Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/N3mrMdCnZZa0Y75WnLMDMP65aLA.roa
File: N3mrMdCnZZa0Y75WnLMDMP65aLA.roa (raw, json)
Hash identifier: F9wzy6DJRSxxLDngLdlWDvR0p/40f5LCSVQND9y/QOA=
Subject key identifier: 37:79:AB:31:D0:A7:65:96:B4:63:BE:56:9C:B3:03:30:FE:B9:68:B0
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 0185728C697AEF8824FA1FD6EF155C5E8497
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/N3mrMdCnZZa0Y75WnLMDMP65aLA.roa
Signing time: Mon 02 Jan 2023 12:54:42 +0000
ROA not before: Mon 02 Jan 2023 12:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 185.136.205.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:69:7a:ef:88:24:fa:1f:d6:ef:15:5c:5e:84:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Jan 2 12:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3779ab31d0a76596b463be569cb30330feb968b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:66:24:7c:f3:85:9c:86:75:d1:79:1c:5a:
dd:3f:bd:88:6e:03:24:65:7a:2e:94:19:4f:77:0e:
48:3f:bb:43:5a:8a:a6:d9:c5:7f:ca:78:42:5d:75:
66:d6:cc:8e:12:70:c3:ff:e3:96:d9:55:52:e6:0a:
c4:a7:cb:d4:bb:1f:43:2a:d8:81:de:71:22:a2:31:
dc:8c:8d:93:00:45:cb:d2:9e:77:d7:c8:2f:98:a9:
44:9d:54:07:c7:dc:da:de:22:62:e9:5b:7a:7f:dc:
19:ec:c6:9b:39:1a:5f:8c:63:21:26:ed:ab:ef:ed:
c7:f5:10:c2:10:f4:94:a1:5c:e5:bb:b3:f4:1b:bd:
fb:11:db:95:c4:b8:62:86:20:da:86:47:74:4a:f2:
a6:4d:9e:77:ae:7a:6c:78:53:be:d4:6e:cf:c7:35:
58:e3:0c:1a:5c:c6:db:1d:24:a1:61:b1:72:f9:c7:
9e:99:6b:1c:b0:f4:6d:b0:dd:f1:a5:9f:5b:73:01:
59:99:3e:be:75:f8:45:40:8e:12:e9:e9:f5:ca:90:
1f:ff:a6:0d:e2:ea:95:e1:3f:5d:5a:3c:47:8d:f9:
de:3a:4a:2d:48:88:6c:66:87:28:6f:55:a0:cd:31:
45:90:43:68:f7:b6:f7:fa:8c:7c:04:6c:2c:8e:e1:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:79:AB:31:D0:A7:65:96:B4:63:BE:56:9C:B3:03:30:FE:B9:68:B0
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/N3mrMdCnZZa0Y75WnLMDMP65aLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.205.0/24
185.136.207.0/24
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
86:07:7b:ac:fe:a4:f8:bc:b3:0f:d8:df:d6:52:c7:35:63:2d:
01:5d:9e:7c:e6:17:38:9e:ca:8d:72:66:9d:c9:b9:ac:27:03:
5f:0d:60:22:5b:4f:ae:01:3d:73:36:7f:ba:f7:59:b6:ba:58:
7b:8f:6e:d9:28:99:0b:e3:e0:f3:05:b3:03:fd:77:2b:e3:66:
3d:73:28:d2:2e:f7:04:0c:13:7c:f7:40:88:70:07:90:be:e4:
69:1f:a5:e3:14:bd:8c:7a:93:e9:65:ce:18:fe:9d:54:8a:20:
66:0a:38:e2:41:f9:80:af:52:f4:02:99:d4:73:17:98:7f:71:
d9:2c:cf:37:3e:99:94:db:d9:71:4b:2f:99:f1:04:07:f7:4f:
d0:d7:30:2a:d0:39:bd:68:a0:35:fe:96:e6:d1:77:cc:ae:04:
b1:59:04:e4:e3:5f:eb:4a:95:ba:39:58:5d:5b:e1:87:9b:53:
15:f7:1e:86:4e:c3:ac:2c:f4:d9:c0:64:61:18:a6:7c:e7:07:
15:ae:f2:63:30:c5:63:a7:eb:61:84:ea:06:69:fd:22:47:c0:
d0:11:b9:82:83:2f:45:6e:ec:d7:40:71:c7:0e:8b:51:26:bc:
a1:4e:8d:b0:72:98:77:05:27:98:7b:3f:2a:52:79:f8:b2:3e:
eb:90:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:50 2024 by rpki-client on console-ams.rpki-client.org