Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/jOl0EsJLdgXnS--2Ok6z4w90TtE.roa
File: jOl0EsJLdgXnS--2Ok6z4w90TtE.roa (raw, json)
Hash identifier: BDKnxYPl86RvCwYXVa1zL+PQJVWRVnJPqtTTSQf5AzU=
Subject key identifier: 8C:E9:74:12:C2:4B:76:05:E7:4B:EF:B6:3A:4E:B3:E3:0F:74:4E:D1
Certificate issuer: /CN=21ae63c7fa8753f01470b35e294a0fb586dbf553
Certificate serial: 4CA954
Authority key identifier: 21:AE:63:C7:FA:87:53:F0:14:70:B3:5E:29:4A:0F:B5:86:DB:F5:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/jOl0EsJLdgXnS--2Ok6z4w90TtE.roa
Signing time: Sat 01 Jan 2022 02:57:51 +0000
ROA not before: Sat 01 Jan 2022 02:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60609
IP address blocks: 185.165.252.0/22 maxlen: 22
185.165.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5024084 (0x4ca954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ae63c7fa8753f01470b35e294a0fb586dbf553
Validity
Not Before: Jan 1 02:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ce97412c24b7605e74befb63a4eb3e30f744ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:e8:62:7a:e7:19:a2:4b:bd:ce:64:46:f0:
65:be:52:29:b5:18:38:99:ac:4e:20:67:28:e3:c4:
3b:b8:44:d5:b7:e9:60:e1:1f:22:99:c2:65:bc:ee:
56:73:d9:de:5e:7f:24:da:7a:ec:bd:2c:c3:02:9f:
9f:06:4f:4f:bc:41:cb:6c:53:ad:54:8f:02:db:51:
04:95:3a:95:f9:5b:8d:31:98:b5:5e:15:7a:bc:37:
f9:04:89:ca:69:26:b8:9e:dc:75:88:ed:2c:a2:71:
4d:5a:f9:64:3e:58:ce:53:9e:ee:8c:21:e2:17:06:
75:5e:cd:23:7e:96:d2:a3:ba:d3:7c:4b:c9:73:5f:
6a:86:64:bd:7b:73:3f:d6:09:37:19:b7:af:34:ab:
74:11:b1:cc:f9:8e:a5:51:3c:2a:be:e4:88:6c:2f:
e4:1e:ad:c4:33:62:73:12:25:ca:3f:3b:ca:d1:6e:
3f:1c:1c:b8:5d:b5:a0:39:39:6f:55:4c:c9:78:0e:
95:2d:f7:2b:58:05:a0:c0:2a:50:1a:3a:8d:ca:15:
36:41:ab:03:0d:f0:2c:2d:6d:d4:f4:9d:47:75:43:
4c:cd:20:60:ba:21:93:25:21:0e:24:2e:35:95:a3:
d6:d9:aa:f9:26:8b:87:e7:4a:e3:c5:14:b0:52:cc:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E9:74:12:C2:4B:76:05:E7:4B:EF:B6:3A:4E:B3:E3:0F:74:4E:D1
X509v3 Authority Key Identifier:
keyid:21:AE:63:C7:FA:87:53:F0:14:70:B3:5E:29:4A:0F:B5:86:DB:F5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/jOl0EsJLdgXnS--2Ok6z4w90TtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.252.0/22
Signature Algorithm: sha256WithRSAEncryption
07:7e:3f:40:9a:20:d6:06:9e:c1:d0:7d:27:a4:90:27:ec:2a:
12:83:6b:db:52:db:b7:f7:2b:4e:79:d2:7f:91:bd:4b:47:57:
82:76:38:55:8d:9c:a4:16:0f:3f:2a:c1:6c:e4:b9:45:e1:4e:
5c:55:08:b0:58:13:80:37:83:10:dc:7a:29:e2:09:c1:1c:49:
08:d3:37:70:10:e5:fa:b4:25:73:6f:88:8e:af:4b:2c:7f:db:
8e:19:ca:29:b5:46:47:9b:ed:b8:a3:a8:0e:37:b5:6a:06:58:
fa:42:ba:20:3f:94:65:6e:48:12:4a:3e:69:00:5d:26:c2:6c:
cc:1c:0f:7f:6f:47:2c:c3:a3:8f:5c:a3:cd:d3:3a:01:97:e9:
3b:c9:30:05:a0:78:4d:3e:ee:3d:cb:f0:32:6c:65:da:72:76:
e2:9b:38:94:20:e4:27:33:85:99:58:7a:16:d7:ea:22:72:a5:
e9:51:88:03:ca:4c:93:fc:0e:bb:f5:e3:ee:bf:d5:71:d5:a3:
9b:9f:a2:2d:f8:20:17:e0:02:44:41:6d:76:03:2b:bf:1f:17:
97:9b:a4:1a:94:5a:15:60:22:12:a5:5c:f2:94:9b:98:5d:a5:
37:a4:eb:1c:e3:99:44:a0:6a:ce:76:96:49:4d:8f:72:cb:99:
66:66:01:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org