Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/p4cA2LkfrCTIdRfoMbcuAxrs6_o.roa
File: p4cA2LkfrCTIdRfoMbcuAxrs6_o.roa (raw, json)
Hash identifier: PydqBoHR5MWdeFG26uqpNdN1pxfipu34LI+HJkEtsSk=
Subject key identifier: A7:87:00:D8:B9:1F:AC:24:C8:75:17:E8:31:B7:2E:03:1A:EC:EB:FA
Certificate issuer: /CN=b5f3a41eb7b4ab02845b5b0c083f5f406c283a1a
Certificate serial: 01905F7458A4AF701F16D1D845223F4469B6
Authority key identifier: B5:F3:A4:1E:B7:B4:AB:02:84:5B:5B:0C:08:3F:5F:40:6C:28:3A:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfOkHre0qwKEW1sMCD9fQGwoOho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/p4cA2LkfrCTIdRfoMbcuAxrs6_o.roa
Signing time: Fri 28 Jun 2024 15:26:18 +0000
ROA not before: Fri 28 Jun 2024 15:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 185.30.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:74:58:a4:af:70:1f:16:d1:d8:45:22:3f:44:69:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f3a41eb7b4ab02845b5b0c083f5f406c283a1a
Validity
Not Before: Jun 28 15:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a78700d8b91fac24c87517e831b72e031aecebfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:0b:6a:39:b4:b3:3a:c8:57:4d:ef:63:07:
7e:5b:bf:a0:60:5a:d2:4d:54:ac:c5:ed:3d:02:a4:
3d:d8:ed:52:29:4d:34:1d:02:e7:50:7d:c7:1c:37:
aa:32:c0:a3:54:2c:14:e3:ad:37:cf:08:61:b2:0d:
b2:c9:19:c7:09:25:35:5a:d1:ec:ee:7f:c1:a8:f9:
79:3b:bb:f6:07:61:e3:80:21:6a:ee:55:cb:2a:e1:
eb:b7:0d:bc:b1:8f:7b:10:76:c2:89:14:90:47:5e:
21:d8:98:ed:7e:ff:82:35:42:d5:b1:0b:90:6f:29:
18:72:5f:4f:36:b9:cd:a1:48:cc:52:29:55:d3:29:
4a:9b:c4:e0:35:79:27:5a:54:18:a5:67:ff:48:70:
2a:a8:84:28:cb:d3:99:28:05:08:c9:e4:8d:ac:d4:
a0:f2:70:2f:b2:cb:14:e2:60:5f:c0:b4:fc:1a:89:
63:d9:83:19:ce:9f:c8:72:eb:67:e9:b0:e6:31:fd:
45:5f:97:55:91:67:dc:4c:fc:a7:20:0c:cf:14:b6:
6e:9b:b7:6a:36:b9:53:46:a8:e3:d3:9d:c2:4f:91:
fa:1d:62:1f:b5:94:55:dd:14:fa:af:ad:f3:6f:83:
06:cb:33:ad:f8:e2:e2:c6:d4:24:8f:bc:e6:2f:d5:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:87:00:D8:B9:1F:AC:24:C8:75:17:E8:31:B7:2E:03:1A:EC:EB:FA
X509v3 Authority Key Identifier:
keyid:B5:F3:A4:1E:B7:B4:AB:02:84:5B:5B:0C:08:3F:5F:40:6C:28:3A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfOkHre0qwKEW1sMCD9fQGwoOho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/p4cA2LkfrCTIdRfoMbcuAxrs6_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:a7:fe:69:b6:81:b1:59:a0:92:ed:03:1a:98:ab:1c:29:ac:
f1:aa:17:f8:c5:03:33:8b:02:db:97:0c:25:c4:f3:17:5c:d0:
ca:cc:bb:53:f8:93:71:fe:33:50:d6:bc:90:f2:78:57:3d:3f:
4a:ae:d7:56:30:89:cb:20:08:05:dc:6e:ea:81:5b:d5:5b:1a:
14:60:5a:12:4e:91:e7:bd:9d:b7:36:24:ca:df:ea:ba:c4:6e:
f0:1d:91:e2:cd:9f:f5:93:24:bc:d2:6f:4a:56:bd:04:a7:d6:
8b:01:ce:49:82:f0:9b:35:a3:e8:c1:a0:ce:ae:52:31:3e:c7:
1f:c6:23:e1:62:7a:07:50:97:80:6a:6e:de:2a:23:e3:74:4c:
2d:16:51:ef:c4:de:44:dc:cc:1e:ab:e5:d6:c1:a6:03:5c:1d:
a2:de:0a:bc:61:d8:ab:83:47:50:55:b1:b0:78:d0:39:ba:6d:
55:9b:ad:4a:ed:13:22:be:cb:fa:ec:51:1f:1c:7e:49:94:db:
cb:e2:47:bd:ae:65:e3:2a:71:9b:d2:37:1a:9e:cd:7f:af:47:
9d:3c:d4:47:c1:71:14:eb:8a:e3:14:d2:f7:6f:36:4e:69:ec:
98:76:76:fc:0e:aa:4d:b3:f9:83:c3:ee:bb:be:e7:60:31:59:
94:da:9b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 10:58:45 2024 by rpki-client on console-fra.rpki-client.org