Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/VhB8q2tv7yhMS7JiFWfim6xCu-Q.roa
File: VhB8q2tv7yhMS7JiFWfim6xCu-Q.roa (raw, json)
Hash identifier: VKeWoqglde9ANn6DEy4xar3RVOlzo8metQh8fOMUyo0=
Subject key identifier: 56:10:7C:AB:6B:6F:EF:28:4C:4B:B2:62:15:67:E2:9B:AC:42:BB:E4
Certificate issuer: /CN=3f0e49eb450708cf64740baa8ce2d1987d22c915
Certificate serial: 018AB1CB7692C5EF7C7C8041D44D326EBFBA
Authority key identifier: 3F:0E:49:EB:45:07:08:CF:64:74:0B:AA:8C:E2:D1:98:7D:22:C9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pw5J60UHCM9kdAuqjOLRmH0iyRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/VhB8q2tv7yhMS7JiFWfim6xCu-Q.roa
Signing time: Wed 20 Sep 2023 08:53:35 +0000
ROA not before: Wed 20 Sep 2023 08:53:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.53.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:cb:76:92:c5:ef:7c:7c:80:41:d4:4d:32:6e:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0e49eb450708cf64740baa8ce2d1987d22c915
Validity
Not Before: Sep 20 08:53:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56107cab6b6fef284c4bb2621567e29bac42bbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:2e:b7:51:47:f9:39:7f:62:e1:03:f3:6e:
78:73:60:09:9d:65:7c:66:c9:c1:53:c1:70:c9:9b:
b3:2a:0f:e7:8b:11:9f:cd:cf:ba:8b:0d:33:4f:a2:
b7:c8:0a:40:e3:3a:31:16:41:a3:2f:84:94:65:bd:
a0:cf:0f:a6:60:fc:be:f0:56:d4:66:a3:5e:7d:95:
c4:3b:cb:97:90:54:0c:03:19:6a:f9:d9:b1:ae:31:
aa:0a:3e:30:94:1c:38:b2:21:60:ea:d6:ee:55:d9:
5c:f1:25:e3:b2:e1:e4:6e:85:66:08:a0:92:fd:63:
72:c2:17:ce:db:88:7a:3a:44:e6:b5:e1:82:ef:67:
61:dd:eb:d3:ce:1e:ad:8a:2d:0c:68:3b:38:a7:10:
84:0f:30:03:64:ee:93:bb:65:4f:39:66:29:65:5b:
8f:10:49:3a:85:78:54:d9:0b:62:7f:03:a2:0c:f7:
85:2d:44:ab:b6:3c:ab:01:c0:da:a2:d1:00:c7:56:
14:52:08:8b:9a:b4:43:af:0c:8b:b6:26:7b:13:b5:
bf:5e:c7:d6:e5:4c:5d:a1:fe:c1:b3:50:72:73:6a:
05:05:98:de:24:7d:44:c4:e7:f5:d7:33:bb:4e:97:
8b:05:b4:90:b3:eb:b3:c9:1d:28:ad:68:a7:77:e1:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:10:7C:AB:6B:6F:EF:28:4C:4B:B2:62:15:67:E2:9B:AC:42:BB:E4
X509v3 Authority Key Identifier:
keyid:3F:0E:49:EB:45:07:08:CF:64:74:0B:AA:8C:E2:D1:98:7D:22:C9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pw5J60UHCM9kdAuqjOLRmH0iyRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/VhB8q2tv7yhMS7JiFWfim6xCu-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/Pw5J60UHCM9kdAuqjOLRmH0iyRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.33.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2a:19:80:ff:88:66:37:ae:10:f7:48:0a:53:f6:5b:54:af:
f8:8d:32:00:ac:9e:88:89:82:47:dd:67:08:d9:aa:35:29:7d:
75:4d:fb:57:dd:65:c6:34:dd:8c:58:37:38:a6:d0:8d:d4:d0:
20:04:e1:06:73:87:2c:3d:46:9a:19:74:02:8c:f9:4c:f7:55:
6a:4f:98:08:d9:d4:51:ff:56:ed:b1:56:6c:b6:a8:71:c5:18:
1e:ed:2d:1a:84:e4:fe:b3:50:55:fd:89:b9:61:43:1f:b9:88:
a8:61:6a:77:0a:3e:17:20:45:11:18:a8:a9:64:65:ab:b6:e0:
f0:4f:18:09:5b:28:1c:f6:bc:85:30:45:8c:f8:d2:b6:42:c7:
e8:34:ae:a5:ac:e9:30:0e:5c:83:13:e1:6d:c1:a4:2f:39:79:
10:19:97:5c:e0:97:e6:2e:94:fd:13:4d:88:2f:06:40:69:1a:
25:1d:91:aa:11:ef:04:24:71:16:21:69:45:24:e7:0d:25:48:
06:95:43:6c:46:36:a5:1e:63:13:dd:0d:39:ee:6d:b4:04:c7:
97:d1:26:03:2b:0d:47:72:67:8b:7f:20:9c:0b:a0:23:b3:f7:
04:28:16:16:be:cb:dd:97:70:1c:b6:2a:5f:69:1c:7a:a1:94:
e1:18:4b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org