Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Euj0yT7TyzsqzcrrRR8j7IWHHIs.roa
File: Euj0yT7TyzsqzcrrRR8j7IWHHIs.roa (raw, json)
Hash identifier: D0n9E5v2CMo767V0GKDClvmsokbEw9b6M609MX+t+rE=
Subject key identifier: 12:E8:F4:C9:3E:D3:CB:3B:2A:CD:CA:EB:45:1F:23:EC:85:87:1C:8B
Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial: 018CC26D5D77515115BFF3C12890C6482504
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Euj0yT7TyzsqzcrrRR8j7IWHHIs.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60516
IP address blocks: 185.30.4.0/22 maxlen: 22
185.30.4.0/23 maxlen: 23
185.30.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5d:77:51:51:15:bf:f3:c1:28:90:c6:48:25:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12e8f4c93ed3cb3b2acdcaeb451f23ec85871c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2c:f4:77:6f:05:62:ea:74:cf:ee:cc:bf:1d:
6e:8f:e6:99:6b:ed:63:f3:e4:4e:7f:56:f8:d1:71:
bd:18:8a:37:13:09:26:43:14:8b:11:10:0b:33:ed:
2b:cc:3e:34:a6:d8:3f:57:00:bb:22:bc:77:e6:ab:
c4:9d:1f:81:8c:1f:82:e1:d2:61:1f:93:98:60:d7:
a6:cb:4a:9c:09:15:9b:fb:83:3c:9a:ad:bf:28:f6:
ea:5d:56:c7:6d:28:dd:ad:12:f7:95:93:54:90:8b:
b5:c2:ff:ae:9d:7a:2c:f7:b3:17:1d:85:f1:fe:31:
59:2d:74:07:39:7f:4f:f3:50:a5:69:c2:fd:04:ed:
2c:04:d7:6a:c3:14:31:ca:0d:52:9c:fa:8b:fc:87:
a3:e8:d6:3d:d0:aa:c1:7e:95:04:e7:28:d8:bf:c6:
e7:9f:09:54:21:11:ac:8f:59:cd:5d:8f:72:5f:91:
ea:34:4c:97:99:c2:97:e0:7e:87:b8:bb:e0:2e:95:
b7:c1:ea:f5:f2:b1:c9:08:cc:c7:ae:3f:21:e3:c0:
7e:0f:cf:60:00:8e:ef:7f:41:34:f5:2a:ea:e9:e9:
7f:b8:69:42:9d:50:1c:59:2e:17:a8:35:1d:f7:76:
32:b4:82:e2:d8:c0:06:a5:66:f5:9d:85:12:56:08:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:F4:C9:3E:D3:CB:3B:2A:CD:CA:EB:45:1F:23:EC:85:87:1C:8B
X509v3 Authority Key Identifier:
keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Euj0yT7TyzsqzcrrRR8j7IWHHIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.4.0/22
Signature Algorithm: sha256WithRSAEncryption
74:83:31:58:8d:a3:6a:2a:81:e9:37:b4:28:55:93:eb:50:a4:
ed:0b:fe:d2:a2:c7:39:54:09:e6:12:44:f7:de:53:03:bc:31:
48:c4:a6:98:f5:df:10:79:3a:45:a4:ac:c7:4e:70:f3:bb:f9:
e1:e8:c1:40:fe:14:49:61:f4:56:05:ef:ba:ac:50:69:fc:03:
bc:6a:ec:ef:57:27:2c:bb:89:c6:ab:0f:9c:ef:75:27:aa:90:
04:cf:ac:bd:19:29:7c:cb:9a:d8:1c:6c:a3:b9:b4:14:2f:1d:
80:f7:3f:5e:ab:59:13:92:73:7f:d1:b6:30:3e:3d:9e:73:3c:
1f:09:b7:1e:cb:44:d3:38:bd:d0:d0:45:ca:9b:3d:c2:19:9a:
81:23:0b:01:e7:7f:b1:d8:74:b6:5a:98:10:ee:0a:af:d5:56:
89:82:e5:a8:6a:8d:b2:7b:8a:6b:ef:8e:02:1b:10:4c:1e:1c:
a1:b0:58:2b:20:44:ef:88:4b:11:53:6f:4a:cf:99:a3:4d:bd:
43:fb:8a:3d:56:f3:e2:3e:29:7f:62:2e:70:19:4c:1a:54:9b:
dc:39:39:db:e2:24:f9:5e:86:3b:eb:ee:ec:50:7e:3d:2f:f5:
a2:4a:f8:ef:aa:55:91:09:ef:a7:e5:c8:5a:8f:0b:45:a7:a5:
57:72:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:46 2025 by rpki-client