Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/rajYJAWkEOjPF-M7hisQkUIzdYo.roa
File: rajYJAWkEOjPF-M7hisQkUIzdYo.roa (raw, json)
Hash identifier: KxJp/NrZTNIUypIt85T3wmc7QgKYsEBHXDyf658uL/8=
Subject key identifier: AD:A8:D8:24:05:A4:10:E8:CF:17:E3:3B:86:2B:10:91:42:33:75:8A
Certificate issuer: /CN=2df746308f9d976d5b1ff6363140ec7c2c35beea
Certificate serial: 0EB12C1D
Authority key identifier: 2D:F7:46:30:8F:9D:97:6D:5B:1F:F6:36:31:40:EC:7C:2C:35:BE:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfdGMI-dl21bH_Y2MUDsfCw1vuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/rajYJAWkEOjPF-M7hisQkUIzdYo.roa
Signing time: Sat 01 Jan 2022 11:54:35 +0000
ROA not before: Sat 01 Jan 2022 11:54:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29423
IP address blocks: 185.201.144.0/22 maxlen: 24
2a0a:c5c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246492189 (0xeb12c1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df746308f9d976d5b1ff6363140ec7c2c35beea
Validity
Not Before: Jan 1 11:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ada8d82405a410e8cf17e33b862b10914233758a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:97:05:4b:a0:bb:92:08:df:f3:44:58:8a:
67:5c:8e:df:9e:81:13:82:86:91:51:d7:76:12:b6:
7a:af:23:10:0a:18:9d:05:69:5f:31:55:b7:98:e6:
a8:7b:59:17:c6:ff:34:ac:8d:c4:96:63:85:be:2f:
87:a3:19:a5:a7:f7:8e:5b:fe:41:00:66:9e:83:71:
de:7f:b2:5e:a7:36:bd:4c:d3:5e:1a:3f:4d:e1:b9:
ef:b7:90:23:ec:01:33:0b:42:c6:e8:3e:35:0e:e1:
30:f1:47:59:21:e0:b0:ee:ab:42:18:25:36:63:fe:
4d:b5:05:90:07:ee:d8:78:46:47:97:f7:41:85:19:
80:e9:9c:4b:75:cb:4e:86:f9:f4:1c:1e:46:72:31:
ab:6d:02:26:9d:9d:cc:ca:5c:e7:c5:50:5a:69:c6:
9f:7f:fe:72:bf:c8:50:7f:bf:69:47:d6:9a:83:9a:
08:75:f6:c4:f4:b7:2a:8a:a3:0e:fc:fd:43:ce:e2:
4b:28:7b:3f:49:a8:a0:6d:3d:0f:c5:25:47:b2:b5:
9c:83:a8:fd:cf:22:eb:72:53:74:f1:14:43:05:45:
d8:0b:a7:0d:60:90:88:de:4c:58:72:b7:3f:1e:41:
72:d1:30:45:f7:30:dd:c7:eb:55:8a:0a:e2:8c:bc:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A8:D8:24:05:A4:10:E8:CF:17:E3:3B:86:2B:10:91:42:33:75:8A
X509v3 Authority Key Identifier:
keyid:2D:F7:46:30:8F:9D:97:6D:5B:1F:F6:36:31:40:EC:7C:2C:35:BE:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfdGMI-dl21bH_Y2MUDsfCw1vuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/rajYJAWkEOjPF-M7hisQkUIzdYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/LfdGMI-dl21bH_Y2MUDsfCw1vuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.144.0/22
IPv6:
2a0a:c5c0::/29
Signature Algorithm: sha256WithRSAEncryption
45:8e:55:40:c8:c4:e5:e8:4f:2b:e1:3d:63:41:c8:9b:0f:65:
c0:49:d7:db:f9:d4:15:3e:16:bb:23:64:c9:50:2b:65:81:cc:
64:76:dd:fb:e8:78:36:0f:b4:e2:d4:e8:77:32:60:d7:0a:f1:
db:a2:ec:d3:8f:5e:bf:08:ca:0e:50:46:36:3f:4a:ea:d8:51:
2c:10:f8:4a:32:59:22:81:d2:45:33:b4:35:4d:ca:64:ae:81:
4e:f8:5f:0f:c2:4d:a3:33:84:be:ad:9e:fa:16:9f:b4:d0:dc:
d1:3b:c5:e2:3f:e0:67:9d:99:23:6b:f5:55:90:34:e4:f3:1d:
e5:28:67:48:c3:53:14:11:4d:34:68:26:75:b3:18:ce:f1:de:
51:8c:f7:dd:47:9d:b5:28:b0:1f:31:d0:d4:21:ed:68:46:69:
fc:43:8b:e5:51:1d:cb:b9:c4:f0:09:e6:e4:b7:45:15:90:14:
40:03:36:12:d2:28:0c:e5:cd:4a:51:30:22:1c:dc:cc:ff:29:
10:a1:2f:3a:22:2d:4d:5f:04:d0:75:94:b2:5f:71:4c:6b:5a:
b6:42:18:d7:c3:8e:b0:93:4e:04:31:bd:61:fd:3a:81:b4:84:
4b:c7:17:4a:e3:a2:45:28:bb:94:c7:e9:a8:03:93:54:50:bb:
cc:31:7f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:39 2024 by rpki-client on console-fra.rpki-client.org