Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/GLVlAj1CD5jxCsNYPod6dOFtNLM.roa
File: GLVlAj1CD5jxCsNYPod6dOFtNLM.roa (raw, json)
Hash identifier: m5asvfKijaaRYIsIB2aztDlTUcHXv9KyqcQIAyJN32w=
Subject key identifier: 18:B5:65:02:3D:42:0F:98:F1:0A:C3:58:3E:87:7A:74:E1:6D:34:B3
Certificate issuer: /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial: 01840F52C0B3AA582CFE4616D0F4FAF5657B
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/GLVlAj1CD5jxCsNYPod6dOFtNLM.roa
Signing time: Tue 25 Oct 2022 13:26:32 +0000
ROA not before: Tue 25 Oct 2022 13:26:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.150.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:52:c0:b3:aa:58:2c:fe:46:16:d0:f4:fa:f5:65:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Validity
Not Before: Oct 25 13:26:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18b565023d420f98f10ac3583e877a74e16d34b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:71:d7:c7:c1:07:eb:0b:1e:89:aa:9f:ba:
23:75:ee:bd:61:ee:c1:04:e2:7e:3f:f5:ec:65:01:
df:4a:5a:a4:c6:a9:d7:ae:15:12:21:27:49:57:3a:
63:bb:6d:ca:32:0d:4b:e1:a8:23:08:c1:b1:89:e3:
33:bd:b3:45:38:10:cb:1e:4f:1b:16:f1:53:95:69:
83:86:2f:e4:a0:3b:bc:07:e3:b5:d4:1d:e5:e4:07:
93:3f:93:92:99:52:bb:db:40:6a:e6:65:6b:34:ec:
70:c4:f2:b5:4c:3c:28:ff:2d:21:38:82:18:3f:19:
06:b6:f0:ec:2f:0b:69:81:a2:fc:5e:4f:37:61:d1:
56:0d:e5:82:01:71:d1:40:60:0b:e3:6f:e3:6a:a2:
dc:65:c7:6d:f2:4f:49:d8:24:2d:10:4d:e1:18:ad:
3b:59:bd:3c:e6:17:53:49:05:1a:ed:02:5b:62:cb:
47:87:08:7d:c6:ac:1f:86:12:d3:bf:25:50:0d:07:
e0:01:1f:42:da:03:49:ea:5c:1f:2f:2b:44:91:c6:
48:fa:98:13:f4:a8:6a:25:b7:4c:28:14:af:64:bb:
65:5a:33:ea:48:8a:be:0e:a4:55:45:6e:7c:6a:60:
47:e2:c9:70:05:ba:7c:76:01:d8:db:6e:5a:f0:ec:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B5:65:02:3D:42:0F:98:F1:0A:C3:58:3E:87:7A:74:E1:6D:34:B3
X509v3 Authority Key Identifier:
keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/GLVlAj1CD5jxCsNYPod6dOFtNLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.18.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2c:e2:8e:b9:3d:47:59:ad:bd:43:3b:f0:61:df:3d:67:1c:
40:4a:67:62:2a:de:0a:b3:4d:7a:2d:d9:1b:fe:6c:8d:6f:8d:
27:d5:b1:77:04:bf:42:a3:28:8a:c5:8f:27:b7:32:50:76:6e:
3f:9b:dd:54:d1:63:39:11:bd:17:c5:97:57:1b:3e:d9:32:ef:
6c:14:d7:18:47:a2:d9:91:3f:96:1b:ab:6f:77:f2:0e:c8:4f:
2e:5f:71:d7:fa:e7:82:90:24:f5:a6:0e:d9:84:8e:68:c4:cd:
7a:55:3f:67:15:db:18:b2:13:8a:34:e5:f0:58:f5:cd:06:14:
45:0b:ba:8d:64:72:c5:6a:59:5e:53:7e:d2:ee:85:dc:3e:f6:
54:9d:32:5d:7b:77:0e:fe:b4:d4:30:76:5b:2b:5e:d4:d1:71:
fb:09:38:82:c1:76:d6:7c:af:fe:e0:8f:ce:86:cc:b4:6a:65:
61:23:33:17:3e:12:53:05:81:31:cb:8d:c6:86:00:a5:9b:73:
1e:f7:0d:05:a3:19:12:af:11:d1:15:d7:a3:86:06:c2:46:0c:
4b:95:d0:6b:c5:46:2b:f0:6a:86:4a:90:17:bb:de:45:26:cf:
88:cb:63:61:96:9a:39:49:af:32:27:64:e2:c9:f0:74:25:64:
e3:b9:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:43 2025 by rpki-client