Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/olnjEg_x4C9c9RZ9Ss6iBphm6yY.roa
File: olnjEg_x4C9c9RZ9Ss6iBphm6yY.roa (raw, json)
Hash identifier: YPw0i6pQMm2//sbG2UOhLXZl7b7BaYk84wDbqIHD2j8=
Subject key identifier: A2:59:E3:12:0F:F1:E0:2F:5C:F5:16:7D:4A:CE:A2:06:98:66:EB:26
Certificate issuer: /CN=ec82c749731f9543ae9a6242ebcde9b0f183ca7f
Certificate serial: 01B69FFA
Authority key identifier: EC:82:C7:49:73:1F:95:43:AE:9A:62:42:EB:CD:E9:B0:F1:83:CA:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ILHSXMflUOummJC683psPGDyn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/olnjEg_x4C9c9RZ9Ss6iBphm6yY.roa
Signing time: Sat 01 Jan 2022 11:02:52 +0000
ROA not before: Sat 01 Jan 2022 11:02:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44092
IP address blocks: 185.255.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28745722 (0x1b69ffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec82c749731f9543ae9a6242ebcde9b0f183ca7f
Validity
Not Before: Jan 1 11:02:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a259e3120ff1e02f5cf5167d4acea2069866eb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:09:87:6e:18:cd:c3:87:15:8b:a3:50:78:7b:
97:0f:c9:4d:e6:f6:db:f8:00:a3:38:fb:31:de:6a:
62:4f:16:fd:aa:a7:9a:13:2b:86:f7:6a:55:e4:1a:
dd:59:1e:4c:c5:0c:f9:76:30:40:fc:fa:19:cf:e1:
2b:45:be:11:ec:9f:1c:cf:e0:3b:88:d4:27:dd:4d:
a2:49:7a:a9:eb:ed:53:49:b5:0d:b6:ba:a2:8c:af:
a5:e7:68:5f:b3:ef:1f:8c:9a:7d:b8:40:62:9f:e9:
5f:9a:b9:3b:a1:43:33:c1:44:2b:83:d7:12:38:af:
54:12:0d:8d:e6:df:8a:fa:ac:0c:46:09:67:d4:b3:
fb:e5:58:da:fc:3b:7c:ab:61:07:65:61:75:c4:21:
c8:7a:d3:e4:2f:54:da:28:bb:3d:64:8f:9d:9f:e2:
d6:35:3b:8b:f3:14:6f:ef:32:82:d3:54:cb:d9:e3:
ad:fe:53:ac:21:26:37:97:d3:32:d9:2a:a6:f8:a0:
2f:03:5a:51:f9:6f:6b:6b:61:2e:a8:eb:00:af:2f:
48:b0:f6:df:c2:2d:7f:0d:83:c3:22:d5:5f:8d:6c:
a5:9c:48:29:e5:d3:12:43:02:b2:14:6a:c6:64:54:
42:02:a6:cc:ad:26:77:b6:84:06:ed:e9:fa:01:59:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:59:E3:12:0F:F1:E0:2F:5C:F5:16:7D:4A:CE:A2:06:98:66:EB:26
X509v3 Authority Key Identifier:
keyid:EC:82:C7:49:73:1F:95:43:AE:9A:62:42:EB:CD:E9:B0:F1:83:CA:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ILHSXMflUOummJC683psPGDyn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/olnjEg_x4C9c9RZ9Ss6iBphm6yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/7ILHSXMflUOummJC683psPGDyn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fe:cf:b8:69:4b:e4:c7:62:ef:64:ae:e3:a7:e8:43:93:cd:
5b:7f:d8:d4:ef:a4:ca:fe:68:e5:c0:62:a2:79:58:de:f5:28:
23:e0:3b:6f:ae:fe:68:18:f0:0c:37:ba:3a:e5:97:7b:ef:4f:
41:01:05:5e:7c:7d:00:11:7a:01:27:fd:d6:7b:dc:f3:db:1c:
48:72:90:0d:14:d5:a0:b9:08:e8:54:0c:83:de:a9:7c:61:41:
73:b8:11:85:b5:e5:de:0a:40:ac:bd:b5:aa:c7:1b:f2:ac:1c:
38:62:75:58:e9:a3:37:10:dd:b5:4f:96:fd:c2:0c:0f:62:16:
ea:ad:4b:bd:c3:45:00:84:f7:b4:a2:83:e2:a6:6d:5b:cc:b6:
82:c9:aa:88:24:aa:0a:09:56:db:99:fc:e0:b2:fb:d3:34:43:
86:d6:58:b5:e5:12:ae:49:b2:02:11:46:27:c3:f9:d8:2c:f0:
62:38:51:1b:e6:6f:c8:11:e3:ff:68:83:83:d0:a7:3c:89:e3:
b9:57:5d:18:5c:8d:4b:34:94:50:26:5d:f1:2a:d8:e3:1e:b1:
34:f4:a6:6d:5d:d3:10:53:bc:fd:83:73:89:f4:d6:ac:b1:ee:
51:74:8e:a8:fc:c9:c4:8d:c4:b8:de:50:53:17:1d:6e:59:06:
8f:06:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:43 2024 by rpki-client on console-ams.rpki-client.org