Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/PLRElcagMsgpXmm0asuTP-FvUuw.roa
File: PLRElcagMsgpXmm0asuTP-FvUuw.roa (raw, json)
Hash identifier: NKb6gZSTaeQnz5p5tDQhkta7UYMVvFlsGF6xoqQ5L4k=
Subject key identifier: 3C:B4:44:95:C6:A0:32:C8:29:5E:69:B4:6A:CB:93:3F:E1:6F:52:EC
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 018CC5006131785FFEB338A1CBAD4B23B094
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/PLRElcagMsgpXmm0asuTP-FvUuw.roa
Signing time: Mon 01 Jan 2024 12:29:45 +0000
ROA not before: Mon 01 Jan 2024 12:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50530
IP address blocks: 185.129.189.0/24 maxlen: 24
185.129.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:61:31:78:5f:fe:b3:38:a1:cb:ad:4b:23:b0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Jan 1 12:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cb44495c6a032c8295e69b46acb933fe16f52ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:3a:02:49:da:a4:b3:5a:4a:cd:8e:a3:9f:
54:3d:a0:1f:68:bd:45:32:cb:eb:f3:3a:f6:a7:89:
c9:20:82:20:75:6f:bf:9c:82:f1:83:70:7e:f1:b8:
f9:9a:ca:81:f2:07:24:a2:a3:e2:70:bd:ca:47:63:
64:14:83:69:a8:70:38:e1:5d:df:53:a0:bc:d7:46:
6f:8d:2d:99:93:dc:a2:65:fa:a8:53:b1:0e:74:11:
4f:d6:33:33:0e:21:9b:b2:83:da:90:e9:64:b7:5c:
df:3b:e6:47:03:89:d8:1f:2f:76:c0:21:0a:42:9e:
4e:52:11:3a:f1:ef:eb:31:94:d5:2d:e1:bd:92:1d:
09:bd:20:df:c4:fa:da:1c:d1:73:7f:b8:18:c6:eb:
33:4e:6d:f1:1f:da:55:2c:26:a9:53:3f:26:b0:1f:
26:00:a9:94:c5:cb:d7:ef:a4:72:c6:23:33:4c:f4:
a9:60:b4:e7:cf:fb:c9:dc:dd:7f:25:98:47:91:4c:
77:36:2f:50:88:94:55:78:e5:ed:3e:4c:d8:5a:1a:
99:ea:c4:ef:9f:6c:c6:ba:9f:04:b6:b6:4b:72:e5:
bd:45:ea:5b:6b:aa:ea:04:17:5e:5e:4f:6d:89:ae:
12:02:99:04:11:7d:4e:64:cc:3d:bc:78:c4:47:f5:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:44:95:C6:A0:32:C8:29:5E:69:B4:6A:CB:93:3F:E1:6F:52:EC
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/PLRElcagMsgpXmm0asuTP-FvUuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.188.0/23
Signature Algorithm: sha256WithRSAEncryption
70:af:22:a8:85:db:b1:30:3e:9b:33:41:54:40:4f:0b:4b:6d:
57:20:65:12:41:e2:44:33:ab:d4:6e:7d:bc:5a:2a:9e:73:e6:
12:3e:c1:8a:be:76:0e:ab:08:91:bf:5d:a3:8b:04:07:fa:6c:
2c:0e:89:7e:f1:35:48:29:cc:19:95:9d:f9:34:b0:28:da:b6:
b5:6c:67:65:2e:00:64:04:dc:7e:df:7c:d9:29:6c:35:43:45:
b2:db:21:02:f0:1a:02:b7:6f:ae:3b:0b:82:ea:ca:f5:54:44:
52:6e:18:3d:7b:5b:55:93:16:43:ee:2c:d2:e6:5e:eb:50:ac:
90:f9:a8:ad:c5:cf:13:9e:2f:ee:32:2a:62:37:01:e7:30:a7:
e9:31:b7:77:3f:f3:e8:92:af:6e:a1:d0:b5:d6:a2:fb:09:c9:
37:5d:f6:5f:9e:08:56:df:7c:44:b3:13:28:7e:45:18:e4:03:
8e:dd:a3:12:92:85:be:2f:38:7e:bd:49:d6:0f:4d:28:8f:73:
41:08:30:60:36:36:d8:57:ee:32:26:73:25:c4:cb:de:cd:d4:
f7:82:61:29:c7:50:10:04:3d:36:bd:13:2c:18:c4:37:6f:5e:
68:c2:9f:01:f6:5f:69:d7:7c:64:27:41:a6:c6:d4:9a:e6:29:
f8:3b:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:19 2024 by rpki-client on console.sobornost.net