Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/LjIImzCVmHs7nU6QGz77UukkvQY.roa
File: LjIImzCVmHs7nU6QGz77UukkvQY.roa (raw, json)
Hash identifier: xsO164UVXffhOB9Q8F8ClIi0JqJ2hD7PDy3TpWP4U5w=
Subject key identifier: 2E:32:08:9B:30:95:98:7B:3B:9D:4E:90:1B:3E:FB:52:E9:24:BD:06
Certificate issuer: /CN=3ab79a94103c03e99b5201a798d338865be63574
Certificate serial: 018CC794FCC76C4B143D76AF2723C9DA1CA8
Authority key identifier: 3A:B7:9A:94:10:3C:03:E9:9B:52:01:A7:98:D3:38:86:5B:E6:35:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OrealBA8A-mbUgGnmNM4hlvmNXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/LjIImzCVmHs7nU6QGz77UukkvQY.roa
Signing time: Tue 02 Jan 2024 00:31:19 +0000
ROA not before: Tue 02 Jan 2024 00:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 185.140.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:fc:c7:6c:4b:14:3d:76:af:27:23:c9:da:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab79a94103c03e99b5201a798d338865be63574
Validity
Not Before: Jan 2 00:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e32089b3095987b3b9d4e901b3efb52e924bd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:82:af:44:62:c2:89:be:06:b3:2f:99:46:
4a:fc:d3:9b:1a:08:e7:a5:6c:02:b0:37:90:25:19:
da:ef:f3:48:e5:71:68:ce:f1:9a:b7:4c:25:98:9f:
29:2d:64:6c:7b:45:b0:51:2a:7c:63:01:d8:b0:7a:
09:52:e4:c8:52:ab:e0:b9:89:5b:8d:2d:a6:6f:08:
20:ff:e5:73:aa:e1:a8:5a:5c:57:95:3d:da:bd:af:
89:cf:20:63:71:07:0b:69:0b:07:f8:a0:90:1b:3c:
b3:84:79:37:d2:28:e1:a9:b2:89:1b:60:51:96:39:
99:8d:1b:f9:3e:06:47:7d:4c:ad:e8:a1:91:cb:01:
9e:31:1f:95:02:96:1d:3c:a3:ce:8b:af:2f:fd:58:
c8:4c:e1:30:b8:69:4c:24:b1:9a:21:95:6e:54:d3:
17:3d:05:ae:be:cf:75:6c:7c:b6:68:d5:b5:38:58:
43:7d:1f:d4:fe:c0:3d:11:9c:b8:77:07:68:8b:f0:
88:96:41:c6:13:1d:d7:87:b3:f1:ac:fc:67:42:a4:
ce:98:cf:10:bf:f6:37:56:cb:ef:e0:2c:63:5f:f5:
70:bd:44:74:b5:63:e0:45:e9:60:2f:ce:e7:43:b3:
db:dd:ad:6b:90:3c:4f:45:ed:e2:7b:81:8f:30:3d:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:32:08:9B:30:95:98:7B:3B:9D:4E:90:1B:3E:FB:52:E9:24:BD:06
X509v3 Authority Key Identifier:
keyid:3A:B7:9A:94:10:3C:03:E9:9B:52:01:A7:98:D3:38:86:5B:E6:35:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OrealBA8A-mbUgGnmNM4hlvmNXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/LjIImzCVmHs7nU6QGz77UukkvQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/OrealBA8A-mbUgGnmNM4hlvmNXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.173.0/24
Signature Algorithm: sha256WithRSAEncryption
af:57:c7:d3:b3:9f:3d:79:0c:35:00:ec:b5:d5:15:29:ed:e9:
d5:6b:72:3e:6f:c3:11:09:3b:e7:d8:bd:52:3f:e9:cb:f8:e9:
c2:cd:51:42:39:9b:42:b0:d8:22:42:01:34:44:77:ce:01:0a:
50:b0:d0:c7:b9:70:60:8d:26:9e:29:78:80:f6:f6:fe:5d:34:
ee:59:66:cb:a8:d8:8e:c4:b2:f4:a3:72:ff:1b:9c:6a:85:02:
3d:15:3d:17:82:ea:b8:58:94:5f:ed:70:dc:8b:44:03:8e:1f:
2d:38:0a:f7:21:8e:e8:0d:7b:6d:8b:c7:77:2e:4d:73:c9:e2:
d5:ac:d3:27:e9:6c:99:5b:a3:a9:84:39:89:3b:93:d9:f7:cd:
d2:08:0f:fd:b2:14:e6:49:9f:aa:d2:5c:29:76:f7:b5:c4:ec:
a7:5b:4f:e2:51:8c:14:e2:96:8d:2d:30:c0:78:91:e5:ca:40:
61:fc:9c:66:11:4f:84:21:30:d6:11:d6:9f:b7:55:8e:4b:c6:
a3:58:14:e3:4b:f6:2d:cb:f5:ac:d4:b2:30:e1:74:9f:59:1f:
ba:cd:3c:90:9a:e6:b3:58:48:f3:e0:b7:da:7a:4d:63:e3:f0:
75:b4:75:26:1b:98:f3:06:3a:e2:c8:d5:d1:ef:04:f5:89:72:
7f:e5:e9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:56:33 2024 by rpki-client on console-ams.rpki-client.org