Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/TiltD7uzF289CaDATUZVzNiwanM.roa
File: TiltD7uzF289CaDATUZVzNiwanM.roa (raw, json)
Hash identifier: j4Le3iYx1CQhntacF6XJlAP3GQtv4D1doipO7fRdf9I=
Subject key identifier: 4E:29:6D:0F:BB:B3:17:6F:3D:09:A0:C0:4D:46:55:CC:D8:B0:6A:73
Certificate issuer: /CN=3928fad9052ba251e461a9269c0006422507ec2d
Certificate serial: 01839E263999D2908ADAA733D554A55A2EA9
Authority key identifier: 39:28:FA:D9:05:2B:A2:51:E4:61:A9:26:9C:00:06:42:25:07:EC:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSj62QUrolHkYakmnAAGQiUH7C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/TiltD7uzF289CaDATUZVzNiwanM.roa
Signing time: Mon 03 Oct 2022 14:00:48 +0000
ROA not before: Mon 03 Oct 2022 14:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12859
IP address blocks: 185.63.152.0/22 maxlen: 22
2a03:7e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:26:39:99:d2:90:8a:da:a7:33:d5:54:a5:5a:2e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3928fad9052ba251e461a9269c0006422507ec2d
Validity
Not Before: Oct 3 14:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e296d0fbbb3176f3d09a0c04d4655ccd8b06a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:30:3c:e2:f2:10:f0:b6:16:93:06:08:3e:e2:
4c:a8:2c:a3:4f:be:05:9a:e7:98:50:1a:63:23:7c:
4d:f7:96:7b:10:4c:9a:38:fb:49:a1:fa:3f:4b:79:
90:6a:bb:fa:3f:e1:00:d7:6f:38:60:5f:b4:90:e9:
0c:7c:2e:2e:16:23:a8:6a:e1:ea:6f:ce:69:5f:67:
77:8e:28:ee:2c:1b:36:6a:b0:38:1f:87:40:95:7b:
4f:4e:7a:76:81:ed:a6:a0:29:4d:4f:32:57:fc:10:
8b:cb:d3:a0:4f:67:77:a6:fa:f9:36:2b:08:8e:e2:
a2:73:9a:49:b1:5e:8a:7f:4a:cb:54:66:a1:67:49:
62:78:ad:5e:23:d6:f6:3e:1f:27:57:d5:4b:6f:1e:
37:a0:74:89:28:a2:f7:c7:52:a1:a4:ee:b1:8a:50:
db:b1:81:2b:65:54:ad:2c:8c:a5:de:6a:f8:df:00:
30:c3:1f:fd:a4:bb:da:14:3c:3a:3a:a3:ee:75:61:
b4:21:1c:35:dc:aa:4e:d8:ed:fa:c3:19:ad:40:ab:
60:40:eb:1d:1d:d2:03:d8:94:9e:d3:a5:c3:10:b1:
fb:2e:83:8b:af:8e:62:a7:89:f6:e9:9a:da:c0:55:
62:4f:e2:c6:16:a3:5a:7c:66:01:c2:2b:5a:8a:a0:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:29:6D:0F:BB:B3:17:6F:3D:09:A0:C0:4D:46:55:CC:D8:B0:6A:73
X509v3 Authority Key Identifier:
keyid:39:28:FA:D9:05:2B:A2:51:E4:61:A9:26:9C:00:06:42:25:07:EC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSj62QUrolHkYakmnAAGQiUH7C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/TiltD7uzF289CaDATUZVzNiwanM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/OSj62QUrolHkYakmnAAGQiUH7C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.152.0/22
IPv6:
2a03:7e0::/32
Signature Algorithm: sha256WithRSAEncryption
35:a0:b8:bb:1e:c0:ef:cf:ab:aa:35:f5:fd:bf:9b:f3:09:55:
fd:38:5f:f1:99:7d:36:34:24:dc:44:07:9b:05:5c:90:8d:d1:
f0:4f:43:6f:13:15:4f:d5:d3:4c:9e:b9:63:47:dd:ca:ea:87:
7e:79:bb:4d:06:9e:46:d9:6f:13:67:63:aa:69:b7:fc:52:0b:
8e:95:96:91:61:7a:85:03:b4:d0:78:eb:b0:0b:05:c4:19:6e:
7e:f7:64:3e:71:05:a6:59:8e:c4:2c:12:84:87:3a:c3:71:3d:
5f:3e:5d:c1:b5:77:8b:86:24:bd:5d:ba:29:50:d9:f0:d8:55:
86:56:51:84:90:ac:31:bd:16:c4:d1:a5:39:e7:36:ba:b2:b0:
1d:45:83:ac:5f:ba:ba:5a:6f:f3:83:51:d8:f4:53:40:91:2c:
89:b1:94:21:5d:0a:ba:71:de:e5:7d:05:b7:b0:c5:49:71:2a:
8b:01:63:39:4c:07:44:53:ec:77:0e:96:63:06:ba:0f:96:fe:
e1:b6:3a:b0:53:56:2a:36:13:66:71:a8:9c:22:72:79:17:90:
7d:15:ab:86:9f:65:5a:a7:7d:b6:f7:42:e9:47:c1:60:ac:67:
46:bb:f5:1f:d3:b5:68:47:9b:99:0a:99:30:64:55:f0:98:7a:
6a:22:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:53 2024 by rpki-client on console-fra.rpki-client.org