Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/sx7aTzsD-a_Ii900N3O6SLidhuQ.roa
File: sx7aTzsD-a_Ii900N3O6SLidhuQ.roa (raw, json)
Hash identifier: hp1BreIayrLvzMwPsClSr32uua77N9OeBHjyR5Clw5Q=
Subject key identifier: B3:1E:DA:4F:3B:03:F9:AF:C8:8B:DD:34:37:73:BA:48:B8:9D:86:E4
Certificate issuer: /CN=dbcac48fdc9543c40704165ae85949431ec3b6e3
Certificate serial: 018611E1659C38D8A63F5C8076FEBAADCC27
Authority key identifier: DB:CA:C4:8F:DC:95:43:C4:07:04:16:5A:E8:59:49:43:1E:C3:B6:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rEj9yVQ8QHBBZa6FlJQx7DtuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/sx7aTzsD-a_Ii900N3O6SLidhuQ.roa
Signing time: Thu 02 Feb 2023 11:27:09 +0000
ROA not before: Thu 02 Feb 2023 11:27:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48722
IP address blocks: 185.140.132.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:e1:65:9c:38:d8:a6:3f:5c:80:76:fe:ba:ad:cc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcac48fdc9543c40704165ae85949431ec3b6e3
Validity
Not Before: Feb 2 11:27:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b31eda4f3b03f9afc88bdd343773ba48b89d86e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:65:0c:7c:02:8f:20:87:75:83:6e:11:1e:
8a:df:ed:c1:4b:ae:23:75:ea:15:62:6f:21:51:70:
4b:9c:e9:48:ab:d2:fb:3a:0f:29:d7:a5:eb:a5:04:
4d:14:19:2a:3c:c3:f1:83:6f:df:46:27:d6:2c:6f:
6b:96:1c:66:11:55:9c:5f:90:7b:ef:76:ef:39:9f:
47:3c:bf:c9:76:c9:95:1f:0e:9a:3f:a6:7d:e6:eb:
8c:f7:61:af:f5:68:22:89:5b:d6:42:09:4b:60:de:
d9:69:21:d2:4b:cb:ce:d3:f1:43:e7:a2:42:e9:a0:
5c:9a:f7:5f:d9:ef:3d:bc:18:f8:f5:c2:9a:5f:ec:
07:17:a0:c8:bd:b5:69:56:0c:0d:a6:11:0b:56:97:
38:11:75:84:1a:c6:90:a1:a1:2a:2f:85:7f:33:1a:
f7:c2:67:27:f4:fe:a1:67:b2:32:50:8f:e9:c5:98:
47:48:7d:e3:20:0e:c8:70:79:95:13:7c:9e:33:4b:
ce:0c:10:fa:ae:94:8d:8d:c5:31:41:c9:59:24:3d:
ba:ce:4b:d3:21:08:67:b1:e1:8e:c1:9f:95:a2:84:
19:dc:d4:0e:fc:95:d2:2f:c0:a1:ff:96:0e:c4:11:
14:17:8c:c2:b2:cb:88:5f:86:ef:b1:31:c8:b3:4e:
08:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1E:DA:4F:3B:03:F9:AF:C8:8B:DD:34:37:73:BA:48:B8:9D:86:E4
X509v3 Authority Key Identifier:
keyid:DB:CA:C4:8F:DC:95:43:C4:07:04:16:5A:E8:59:49:43:1E:C3:B6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rEj9yVQ8QHBBZa6FlJQx7DtuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/sx7aTzsD-a_Ii900N3O6SLidhuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/28rEj9yVQ8QHBBZa6FlJQx7DtuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.132.0/22
Signature Algorithm: sha256WithRSAEncryption
36:84:2d:bd:d3:33:d8:e8:27:f4:25:54:70:95:b1:a5:8d:30:
3c:73:73:ac:57:58:c9:c4:3d:91:55:15:11:d7:57:0d:96:85:
20:03:74:f3:21:f1:4e:bb:85:28:c1:24:73:fa:3a:42:07:74:
a4:ca:b7:76:cf:8f:e5:39:03:05:20:9a:2b:8d:93:93:d4:e7:
41:ac:a3:40:44:fe:9d:59:2b:aa:5b:66:f3:ef:a8:2a:25:92:
41:39:c6:81:37:c1:fe:da:dd:80:b5:86:9e:41:24:b7:60:fd:
2c:05:24:be:a5:69:e2:e1:72:bb:f9:6b:58:23:44:3a:85:5e:
d5:dc:ce:29:d7:79:8e:b1:0e:8a:3a:91:77:69:0c:e4:47:60:
00:19:4f:53:7d:93:6f:49:e4:4f:84:61:3b:8e:8c:ec:e3:26:
b6:de:da:61:62:89:fc:bf:db:4d:32:8c:62:c7:f4:f4:7e:a0:
22:dd:2f:b4:cb:81:7c:fa:54:d4:04:34:35:84:95:0b:20:a9:
2b:5c:9d:81:23:aa:c3:a9:45:5f:6b:dc:e0:26:e8:1d:ff:eb:
33:ea:14:0f:27:7d:b5:64:48:33:4b:ad:54:37:97:24:f1:ba:
6d:fb:e1:1b:57:a0:88:6d:be:eb:67:29:90:14:e0:fa:b1:d2:
fc:54:df:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:42 2024 by rpki-client on console-fra.rpki-client.org