Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/V3jzLnR7Qb1vot54S0YzqmMa-RI.roa
File: V3jzLnR7Qb1vot54S0YzqmMa-RI.roa (raw, json)
Hash identifier: WaPPLrhQAcOSwRMeW/jPhUGRVVZJFpS+SjQNGFzyzdk=
Subject key identifier: 57:78:F3:2E:74:7B:41:BD:6F:A2:DE:78:4B:46:33:AA:63:1A:F9:12
Certificate issuer: /CN=2abea54f03651ca15b09af9e4d2972e2df04025a
Certificate serial: 01856D9D022747EA6CB022F4D88F8F989EBE
Authority key identifier: 2A:BE:A5:4F:03:65:1C:A1:5B:09:AF:9E:4D:29:72:E2:DF:04:02:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kr6lTwNlHKFbCa-eTSly4t8EAlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/V3jzLnR7Qb1vot54S0YzqmMa-RI.roa
Signing time: Sun 01 Jan 2023 13:54:44 +0000
ROA not before: Sun 01 Jan 2023 13:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 185.241.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:02:27:47:ea:6c:b0:22:f4:d8:8f:8f:98:9e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abea54f03651ca15b09af9e4d2972e2df04025a
Validity
Not Before: Jan 1 13:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5778f32e747b41bd6fa2de784b4633aa631af912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:cf:fb:42:1f:2b:db:69:6d:6d:81:9e:67:
92:e9:4b:7e:52:b3:e6:28:50:e2:04:70:ce:4b:fc:
73:54:50:8b:7a:4f:66:ef:c7:b9:22:88:97:62:e0:
82:4b:a8:4c:a1:39:83:5d:e5:20:c8:fd:8a:ff:5a:
0c:7f:17:da:b1:c0:7e:ae:41:f9:36:fa:32:00:62:
83:b2:29:e0:ba:63:b9:14:f0:e3:2d:45:ac:56:15:
df:22:fa:2c:5a:90:1f:d2:ae:3e:3a:d0:ed:81:0b:
0b:81:b1:ea:69:c7:47:32:ff:25:66:ee:a8:b7:bd:
7e:c9:32:b2:ed:63:4a:27:bb:56:d6:a8:ff:c9:ad:
8b:21:ba:3f:45:27:dc:87:d5:60:aa:7d:aa:8b:2b:
3e:ef:99:f4:83:6f:73:a3:27:de:68:ff:d3:95:ce:
02:5e:64:28:1f:f0:b6:d8:a0:8e:65:02:c7:53:ab:
ba:9d:93:fd:ef:5d:63:f4:fe:ba:b6:b5:b9:69:a1:
23:11:06:2d:15:8b:c7:a6:8b:28:e9:96:1c:4e:27:
45:b1:b3:c7:0f:c4:e9:80:e2:f0:be:84:45:3b:c3:
a9:2b:c2:43:78:49:91:53:61:ee:d8:22:44:da:09:
79:89:6c:36:e5:0f:34:ca:bb:04:31:35:02:8c:11:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:78:F3:2E:74:7B:41:BD:6F:A2:DE:78:4B:46:33:AA:63:1A:F9:12
X509v3 Authority Key Identifier:
keyid:2A:BE:A5:4F:03:65:1C:A1:5B:09:AF:9E:4D:29:72:E2:DF:04:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kr6lTwNlHKFbCa-eTSly4t8EAlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/V3jzLnR7Qb1vot54S0YzqmMa-RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/Kr6lTwNlHKFbCa-eTSly4t8EAlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c0:94:7e:25:8e:52:e8:59:84:f9:f8:28:cc:06:31:41:6d:
a1:98:d2:95:d0:c6:dc:77:88:3e:e7:dd:d6:cb:65:b2:af:60:
f4:5d:10:d6:f2:fe:6e:04:cc:09:68:00:51:2d:39:a0:8a:ed:
41:ad:86:fb:3d:0a:10:bf:9c:a4:52:4b:96:1a:28:9e:21:79:
05:e4:0a:97:f9:73:ae:d6:10:2d:83:e5:02:55:fb:78:c2:ac:
63:1a:41:6d:1d:6f:e1:b4:66:b2:08:25:61:8b:20:0d:05:39:
50:4b:3f:7a:a9:39:4c:82:89:ff:64:d6:6a:e5:93:fb:8f:f6:
ad:d3:82:70:f1:29:08:c1:8d:ed:15:38:71:9e:15:43:cf:ca:
68:24:5e:d6:ff:33:d3:8a:0a:eb:30:a2:c5:80:69:ea:3b:9b:
9b:5c:b4:d9:cd:79:d3:d4:1d:9a:49:f7:6c:b7:96:19:2d:d2:
da:54:32:6d:53:cb:57:c0:22:9e:90:af:ce:55:d0:fc:c1:6d:
6c:33:d1:4c:59:17:37:7d:69:47:a1:30:8b:31:23:58:ed:1b:
cc:f0:35:f4:42:6c:c2:89:59:f5:1d:51:29:43:00:65:9f:5a:
72:11:0e:6f:3f:a0:86:df:d8:a7:00:cb:c3:be:dc:63:2d:76:
ec:5c:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:10 2024 by rpki-client on console-fra.rpki-client.org