Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/7MLPiskK7W7Qf4MBOGwR0pNEoTw.roa
File: 7MLPiskK7W7Qf4MBOGwR0pNEoTw.roa (raw, json)
Hash identifier: F5sVFTkL1svgQVqnfA3BNdpDkRgBssdLkaC5TLlCu5c=
Subject key identifier: EC:C2:CF:8A:C9:0A:ED:6E:D0:7F:83:01:38:6C:11:D2:93:44:A1:3C
Certificate issuer: /CN=c34c13ecf26ac702f768c99110bf662e99139794
Certificate serial: 018571DE95D30E851655A1AE65B0C7718C43
Authority key identifier: C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/7MLPiskK7W7Qf4MBOGwR0pNEoTw.roa
Signing time: Mon 02 Jan 2023 09:44:50 +0000
ROA not before: Mon 02 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210110
IP address blocks: 185.145.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:95:d3:0e:85:16:55:a1:ae:65:b0:c7:71:8c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34c13ecf26ac702f768c99110bf662e99139794
Validity
Not Before: Jan 2 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecc2cf8ac90aed6ed07f8301386c11d29344a13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:a3:81:7a:f5:bd:40:ce:bf:66:e4:42:f8:
65:5b:b5:34:ed:43:21:9c:99:93:da:f6:cc:f0:c7:
1a:f2:c3:1f:1c:b9:9c:4a:9f:2c:49:20:d7:35:2d:
6d:07:49:ef:16:92:4e:47:7c:fc:7b:15:43:f2:4c:
25:23:0a:86:85:0d:be:a7:55:36:49:e8:15:dd:29:
25:ca:01:e3:09:6c:70:08:30:93:75:22:d9:5b:d4:
a1:4f:7a:4d:a2:ea:d0:b8:0a:44:d8:c2:bf:22:2f:
fa:94:28:81:af:19:96:61:32:ac:3c:7b:21:be:0c:
0d:75:a4:32:3e:1a:b7:b8:66:82:93:d4:fd:c5:94:
ad:5b:68:7c:d8:7c:ae:6d:7a:f0:86:0c:9a:47:1b:
a7:64:8c:2d:ed:5e:bb:d0:9f:53:a1:5f:d8:0c:31:
4a:c9:b8:22:bf:84:f0:2a:e6:3f:57:f1:53:7d:f8:
f1:8e:3f:03:18:79:09:21:c9:d3:77:8d:04:98:b9:
0f:68:33:49:2b:d3:02:a5:1d:96:a0:52:78:da:15:
ae:81:ba:c5:28:01:12:cf:59:9d:24:12:0a:f0:f3:
61:cf:d2:2c:cf:08:ca:42:6e:6c:be:90:03:b1:2e:
18:dd:34:ad:e5:41:7a:21:6d:a8:40:75:39:03:34:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C2:CF:8A:C9:0A:ED:6E:D0:7F:83:01:38:6C:11:D2:93:44:A1:3C
X509v3 Authority Key Identifier:
keyid:C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/7MLPiskK7W7Qf4MBOGwR0pNEoTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/w0wT7PJqxwL3aMmREL9mLpkTl5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.244.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e0:65:b8:96:33:f8:55:50:a2:a4:6c:16:e8:cf:a8:fd:92:
15:43:8c:f2:b6:d4:30:8f:ab:a7:91:15:24:82:04:18:c7:33:
f9:0c:a9:ce:d9:9a:d3:5c:db:20:83:96:f4:eb:aa:d4:e2:85:
1f:88:7a:62:2e:76:c7:2f:ad:11:c0:f8:72:e5:4d:c7:44:a2:
43:77:19:cf:c5:13:02:dc:69:b5:0c:7e:88:64:9f:7a:6a:fd:
10:8e:d6:9d:79:aa:d1:0d:0b:aa:c8:e3:03:8b:ff:4b:fc:d2:
62:1e:42:95:c7:be:a6:89:46:d3:a7:3d:f9:2d:a1:26:a5:8a:
5a:02:e5:cb:bd:d5:0e:ea:82:e6:d7:1b:1b:7b:37:10:d0:e5:
f2:c6:12:d7:5b:e9:98:2b:e8:02:fe:3b:17:fc:27:77:05:7b:
9c:1c:a9:e0:7d:95:9e:ec:a0:d3:80:ef:b6:84:cf:79:f8:ea:
1c:76:d6:86:c9:f4:f4:75:37:22:60:b4:ea:54:0a:04:5d:8a:
b7:9b:e1:68:7a:5e:37:bb:be:2a:0b:f9:95:a5:6a:69:14:df:
e1:81:a9:90:dd:e7:0b:b7:83:ed:c8:6f:16:86:77:c3:86:fa:
17:c2:03:10:a3:fb:67:ea:43:46:62:14:ba:69:9c:68:84:01:
f2:ef:57:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:03 2024 by rpki-client on console-ams.rpki-client.org