Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/rAxgo8YZXn2qYtk62k70vi1KllU.roa
File: rAxgo8YZXn2qYtk62k70vi1KllU.roa (raw, json)
Hash identifier: RVneDvaDE2PodjGs/rtxPmx2/3dhavip9M+9iiol9Oc=
Subject key identifier: AC:0C:60:A3:C6:19:5E:7D:AA:62:D9:3A:DA:4E:F4:BE:2D:4A:96:55
Certificate issuer: /CN=36f557792aab8bbd9e6de4eec6d27857701f334d
Certificate serial: 018571954F07A8BCE0F04091BD37F8BAAFE8
Authority key identifier: 36:F5:57:79:2A:AB:8B:BD:9E:6D:E4:EE:C6:D2:78:57:70:1F:33:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvVXeSqri72ebeTuxtJ4V3AfM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/rAxgo8YZXn2qYtk62k70vi1KllU.roa
Signing time: Mon 02 Jan 2023 08:24:48 +0000
ROA not before: Mon 02 Jan 2023 08:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42947
IP address blocks: 185.213.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:4f:07:a8:bc:e0:f0:40:91:bd:37:f8:ba:af:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f557792aab8bbd9e6de4eec6d27857701f334d
Validity
Not Before: Jan 2 08:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac0c60a3c6195e7daa62d93ada4ef4be2d4a9655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e9:65:5b:aa:90:47:97:26:e5:d8:44:41:4d:
97:59:34:41:ac:db:f1:9a:09:31:52:8f:59:7d:41:
61:7d:80:1f:8c:fb:6b:05:ab:b2:a0:2e:2c:78:c3:
29:5e:cc:bc:a4:85:71:33:47:b4:37:6e:56:cc:2c:
3e:80:d5:71:1b:a4:b1:ff:37:39:4d:47:70:62:fa:
e6:c9:db:a3:59:6a:c6:df:db:62:42:73:5c:90:20:
e1:ff:0f:f2:d9:9b:58:4f:b1:23:05:f1:ed:64:06:
89:73:6d:81:60:02:73:02:0a:22:b0:d8:39:bd:8b:
46:21:97:08:d8:4a:84:20:81:88:27:d6:de:ac:b2:
5c:12:dd:28:26:8c:26:0d:ea:f5:a9:d0:0e:4b:f9:
d5:a1:4d:b6:4c:93:2d:51:e2:55:c0:3d:11:08:31:
30:b9:63:77:33:b1:b7:80:32:b3:8e:eb:a1:5c:18:
99:57:72:00:2d:78:32:da:85:6b:eb:96:9e:15:da:
7a:39:5f:7e:6e:de:5c:02:0a:68:4b:33:a5:48:da:
95:ce:5c:77:21:e4:b2:48:24:5b:83:e2:cb:fc:b8:
0e:31:3f:9f:be:1f:32:da:df:51:76:aa:5d:ad:ef:
61:65:8c:25:df:43:be:1d:cf:da:ce:a8:a5:82:0f:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0C:60:A3:C6:19:5E:7D:AA:62:D9:3A:DA:4E:F4:BE:2D:4A:96:55
X509v3 Authority Key Identifier:
keyid:36:F5:57:79:2A:AB:8B:BD:9E:6D:E4:EE:C6:D2:78:57:70:1F:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvVXeSqri72ebeTuxtJ4V3AfM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/rAxgo8YZXn2qYtk62k70vi1KllU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/NvVXeSqri72ebeTuxtJ4V3AfM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:7e:ab:a7:d7:12:e2:45:da:cc:8e:21:02:82:ac:a7:62:0e:
76:17:42:e1:72:81:20:75:95:7c:32:c3:4a:8e:fd:67:4f:41:
fb:dd:91:ea:18:39:7c:95:d4:8a:14:e3:a8:04:23:69:f1:85:
c8:55:cd:b7:cc:7f:af:df:03:fe:b2:4e:67:3a:67:75:12:1c:
d2:9c:4d:8c:e6:64:51:b2:bc:5d:c8:dc:eb:45:cd:1a:0a:7a:
ea:f4:a5:39:7b:0a:a9:59:80:94:75:7e:30:94:04:3f:01:90:
d1:25:56:32:de:7d:8c:05:90:de:27:7b:71:e3:03:14:8c:a4:
22:94:60:ea:0b:72:26:31:15:65:62:c0:65:5a:45:70:8e:d1:
d1:ad:52:cf:0a:13:9c:60:22:12:b6:d5:43:44:2c:c8:be:31:
aa:46:2f:d9:d1:39:ed:11:ff:cb:4c:4c:8a:22:62:e5:ca:c5:
36:42:4b:d9:8d:14:3b:6e:20:4c:f8:4f:4f:63:f2:30:92:2f:
a1:d1:df:2b:42:2f:fc:85:59:5c:54:1c:4f:c0:67:92:a5:3a:
af:47:e6:5c:f3:16:04:ef:c9:54:9c:0a:b2:cb:6d:71:a6:ca:
e4:66:79:7f:6e:30:35:88:2d:bf:90:eb:3e:48:6f:4a:c0:dc:
fb:b1:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 16:10:48 2023 by rpki-client on console-fra.rpki-client.org