Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/M4aXtz4MwizNVcmAiFN6HJZLc0o.roa
File: M4aXtz4MwizNVcmAiFN6HJZLc0o.roa (raw, json)
Hash identifier: /PI+cMjOfzIUlwqgydhsMyEnGxg3uPIxN6GmfCqv0GM=
Subject key identifier: 33:86:97:B7:3E:0C:C2:2C:CD:55:C9:80:88:53:7A:1C:96:4B:73:4A
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0184F783CBA5ECA0D364AB380C9E9C9AB04F
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/M4aXtz4MwizNVcmAiFN6HJZLc0o.roa
Signing time: Fri 09 Dec 2022 15:32:00 +0000
ROA not before: Fri 09 Dec 2022 15:32:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211373
IP address blocks: 185.100.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f7:83:cb:a5:ec:a0:d3:64:ab:38:0c:9e:9c:9a:b0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Dec 9 15:32:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=338697b73e0cc22ccd55c98088537a1c964b734a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:61:e1:7b:41:31:08:0a:7a:79:ec:df:9f:58:
7c:77:89:2e:63:f8:b4:cc:78:f3:1c:54:61:ac:c8:
1c:95:38:ee:7b:6a:b0:64:68:d2:89:8d:5f:43:5e:
bb:7f:05:cd:80:01:5c:13:7a:f1:59:d5:ac:50:f7:
fc:a4:c5:20:da:ee:23:d1:a8:7a:63:4a:fb:4c:7d:
e5:f7:ae:ac:7c:65:fa:d2:97:ba:b7:13:c4:7e:97:
b0:ee:d1:31:38:30:b1:08:cb:89:1c:9a:da:9f:3a:
71:23:78:50:50:6b:29:93:4d:c1:3d:54:d3:df:1e:
d4:87:6f:f9:07:e8:21:96:9d:d6:c1:f2:fc:5a:60:
71:15:3b:eb:59:ad:0a:e8:71:ca:bd:b3:f7:b8:bf:
62:4b:4e:11:94:23:ed:71:8b:80:cb:c6:f9:c7:9d:
47:ee:08:ba:d2:07:cb:ab:2e:fd:66:5b:c3:67:2c:
88:de:48:2a:51:71:fb:66:36:29:43:48:3c:08:56:
3e:7d:24:33:e0:52:09:95:73:51:9a:f1:e6:d0:2d:
ed:f5:3b:3b:4d:19:f9:5e:10:c7:fd:8b:5b:bf:32:
9a:df:f2:c2:e8:5d:dc:db:e4:3d:4d:09:05:54:a0:
d6:9d:28:bd:dc:af:57:41:25:68:7d:ec:ba:5e:5c:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:86:97:B7:3E:0C:C2:2C:CD:55:C9:80:88:53:7A:1C:96:4B:73:4A
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/M4aXtz4MwizNVcmAiFN6HJZLc0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.213.0/24
Signature Algorithm: sha256WithRSAEncryption
88:9c:5b:64:e4:b3:a7:f7:11:3f:31:91:84:f3:06:dc:c6:09:
43:b8:96:55:f4:42:14:10:9c:c9:4a:d8:00:dc:b9:6b:a5:e3:
a7:5c:1c:9a:38:1c:ff:06:f3:40:2d:38:67:0f:f6:41:5d:e0:
30:a1:c5:46:4e:7c:4a:c3:05:60:ed:11:1c:e4:27:c9:d0:98:
a1:93:9b:8b:b2:ba:65:ca:67:2d:42:49:9a:42:49:4a:c9:d9:
81:af:02:b1:45:e2:b8:e9:e9:25:a7:10:cd:ec:9f:bf:d1:ed:
e3:c3:d8:88:73:7d:85:94:a0:4f:4d:2d:73:31:da:e7:c5:d6:
f7:a9:7e:8d:8e:52:df:66:5f:16:ab:a4:65:74:2c:20:01:da:
b6:34:be:ef:b1:c1:48:51:e6:83:9b:6f:5e:ba:70:31:81:65:
20:93:bf:4c:de:d3:82:5f:4c:13:8e:6d:19:b5:5a:52:4d:7f:
df:72:3c:2d:cd:ac:ac:f9:1a:41:08:3b:13:00:87:f7:1a:f5:
25:c4:87:59:8e:dc:4e:d6:18:9b:f0:18:91:a2:5d:9f:ed:d4:
98:57:7a:f1:bc:8f:8f:90:02:3b:af:86:de:f9:d6:01:b4:d4:
82:fa:56:63:15:3a:3d:70:34:79:39:b7:37:46:ba:eb:93:07:
9b:a5:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:00 2024 by rpki-client on console-fra.rpki-client.org