Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/ivXy_NY_9Ok_QrOgH8erSRO-eHU.roa
File: ivXy_NY_9Ok_QrOgH8erSRO-eHU.roa (raw, json)
Hash identifier: qDq8rTwDTf9wOPmG8ST8G8zFT6EpLlG46I4iLpegams=
Subject key identifier: 8A:F5:F2:FC:D6:3F:F4:E9:3F:42:B3:A0:1F:C7:AB:49:13:BE:78:75
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 0192D8AAACF5C0DB6CB745CB8F7E4DDA3946
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/ivXy_NY_9Ok_QrOgH8erSRO-eHU.roa
Signing time: Tue 29 Oct 2024 14:25:16 +0000
ROA not before: Tue 29 Oct 2024 14:25:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202803
IP address blocks: 185.154.44.0/22 maxlen: 24
185.154.44.0/23 maxlen: 23
185.154.46.0/23 maxlen: 23
2a0b:5ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:aa:ac:f5:c0:db:6c:b7:45:cb:8f:7e:4d:da:39:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Oct 29 14:25:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8af5f2fcd63ff4e93f42b3a01fc7ab4913be7875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:fc:88:95:a5:53:3f:8f:b1:7d:14:b1:bf:
3a:5d:46:69:df:d5:70:ff:c8:56:76:56:67:ba:c4:
68:74:4e:63:45:78:be:0b:b9:1d:4a:8d:29:09:e1:
11:54:b3:df:0f:b9:b0:10:ca:a6:b6:8b:95:a9:5d:
ab:58:cc:9e:f9:20:e7:e8:2a:67:7a:a7:6c:5b:54:
07:c5:f0:46:9c:12:cf:a5:ee:ee:19:9f:4c:ad:bf:
ca:13:3e:d3:62:de:9e:54:d4:ef:bc:81:4e:47:65:
13:d7:94:91:98:77:92:67:8b:fc:83:88:19:8f:fb:
a4:ec:d0:b8:2a:6d:2a:3f:de:77:c2:28:3f:5f:15:
f9:46:9e:ea:99:55:e3:b9:77:42:0b:b5:e0:5c:3c:
7a:a8:77:6b:0e:18:59:00:16:3d:5c:80:55:5d:c1:
71:81:44:70:30:aa:05:6b:84:4c:9c:f5:94:70:69:
46:a4:39:16:67:4a:f2:58:a1:80:0a:0e:e5:59:42:
bc:34:c2:c3:b1:02:77:90:f8:0b:05:03:da:0d:bb:
01:97:3f:5b:27:94:37:40:aa:cc:54:00:7c:9d:67:
f6:78:89:a9:33:45:11:7c:c4:d7:d6:42:81:e0:55:
83:30:b9:a5:de:ac:70:2b:ef:ae:f9:4e:51:0d:17:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F5:F2:FC:D6:3F:F4:E9:3F:42:B3:A0:1F:C7:AB:49:13:BE:78:75
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/ivXy_NY_9Ok_QrOgH8erSRO-eHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.44.0/22
IPv6:
2a0b:5ac0::/29
Signature Algorithm: sha256WithRSAEncryption
87:e8:30:29:48:e2:9f:5d:5c:47:7f:e4:8f:2e:cc:71:3b:a3:
cb:67:f0:2d:fc:e5:4b:59:44:3f:2a:df:a2:96:26:bd:93:14:
c6:63:9b:3a:9e:42:21:59:14:42:6e:c7:c7:c2:c7:a2:02:05:
99:8f:f8:66:db:5c:82:be:f8:1a:1b:60:97:b2:bf:50:dc:08:
d9:4a:2f:18:97:1a:e5:5e:28:82:d2:05:1f:00:d6:a7:51:c4:
ff:a6:fd:41:57:22:13:ea:cf:05:30:62:38:9e:03:04:58:a7:
63:73:11:5e:9f:3c:7f:a8:13:bd:fb:53:f0:a6:2b:0f:28:ed:
42:f5:3a:b7:c4:f9:74:cc:68:7d:6f:93:a0:0e:74:c4:4f:ad:
7c:08:e2:08:88:cb:2f:d3:e1:26:03:35:5a:70:b3:33:d5:cb:
fa:b5:ef:73:b7:75:bc:4f:11:f2:eb:ce:ca:56:c9:1e:3c:ea:
7f:29:db:ba:21:7a:60:f5:cc:9d:a7:ec:7e:56:ad:17:06:3e:
4e:7b:03:56:8b:fe:83:b6:dc:41:1c:7c:02:44:e0:b9:54:75:
f4:b8:ea:93:dc:e6:6b:ef:39:0e:70:e2:21:ba:31:a3:d5:d8:
7f:64:6a:51:ff:d7:6c:0f:24:72:96:b5:74:a1:39:f7:7e:5c:
af:fd:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:12 2024 by rpki-client on console.sobornost.net