1:43:e5:85:66:
6d:61:c0:72:af:12:0a:6e:94:e3:9c:b5:92:58:16:
99:ac:c7:25:73:90:88:a1:f3:87:1f:a9:4c:fc:32:
22:83:7f:c0:9a:a1:7f:e5:38:c1:91:58:94:0a:8a:
87:b7:61:bf:94:03:eb:c0:12:a5:fb:4c:ff:6e:aa:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AE:46:20:A2:B3:0B:21:48:70:67:13:94:96:70:3E:CE:31:42:AD
X509v3 Authority Key Identifier:
keyid:C4:85:C1:C3:92:1E:19:0F:BB:2A:40:EB:0E:0D:50:9F:74:15:A0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIXBw5IeGQ-7KkDrDg1Qn3QVoOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/la5GIKKzCyFIcGcTlJZwPs4xQq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/xIXBw5IeGQ-7KkDrDg1Qn3QVoOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.131.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b0:fd:7e:a4:0e:be:ea:76:b2:39:90:35:6c:82:68:e1:1e:
75:60:c9:11:d7:01:64:4f:fc:a7:84:8f:81:9d:c2:ec:3a:17:
d9:13:3b:66:02:75:0a:21:5e:e2:e6:27:db:9b:fa:59:01:5d:
74:29:e3:82:b1:f1:35:8a:27:74:54:cd:68:36:41:03:91:86:
5b:ed:a2:c6:11:10:d5:20:a9:96:f4:6a:23:a5:46:75:d7:57:
d2:dd:6f:e0:73:ef:69:99:06:44:77:6a:20:dd:37:0a:d9:00:
4f:66:d2:e1:5d:4c:a8:a0:3c:09:2c:6e:a0:0a:ee:a5:4d:b0:
e8:d4:e6:99:59:de:d9:75:db:1e:ba:a6:cc:76:50:22:30:05:
7e:88:ed:2d:bd:df:93:bd:97:54:cc:12:7c:20:fb:ca:88:cf:
e9:b4:b8:23:7f:e6:9a:15:0f:ff:33:47:01:0a:8b:cc:5d:a9:
11:07:60:49:43:7c:9e:f0:24:5e:63:9e:54:79:43:32:3d:62:
8a:95:48:b0:9d:85:85:96:b2:33:c8:c8:0f:af:cd:fb:18:47:
58:e4:c1:a5:f3:10:6e:bf:cf:d5:99:27:5d:bf:0d:48:47:20:
18:6f:1f:15:67:4d:82:00:12:1a:60:a5:9a:b0:83:52:e5:9d:
3b:58:c6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:33 2025 by rpki-client