Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/ssuX57_YWSzTXZDU-bxhIWr8-_A.roa
File: ssuX57_YWSzTXZDU-bxhIWr8-_A.roa (raw, json)
Hash identifier: Xf1Lcw7Cz5hGMJIYEI2hdqOLrYNjZT3KCI5SVJMmmec=
Subject key identifier: B2:CB:97:E7:BF:D8:59:2C:D3:5D:90:D4:F9:BC:61:21:6A:FC:FB:F0
Certificate issuer: /CN=dbcac48fdc9543c40704165ae85949431ec3b6e3
Certificate serial: 018612D22D98963CC0270AE86E8C3C018F80
Authority key identifier: DB:CA:C4:8F:DC:95:43:C4:07:04:16:5A:E8:59:49:43:1E:C3:B6:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rEj9yVQ8QHBBZa6FlJQx7DtuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/ssuX57_YWSzTXZDU-bxhIWr8-_A.roa
Signing time: Thu 02 Feb 2023 15:50:09 +0000
ROA not before: Thu 02 Feb 2023 15:50:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48722
IP address blocks: 185.140.132.0/22 maxlen: 23
185.140.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:d2:2d:98:96:3c:c0:27:0a:e8:6e:8c:3c:01:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcac48fdc9543c40704165ae85949431ec3b6e3
Validity
Not Before: Feb 2 15:50:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2cb97e7bfd8592cd35d90d4f9bc61216afcfbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:3f:94:e4:62:1f:83:f8:38:79:93:7f:ac:
98:3d:1e:16:f5:66:51:19:5b:63:86:f0:59:ea:c6:
0b:46:1a:58:d2:fb:b8:4e:97:2a:8e:25:77:4b:c3:
ec:53:61:93:5e:ca:45:26:c7:39:99:0d:77:b7:a4:
ed:1f:19:40:8d:19:1f:41:7e:ca:90:b7:87:9f:b5:
4d:ec:e5:6f:1e:aa:01:09:41:af:53:80:bd:17:c0:
a1:ce:b9:da:4f:e6:29:fb:6b:13:e0:52:37:ca:4b:
10:1b:7d:eb:98:28:2e:d9:34:ae:dd:ca:5d:f2:14:
53:4c:ae:68:82:14:e5:c4:15:d8:ae:94:c2:f1:72:
d0:65:42:0d:07:6c:d0:97:12:cc:c9:5a:49:22:00:
ac:fd:a8:42:65:f8:38:7c:48:fd:eb:78:2c:e4:1c:
84:09:ca:40:85:e9:58:5d:b0:20:74:64:39:3b:57:
9f:b7:cb:06:db:51:ce:93:00:ae:f5:82:0d:8b:c4:
f0:46:f9:bd:7f:aa:11:44:6f:f6:87:83:ab:2d:1f:
e5:30:2e:f7:2e:4f:99:1a:68:66:ef:88:73:93:20:
07:6f:02:9a:b8:5d:2a:74:0c:d2:e7:7a:cb:79:86:
75:33:6f:b0:7f:6d:a8:0e:68:0c:dc:5e:6b:ba:e2:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CB:97:E7:BF:D8:59:2C:D3:5D:90:D4:F9:BC:61:21:6A:FC:FB:F0
X509v3 Authority Key Identifier:
keyid:DB:CA:C4:8F:DC:95:43:C4:07:04:16:5A:E8:59:49:43:1E:C3:B6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rEj9yVQ8QHBBZa6FlJQx7DtuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/ssuX57_YWSzTXZDU-bxhIWr8-_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/28rEj9yVQ8QHBBZa6FlJQx7DtuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.132.0/22
Signature Algorithm: sha256WithRSAEncryption
13:03:aa:57:e8:be:41:d2:11:6a:82:af:30:35:ac:d2:c4:47:
be:4d:fb:c2:8d:38:69:a8:5b:93:37:c5:27:2f:5b:9d:61:06:
00:cf:bd:8e:4a:e7:ea:86:8c:6b:12:8e:79:f3:70:11:4e:4e:
8f:b6:db:13:d0:fb:23:fa:15:a4:51:ba:2a:00:20:23:0e:c6:
cd:d6:9a:29:02:8d:2d:d5:9d:8a:b7:7f:7e:35:f2:7b:52:05:
ab:0b:f2:5b:c8:9d:59:6f:0b:4b:52:9d:15:1b:25:3b:54:6e:
e3:2d:fb:ef:45:2b:96:44:bf:cc:c2:69:13:21:46:66:6f:e0:
75:dd:a6:a2:ed:a2:71:f0:f9:8c:d5:78:2d:11:8e:0e:7d:fb:
fa:5e:e6:65:a7:09:93:ca:d8:62:9d:d3:72:ed:6d:d9:bc:d0:
6b:ef:a3:60:3c:f1:17:15:81:c1:11:1a:a3:7a:d7:ff:d2:06:
97:db:89:77:c5:a6:88:5d:de:43:ed:5e:77:ce:55:5c:37:bd:
c6:ff:73:25:43:12:1c:3c:2a:fa:82:0a:80:43:94:dd:58:c9:
2b:e8:1a:e7:76:77:d7:71:f9:bb:42:a2:0a:df:28:65:2c:52:
b2:88:e7:47:b8:5a:89:a9:b8:3d:b2:29:37:7d:08:f7:87:41:
e0:e4:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:36 2024 by rpki-client on console-ams.rpki-client.org