Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/2p62A2oUQ4gzr5Ptu-8hQbMJMwk.roa
File: 2p62A2oUQ4gzr5Ptu-8hQbMJMwk.roa (raw, json)
Hash identifier: SDOV78v0wFlip55s75tEvdWUCeW1KVVLl34zhSGpb1M=
Subject key identifier: DA:9E:B6:03:6A:14:43:88:33:AF:93:ED:BB:EF:21:41:B3:09:33:09
Certificate issuer: /CN=36f557792aab8bbd9e6de4eec6d27857701f334d
Certificate serial: 017DFA5A
Authority key identifier: 36:F5:57:79:2A:AB:8B:BD:9E:6D:E4:EE:C6:D2:78:57:70:1F:33:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvVXeSqri72ebeTuxtJ4V3AfM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/2p62A2oUQ4gzr5Ptu-8hQbMJMwk.roa
Signing time: Sat 01 Jan 2022 04:03:46 +0000
ROA not before: Sat 01 Jan 2022 04:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42947
IP address blocks: 185.213.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25033306 (0x17dfa5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f557792aab8bbd9e6de4eec6d27857701f334d
Validity
Not Before: Jan 1 04:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da9eb6036a14438833af93edbbef2141b3093309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:65:b7:86:34:a2:cd:39:5b:ea:04:18:e2:8a:
81:3b:ae:4e:6d:26:22:43:c1:b0:7c:51:e1:6f:a1:
00:72:65:6e:4e:1d:dd:a5:d5:52:ca:83:9a:f0:d6:
0c:80:a6:7f:66:cd:82:59:58:e4:c4:af:4d:94:60:
e5:53:4d:07:d0:72:a5:c1:ee:2f:d7:23:34:18:fb:
2c:55:ee:e2:65:35:09:03:9a:86:84:e9:ff:f3:51:
6e:0d:f6:e5:b4:4d:9d:99:32:13:4b:1f:0f:b2:cf:
0c:2a:dc:3e:d0:c9:26:9f:36:01:f8:e1:b1:fe:20:
cd:d9:a5:67:83:51:b1:99:26:b0:e3:d8:5c:26:0a:
92:53:17:b5:16:41:bb:0e:ca:cd:30:90:ab:b1:7b:
08:f8:5b:05:0c:b3:f0:4f:d6:f5:9d:ea:20:a6:24:
91:64:be:b2:4a:25:fe:21:ee:a3:df:8c:ff:c1:52:
2e:68:1d:b8:8d:8d:9b:a6:06:29:0b:5c:1c:58:5a:
cc:8c:7b:64:5f:fe:a6:1f:4c:51:5c:70:c0:9c:45:
83:1a:eb:87:74:df:57:53:8e:8e:26:35:fb:0e:0c:
84:6b:c5:14:a3:36:30:db:74:5f:c9:49:8e:25:ef:
ae:05:56:ca:0d:11:98:4e:80:0e:db:2d:23:f4:0e:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9E:B6:03:6A:14:43:88:33:AF:93:ED:BB:EF:21:41:B3:09:33:09
X509v3 Authority Key Identifier:
keyid:36:F5:57:79:2A:AB:8B:BD:9E:6D:E4:EE:C6:D2:78:57:70:1F:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvVXeSqri72ebeTuxtJ4V3AfM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/2p62A2oUQ4gzr5Ptu-8hQbMJMwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/NvVXeSqri72ebeTuxtJ4V3AfM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.108.0/22
Signature Algorithm: sha256WithRSAEncryption
10:b5:ca:b5:fb:85:e5:48:c1:cd:61:aa:9e:e0:72:39:98:d7:
cb:85:ca:9b:67:8f:1c:b2:20:1a:66:38:12:e9:a8:bf:68:77:
da:bd:4c:8e:c7:12:2b:4a:74:6d:ad:1d:fa:dd:1e:bb:a2:be:
c0:85:90:ce:93:1f:aa:20:5e:3e:25:b3:10:37:7f:92:28:2e:
f2:01:c6:a7:5b:b0:13:09:c8:60:f2:7a:6f:f7:a4:e7:8b:3d:
39:f7:13:23:7d:99:7b:6c:8a:41:45:ba:41:38:76:6d:72:54:
53:05:02:75:35:c6:98:35:78:75:31:36:b7:b2:7a:5b:00:8a:
ec:14:b6:be:82:dd:fe:72:ba:0e:22:a1:66:c7:f6:8b:98:8a:
d2:9f:a2:5b:af:d3:fc:46:ca:7a:77:c9:4c:af:0c:8d:cb:7d:
8f:23:30:b1:08:1e:2a:62:6e:0c:8a:1f:8a:c3:00:98:82:a2:
87:ba:27:25:6b:6d:df:77:f5:1b:7c:95:94:76:7a:ff:cc:53:
7a:f0:f4:5c:67:23:9b:58:b3:5a:49:91:df:47:6e:ee:02:49:
a6:b5:1e:d7:4b:b9:df:38:7d:5d:8d:f0:1b:d2:c8:ab:c3:5a:
d2:e0:aa:97:a9:f8:c6:1a:26:32:47:5c:e7:31:72:b8:d7:35:
63:8f:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:01 2024 by rpki-client on console-ams.rpki-client.org