Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/LRahtwPyLnhGHjIAqEwR35zh8wo.roa
File: LRahtwPyLnhGHjIAqEwR35zh8wo.roa (raw, json)
Hash identifier: xisEo/wJPbnEbdhXAjjeJL0lywSNewJkF5FgUw9xgEU=
Subject key identifier: 2D:16:A1:B7:03:F2:2E:78:46:1E:32:00:A8:4C:11:DF:9C:E1:F3:0A
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 0183A1F0A5BE80A65D947A8F00CA38A92B09
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/LRahtwPyLnhGHjIAqEwR35zh8wo.roa
Signing time: Tue 04 Oct 2022 07:40:46 +0000
ROA not before: Tue 04 Oct 2022 07:40:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29713
IP address blocks: 185.240.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a1:f0:a5:be:80:a6:5d:94:7a:8f:00:ca:38:a9:2b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Oct 4 07:40:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d16a1b703f22e78461e3200a84c11df9ce1f30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:16:6d:b3:41:3f:37:ea:c7:9e:87:bd:ae:
b4:ec:55:7e:7d:97:21:45:2f:3d:26:cc:88:ad:f7:
d2:2e:7e:b4:6d:28:52:15:c5:a1:fd:b5:46:16:a9:
be:54:4d:07:25:57:32:d8:16:cf:1e:91:80:26:b7:
45:91:87:7d:63:fd:a2:68:9b:a5:44:ed:f8:a8:f3:
6c:7c:ee:c5:4c:c4:51:b3:ae:34:a2:18:e1:33:ba:
86:15:57:ba:2d:d9:6e:4a:56:4e:3f:4a:80:8f:7e:
75:24:71:86:a6:48:6a:22:0f:83:86:5e:82:da:14:
f8:4c:38:18:5c:5a:f9:93:13:5f:13:39:aa:8e:aa:
cd:0a:97:18:bf:04:63:44:b8:5b:9f:1d:ec:c8:4c:
4c:8e:6a:67:81:9f:b9:f8:77:90:88:e7:1e:10:db:
bd:12:26:8a:85:8d:f4:94:2f:25:6c:47:3b:41:57:
69:23:f8:ac:4e:d2:e8:ba:07:6e:62:75:e4:dc:6f:
70:c3:e6:de:bb:8a:63:1a:b3:7c:50:fb:90:d1:cd:
1c:e9:37:34:2a:9a:ea:25:05:22:4f:88:e1:60:6b:
e1:3a:8c:12:cf:fb:e0:22:e0:9f:2e:c6:62:73:40:
fd:de:b8:69:3f:21:48:32:70:f2:62:51:df:f2:b6:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:16:A1:B7:03:F2:2E:78:46:1E:32:00:A8:4C:11:DF:9C:E1:F3:0A
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/LRahtwPyLnhGHjIAqEwR35zh8wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.87.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e9:39:82:da:f8:c8:8a:1a:c2:bd:8e:65:05:ed:80:46:48:
41:3d:7e:ac:bd:58:5b:34:88:af:b1:07:9e:73:46:29:2e:93:
eb:83:10:3c:58:68:41:a1:88:5a:62:46:88:c0:5b:11:2f:55:
64:27:56:4e:82:ef:a2:92:d8:22:56:ce:54:1e:d8:ab:87:28:
78:77:96:d7:69:9b:4f:01:13:ce:a3:99:a1:91:b9:22:d4:ff:
ba:c7:bc:14:89:d7:fd:e4:6d:1d:4d:21:c2:b4:b8:c8:ed:cd:
e1:98:06:52:b8:f5:7d:15:77:da:04:f8:ef:2d:31:80:d6:22:
1e:2f:b7:4b:ba:7e:11:85:b1:95:99:29:d3:3c:28:2d:53:73:
ed:72:be:b6:b4:dc:92:28:2e:c3:93:d5:27:55:f7:97:b6:d1:
41:0b:46:c2:cb:e2:7e:e2:9f:b2:8c:89:0a:b2:c7:2f:13:2c:
f0:62:8e:81:c7:cb:cf:4d:12:14:4b:60:8c:1e:8c:e8:b3:2b:
68:bc:95:c9:4a:fd:86:6a:ed:91:72:43:16:90:ae:d3:e8:f2:
2b:c6:6e:c6:df:73:44:03:8e:44:83:a5:43:a6:af:b5:51:b7:
c0:01:2f:d0:c5:44:f8:8a:38:0a:f2:c9:12:aa:25:37:ac:73:
29:d5:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:58 2023 by rpki-client on console-fra.rpki-client.org