Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/TELOfkKOTghjldwxLA9CtDAK-ws.roa
File: TELOfkKOTghjldwxLA9CtDAK-ws.roa (raw, json)
Hash identifier: Ju8E2HdtAw+vpGHJAIGsa/SJLTadhPQU4ZY2f89DaAM=
Subject key identifier: 4C:42:CE:7E:42:8E:4E:08:63:95:DC:31:2C:0F:42:B4:30:0A:FB:0B
Certificate issuer: /CN=0900ecb0ca64a78c33a69b0446eb5a8b4b1333a5
Certificate serial: 018572FA65C736E1AA84EA4698F927AE1296
Authority key identifier: 09:00:EC:B0:CA:64:A7:8C:33:A6:9B:04:46:EB:5A:8B:4B:13:33:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQDssMpkp4wzppsERutai0sTM6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/TELOfkKOTghjldwxLA9CtDAK-ws.roa
Signing time: Mon 02 Jan 2023 14:54:50 +0000
ROA not before: Mon 02 Jan 2023 14:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57717
IP address blocks: 185.225.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:65:c7:36:e1:aa:84:ea:46:98:f9:27:ae:12:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0900ecb0ca64a78c33a69b0446eb5a8b4b1333a5
Validity
Not Before: Jan 2 14:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c42ce7e428e4e086395dc312c0f42b4300afb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:77:de:64:05:ef:f3:4f:cb:23:c2:da:12:39:
8e:dd:0a:76:0f:86:8e:98:2b:21:0e:1e:b5:cc:c0:
8a:8e:95:b2:1b:ca:58:b4:56:57:3a:e8:fb:6d:36:
44:e2:31:71:4c:8b:c6:db:a4:86:c2:70:79:8b:64:
51:a0:06:b8:d3:13:8c:10:af:f2:cb:8c:3e:32:ae:
05:e7:6e:46:f3:62:63:3a:37:3e:5e:2b:bd:e2:71:
77:42:c5:1d:9b:67:59:ca:87:59:df:cb:52:53:87:
7a:a3:cd:14:99:81:b1:fa:87:1e:4f:36:b4:b4:fe:
d2:35:ab:75:80:eb:8b:ae:a5:37:51:81:e3:d3:ff:
5f:1c:ca:fa:0f:81:4b:07:23:66:09:28:c8:e2:ef:
1b:33:9d:a3:2d:c0:a0:11:48:9e:48:77:08:1b:ef:
da:cf:98:2f:10:58:eb:b3:aa:66:e3:01:00:a5:c6:
00:2c:41:f1:61:ad:07:d0:87:ba:87:c6:6c:55:4b:
24:03:99:74:9b:29:f1:e4:fc:64:bc:8e:83:36:d1:
24:21:1c:c2:5e:26:e1:48:71:99:c7:28:10:84:16:
f3:94:b5:04:5f:e5:3c:64:ec:68:92:35:9e:2e:d8:
4c:94:5a:ee:90:ec:e1:73:2e:ad:84:50:4e:6b:90:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:42:CE:7E:42:8E:4E:08:63:95:DC:31:2C:0F:42:B4:30:0A:FB:0B
X509v3 Authority Key Identifier:
keyid:09:00:EC:B0:CA:64:A7:8C:33:A6:9B:04:46:EB:5A:8B:4B:13:33:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQDssMpkp4wzppsERutai0sTM6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/TELOfkKOTghjldwxLA9CtDAK-ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/CQDssMpkp4wzppsERutai0sTM6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.112.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:81:9a:b5:c1:a0:4a:28:21:1d:e6:bf:0f:98:e6:d5:4b:f4:
55:15:10:2c:22:95:db:fd:f1:b1:d4:d5:bc:cb:f4:59:53:84:
09:cf:26:bf:85:1e:c9:c1:da:75:85:97:08:df:62:cc:c0:70:
26:b8:d3:8a:8b:6b:df:73:4d:da:86:36:48:4d:16:e3:e8:4f:
22:b6:33:6d:82:ee:c4:8c:b6:3e:04:0f:f2:54:8f:27:a0:d2:
b7:90:a7:44:63:59:d0:34:7d:bd:6b:50:69:1a:0f:6a:d8:6d:
60:01:a4:0b:57:c4:97:d8:33:9c:9d:6e:66:3d:0b:c6:d9:5a:
46:15:e9:dc:49:63:20:d0:b2:12:10:49:91:21:90:c7:e4:29:
6e:85:16:74:00:29:5c:b9:bb:e6:44:ee:fb:72:11:4f:c9:ca:
0f:5d:89:aa:31:0a:13:c7:85:a2:61:fd:ab:ae:43:af:33:25:
3c:59:2a:c4:ec:53:fa:88:74:48:af:4e:ca:88:04:9a:2a:0f:
9b:d2:e4:6f:52:c3:94:59:ea:1c:26:32:6d:ee:26:cb:7d:50:
c9:fa:65:e3:d0:e7:4b:08:ce:17:27:59:09:59:6e:60:a4:05:
bd:9b:2f:42:3e:7b:0b:aa:ac:17:ac:7b:9c:f0:da:cb:47:3b:
87:0c:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:14 2024 by rpki-client on console-ams.rpki-client.org