Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/2AA22J0LHJJ7MA_iX55V7pLbpy8.roa
File: 2AA22J0LHJJ7MA_iX55V7pLbpy8.roa (raw, json)
Hash identifier: RFHOsU0l+dF+xW7XZXCbttuY9qCi0bGdXh6MPG44jSc=
Subject key identifier: D8:00:36:D8:9D:0B:1C:92:7B:30:0F:E2:5F:9E:55:EE:92:DB:A7:2F
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018920D97B6786AFB2EFCC9DE5188E83FA75
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/2AA22J0LHJJ7MA_iX55V7pLbpy8.roa
Signing time: Tue 04 Jul 2023 12:21:10 +0000
ROA not before: Tue 04 Jul 2023 12:21:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.149.148.0/24 maxlen: 24
185.83.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:d9:7b:67:86:af:b2:ef:cc:9d:e5:18:8e:83:fa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 4 12:21:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d80036d89d0b1c927b300fe25f9e55ee92dba72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:7e:0e:cf:b6:b4:51:17:19:7b:b1:93:0f:
8b:fb:90:c4:6c:0e:ed:27:2d:6b:7e:bc:ce:45:83:
9d:08:58:fa:e6:05:10:53:c9:d6:35:70:7d:73:08:
42:7e:19:8c:ec:f6:d4:a2:b6:28:19:2e:3f:14:a5:
3e:3e:f0:e7:e6:fc:80:7f:4b:e7:53:80:9b:7c:fe:
64:d8:c3:e8:16:7e:29:90:36:e6:36:99:03:38:68:
06:5f:88:ae:6b:a6:3d:43:f1:24:93:1f:66:d9:ec:
e8:71:d7:d1:94:31:a6:5c:05:b8:35:68:60:4e:7f:
fb:b9:12:2d:e1:10:27:99:d0:24:d5:fb:9b:59:29:
79:31:6c:ee:96:0b:5d:e0:bc:dc:4f:6a:31:11:bf:
50:8e:77:d0:eb:46:87:eb:62:fd:7b:a1:00:d7:0a:
95:25:69:3a:98:90:f0:fc:52:2b:92:08:0b:95:21:
a5:ed:fc:69:2d:5b:46:a6:99:14:ec:f4:fa:60:54:
5f:45:f1:e0:ba:6e:a2:2c:2b:ee:96:ee:86:61:00:
df:ee:f6:28:e2:1b:60:a7:60:c9:5e:a9:5d:26:a0:
a3:77:09:3b:61:3a:11:80:ed:b9:02:ea:a4:e8:dc:
99:c8:7b:c6:aa:15:d9:96:cd:03:d3:ef:0e:59:d4:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:36:D8:9D:0B:1C:92:7B:30:0F:E2:5F:9E:55:EE:92:DB:A7:2F
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/2AA22J0LHJJ7MA_iX55V7pLbpy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.231.0/24
185.149.148.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ab:3f:bf:84:4a:6e:5e:bd:a9:bb:4e:94:33:77:18:2e:2e:
3f:20:96:a1:1c:5c:3b:d1:4e:66:dc:09:ca:38:02:ff:ce:65:
54:eb:64:f7:fb:62:89:6f:c5:4d:43:b5:e4:c5:73:58:bf:1d:
b0:a0:6c:de:62:de:99:93:c8:9a:a5:b9:ee:92:27:4f:d5:fe:
eb:7b:79:02:c3:9a:99:28:e2:f1:93:25:f7:f6:c4:1d:e1:d3:
17:74:87:ed:8d:9d:07:f8:17:f1:a2:1e:a3:87:1c:76:35:32:
e6:76:14:58:9d:79:fa:90:11:7a:cf:3e:df:71:c8:56:0a:2d:
e6:94:ea:d2:71:41:43:48:d4:53:09:d1:a9:04:1c:f2:71:7d:
0c:9d:2b:dd:7d:e1:94:1f:e7:3f:2f:f1:b6:81:30:dd:63:c6:
0a:70:23:97:f8:9b:f5:41:0c:18:34:e3:72:2a:2f:67:6f:aa:
14:5b:da:14:ab:cf:d7:c9:ff:4b:8b:2a:b7:f4:54:75:1b:a6:
15:11:bb:f3:c3:44:83:15:79:08:39:79:a0:b3:ff:c9:e2:f8:
b7:a4:f1:61:11:ab:f7:3e:81:07:be:1e:95:2f:fb:be:3b:13:
f8:41:cc:74:66:2f:dd:c0:86:b6:ea:fe:c2:5d:03:aa:5f:1a:
14:62:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:50 2025 by rpki-client