Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/9ax0P2AnHWOATWkxEINNjaeXU-o.roa
File: 9ax0P2AnHWOATWkxEINNjaeXU-o.roa (raw, json)
Hash identifier: AtW19DsbIiqH51rbbD/twF6OhfoUCaKJUt1fj7LvH/0=
Subject key identifier: F5:AC:74:3F:60:27:1D:63:80:4D:69:31:10:83:4D:8D:A7:97:53:EA
Certificate issuer: /CN=3f0e49eb450708cf64740baa8ce2d1987d22c915
Certificate serial: 01856F26C22C734216DA2B0E3A79B386F6DD
Authority key identifier: 3F:0E:49:EB:45:07:08:CF:64:74:0B:AA:8C:E2:D1:98:7D:22:C9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pw5J60UHCM9kdAuqjOLRmH0iyRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/9ax0P2AnHWOATWkxEINNjaeXU-o.roa
Signing time: Sun 01 Jan 2023 21:04:48 +0000
ROA not before: Sun 01 Jan 2023 21:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 213.217.29.0/24 maxlen: 24
185.53.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:c2:2c:73:42:16:da:2b:0e:3a:79:b3:86:f6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0e49eb450708cf64740baa8ce2d1987d22c915
Validity
Not Before: Jan 1 21:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5ac743f60271d63804d693110834d8da79753ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5e:8e:33:d6:c7:c4:96:c8:16:00:51:09:d1:
ce:83:64:7f:12:65:20:3d:c9:f7:3d:39:4c:66:b5:
c2:1e:bf:f7:72:ac:ad:55:ad:e5:78:7f:c7:a8:85:
53:ed:a0:12:dd:c9:db:3b:1d:cf:bc:6f:cd:fd:a0:
68:f0:3b:10:a3:bb:c9:5b:bf:17:df:cf:b2:6e:3d:
17:ef:4d:78:48:6d:cc:d9:8b:95:5b:1f:a7:4a:b7:
94:e0:38:2b:92:c5:9e:e3:22:ed:c8:13:53:bb:ca:
af:18:b8:65:5c:fe:db:53:ca:c6:ae:bd:3d:3b:95:
72:b1:27:fe:c9:c9:14:d3:3b:88:16:b1:52:47:bc:
ae:59:a2:9b:33:75:52:80:35:89:88:08:61:cd:64:
2d:9e:78:65:0b:81:b8:ea:cf:c5:43:01:35:15:a5:
21:23:df:42:75:86:80:8b:cc:5c:56:47:24:da:b8:
3a:ca:8d:3d:e2:14:ce:ab:b3:b2:86:d0:58:39:47:
f2:ca:93:ae:9a:58:e6:8d:49:1b:f9:9f:f5:22:82:
bd:83:e8:1e:a3:e2:02:3b:5d:11:9c:d1:2b:40:e9:
c6:72:a5:94:03:b0:bd:f8:c9:c6:e9:2c:fa:95:7f:
dc:fe:f3:a5:52:34:ed:87:9d:ce:29:9a:5f:c8:d2:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AC:74:3F:60:27:1D:63:80:4D:69:31:10:83:4D:8D:A7:97:53:EA
X509v3 Authority Key Identifier:
keyid:3F:0E:49:EB:45:07:08:CF:64:74:0B:AA:8C:E2:D1:98:7D:22:C9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pw5J60UHCM9kdAuqjOLRmH0iyRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/9ax0P2AnHWOATWkxEINNjaeXU-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/Pw5J60UHCM9kdAuqjOLRmH0iyRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.33.0/24
213.217.29.0/24
Signature Algorithm: sha256WithRSAEncryption
27:89:8b:4c:cb:37:ce:9e:c6:f6:b9:29:2d:00:55:ac:15:b1:
78:65:da:85:34:6d:06:45:6b:da:ad:ed:39:d7:de:81:5b:cf:
8b:9c:4c:2a:0b:dc:1d:dc:d7:fe:b8:93:d3:3f:84:3a:05:8c:
53:25:8c:62:df:4b:35:c2:d4:0d:e4:a9:97:09:f4:f6:8d:da:
66:72:89:ef:77:aa:01:c7:02:15:00:d8:d5:31:25:19:cd:64:
ff:a4:98:72:23:65:09:e0:cb:69:93:60:be:c0:41:ce:27:a1:
81:78:14:6b:dd:b5:00:1c:5d:c5:79:58:64:6f:d1:95:bd:37:
d9:5a:96:a0:c0:15:19:49:9f:9a:f9:4e:ec:71:60:51:9a:ec:
2f:fd:a7:69:0e:d8:4c:9a:90:e6:47:88:ef:8a:80:db:34:5b:
39:69:01:05:5b:8e:4b:01:b2:76:66:e6:71:45:14:2c:e3:b2:
1f:20:df:3f:c8:e2:14:23:60:fc:b7:ca:78:6c:28:22:5c:a1:
b3:99:27:41:70:b6:61:ad:08:16:9a:20:5a:c0:19:91:61:8c:
b5:49:c0:c3:73:ce:a9:6a:3f:c4:a5:3a:8f:d8:cb:19:36:9a:
68:3a:95:d1:73:8f:9e:53:3e:5f:27:e8:06:79:3f:db:cb:bd:
06:3b:a1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org