Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/vUZJjpzs2VKRDFgiCHAaWLS4oy4.roa
File: vUZJjpzs2VKRDFgiCHAaWLS4oy4.roa (raw, json)
Hash identifier: llTFgf4ALhbWghpFesz4AgurWrKZwVxbOfND7Qb734E=
Subject key identifier: BD:46:49:8E:9C:EC:D9:52:91:0C:58:22:08:70:1A:58:B4:B8:A3:2E
Certificate issuer: /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial: 018CC2DAC4BDC80192E15F7FE605A057C247
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/vUZJjpzs2VKRDFgiCHAaWLS4oy4.roa
Signing time: Mon 01 Jan 2024 02:29:26 +0000
ROA not before: Mon 01 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41720
IP address blocks: 185.242.181.0/24 maxlen: 24
185.242.180.0/24 maxlen: 24
185.242.183.0/24 maxlen: 24
185.242.180.0/22 maxlen: 22
185.242.182.0/24 maxlen: 24
2a0d:b280::/29 maxlen: 29
2a0d:b280:8100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c4:bd:c8:01:92:e1:5f:7f:e6:05:a0:57:c2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Validity
Not Before: Jan 1 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd46498e9cecd952910c582208701a58b4b8a32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:e9:f1:46:47:61:8a:0b:8d:cf:f8:ca:cb:
d6:78:73:4d:45:e5:6d:54:06:72:b5:db:81:74:55:
8c:27:1e:74:ad:81:f5:09:aa:7c:bc:55:a4:c5:b2:
a6:46:9a:7e:f3:6d:5b:a2:73:ba:74:75:a7:a3:0c:
e7:cb:3f:a5:96:cc:87:6c:e8:5c:5f:34:d5:dc:14:
23:27:8b:7f:66:5c:cc:ff:3d:c2:33:f4:71:9a:d9:
4d:99:f9:0f:ce:c5:a7:18:65:d0:f2:b6:2a:5e:29:
9b:06:f9:ae:83:3a:33:58:32:8d:a9:69:71:bb:05:
f8:9a:ce:05:ec:7d:a3:39:70:59:23:f6:5e:36:29:
ce:b6:bc:f1:04:8b:16:42:26:1d:f4:72:d3:21:3b:
90:4b:ea:eb:8c:c9:b5:c9:8a:47:10:dc:d0:b7:c9:
27:76:88:ef:94:a2:f4:0a:a4:69:71:5f:79:22:32:
49:26:fe:a4:e7:70:9f:90:a4:16:25:af:bb:e1:6e:
79:46:7c:09:3e:71:0e:5d:2f:44:a0:ae:61:c9:6b:
39:9d:0f:05:6f:78:1a:f0:12:5b:b6:e2:47:36:47:
11:22:e4:c2:56:e4:24:1b:4e:ee:9f:d4:c3:9e:1e:
30:ed:b1:ff:52:7f:de:75:cf:4c:c1:5c:a8:97:16:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:46:49:8E:9C:EC:D9:52:91:0C:58:22:08:70:1A:58:B4:B8:A3:2E
X509v3 Authority Key Identifier:
keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/vUZJjpzs2VKRDFgiCHAaWLS4oy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.180.0/22
IPv6:
2a0d:b280::/29
Signature Algorithm: sha256WithRSAEncryption
21:69:30:a0:7e:58:13:93:9e:34:33:8a:e7:3c:38:d2:25:3f:
7f:c5:e7:a8:cc:ac:e9:69:00:6a:a5:52:79:5f:4d:cd:e3:f5:
29:3e:f6:d0:ed:59:17:65:70:88:7a:3e:13:84:a8:d5:ef:f1:
35:a7:1e:8b:6f:37:34:e5:75:5c:82:fa:f5:a7:59:f7:1c:03:
08:84:4b:7f:83:f2:db:b9:b2:58:e6:4c:05:34:46:d4:58:28:
e2:f7:04:45:f6:60:1a:54:fc:ca:6d:24:8a:21:57:3d:77:9a:
67:e8:7f:91:5b:56:20:c4:93:7a:41:36:b4:75:8d:cb:44:59:
92:d4:99:17:c3:91:33:b9:ab:5b:11:73:78:b1:5e:00:eb:ac:
65:53:f3:ac:e5:6e:72:21:21:b9:5e:b8:99:bd:78:1a:3a:45:
f0:be:2c:d4:cc:8a:cb:11:29:a9:c0:87:71:3a:f8:49:53:14:
49:86:51:62:f0:d2:1b:d8:bd:b4:ca:8d:76:dd:09:7e:8e:61:
76:8c:56:cc:0d:6b:f3:e1:a3:f2:de:19:2a:41:24:85:ed:26:
24:1a:f7:75:bc:69:19:5d:de:60:70:89:3a:ab:a7:01:d8:bb:
42:38:5e:4b:ea:30:d9:70:04:49:99:06:3f:88:2e:2c:ab:78:
fa:f7:c6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 20:36:33 2024 by rpki-client on console-ams.rpki-client.org