Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/LxjIpbZuTJq--IMHhGZoZsf2n0Y.roa
File: LxjIpbZuTJq--IMHhGZoZsf2n0Y.roa (raw, json)
Hash identifier: LTTy5xAS1AcGAjvMljYI9xe5bKQVGE8wmgjPB6AFPV4=
Subject key identifier: 2F:18:C8:A5:B6:6E:4C:9A:BE:F8:83:07:84:66:68:66:C7:F6:9F:46
Certificate issuer: /CN=b06564e065aa0fecbb76ee8df2906c04b8244135
Certificate serial: 018CC56E02F0B1F0384E30413B442F202A03
Authority key identifier: B0:65:64:E0:65:AA:0F:EC:BB:76:EE:8D:F2:90:6C:04:B8:24:41:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVk4GWqD-y7du6N8pBsBLgkQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/LxjIpbZuTJq--IMHhGZoZsf2n0Y.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6876
IP address blocks: 185.21.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:02:f0:b1:f0:38:4e:30:41:3b:44:2f:20:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06564e065aa0fecbb76ee8df2906c04b8244135
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f18c8a5b66e4c9abef8830784666866c7f69f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:fa:c3:72:7a:cb:22:0a:87:9a:64:d7:47:
5b:5c:af:16:4d:53:be:e0:4b:57:dd:1d:b7:f3:6d:
3d:1a:ae:b0:5e:5f:73:00:02:3b:48:f6:82:c2:ec:
e6:51:d8:31:17:87:ee:98:b4:55:27:90:a0:c0:f6:
fa:92:db:ba:3d:33:f2:98:85:70:7e:3d:bf:6c:fa:
f0:02:24:2d:b4:59:5e:73:23:00:63:02:3e:29:3f:
3e:d4:07:77:ee:ec:18:e4:db:e6:28:94:ae:f4:3f:
53:57:54:5d:7c:f1:9e:bb:03:79:c9:d2:9a:b3:f2:
b3:61:80:1b:bc:9f:a1:3a:d7:e4:d5:90:64:7c:0c:
7c:9c:f9:05:bb:de:78:68:29:08:3b:7a:1b:48:8a:
68:d1:68:10:37:4f:93:16:4e:71:d1:a8:5e:27:b7:
4f:79:19:0e:7e:b1:04:fe:25:0a:b4:67:a3:d8:92:
f6:1c:eb:d5:95:65:e9:ca:a9:af:f4:a2:5b:b4:8c:
bc:16:5d:66:63:a5:90:f5:b3:22:08:e6:d1:85:eb:
ad:e5:1f:7b:9c:24:65:d5:79:d2:f3:96:c8:08:03:
ff:12:a4:79:5a:16:7e:52:49:0d:e9:2d:10:bc:8d:
87:45:00:89:c5:24:5a:03:57:e0:89:ac:54:bf:fa:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:18:C8:A5:B6:6E:4C:9A:BE:F8:83:07:84:66:68:66:C7:F6:9F:46
X509v3 Authority Key Identifier:
keyid:B0:65:64:E0:65:AA:0F:EC:BB:76:EE:8D:F2:90:6C:04:B8:24:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVk4GWqD-y7du6N8pBsBLgkQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/LxjIpbZuTJq--IMHhGZoZsf2n0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/047325-a98c-43cf-a8ef-d2a85766790d/1/sGVk4GWqD-y7du6N8pBsBLgkQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.51.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3a:ba:3d:ee:d0:65:25:c9:ae:c6:16:66:d7:1c:bf:a4:64:
bf:28:99:6a:8e:3e:b1:5e:ad:55:01:9e:94:1f:d2:c6:f2:36:
03:84:c8:35:e9:2e:7a:ee:8d:cb:f4:a0:bc:25:85:f8:cf:8d:
e3:32:59:38:73:85:e5:be:50:b7:a7:01:02:74:4e:3e:1f:c4:
b8:d6:aa:a2:a4:e0:5b:dc:36:40:80:b2:0b:ea:37:f4:11:83:
90:c7:74:70:f4:4e:c0:bd:ae:09:13:67:7a:4a:01:eb:c9:aa:
b3:cb:36:ea:62:24:e2:fe:b2:06:52:f2:cf:c9:ca:58:a1:de:
53:9a:e2:6b:ec:b0:1a:06:a6:86:ff:98:7f:f6:0e:e1:1d:ed:
19:ae:17:4e:34:b1:95:f6:5d:9b:2c:ce:cc:99:99:97:15:38:
42:7e:0a:41:0c:7b:01:76:61:21:ee:1e:bc:85:4e:83:7a:61:
fc:2e:89:98:02:5b:ba:3e:c9:05:1a:a2:ff:d0:a7:51:86:1f:
43:bc:c6:85:95:d0:b2:1c:da:99:85:a0:31:46:02:a1:e6:dc:
91:a2:e4:c0:cb:95:09:88:40:b4:49:57:0b:c2:a8:1c:83:ce:
36:a1:86:9e:48:c0:c4:da:17:e4:cd:a4:c5:aa:9c:dd:9f:97:
ff:6a:dd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:32 2024 by rpki-client on console-ams.rpki-client.org