Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/_IBlweVuPSzpHunbz11ia70paWo.roa
File: _IBlweVuPSzpHunbz11ia70paWo.roa (raw, json)
Hash identifier: loKAgRS7nbGVDKKpvuSf4C+Pd8QeRV5sCZ/pdP5MISg=
Subject key identifier: FC:80:65:C1:E5:6E:3D:2C:E9:1E:E9:DB:CF:5D:62:6B:BD:29:69:6A
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 01859652635B95AFE85896F0E0DD34F18D4B
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/_IBlweVuPSzpHunbz11ia70paWo.roa
Signing time: Mon 09 Jan 2023 11:37:39 +0000
ROA not before: Mon 09 Jan 2023 11:37:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 185.136.205.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:52:63:5b:95:af:e8:58:96:f0:e0:dd:34:f1:8d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Jan 9 11:37:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc8065c1e56e3d2ce91ee9dbcf5d626bbd29696a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:5d:66:65:17:bd:59:95:ee:5c:07:03:ad:
af:f3:c5:f2:bf:ab:b9:03:ba:f4:e8:4e:eb:3d:3f:
eb:3d:9c:91:d0:ec:87:16:8b:58:ba:5b:c0:7e:b9:
7f:dd:70:29:2b:81:43:c0:02:35:55:22:d4:e3:0c:
f6:63:5b:74:36:8a:88:2b:62:0b:4b:46:47:d5:95:
57:9e:ca:a6:90:8c:74:90:0d:4e:cf:23:57:8c:12:
82:9f:09:29:11:97:79:88:34:41:3e:d9:b3:2b:22:
f3:c9:d1:17:82:30:ab:f4:70:86:ec:50:f6:cb:b9:
89:d8:5c:55:ff:0c:7f:b9:de:fd:55:b1:98:74:4c:
e1:a3:94:17:68:71:3e:64:76:75:b6:ff:d0:23:6a:
7f:2b:cb:a6:4e:fb:a6:71:b3:69:f8:22:13:10:fd:
e0:16:2f:6f:3e:c7:7d:74:a9:8d:0d:46:76:8a:62:
e5:f8:4b:e1:09:83:e6:a6:98:c2:a5:69:d7:3f:c2:
47:2f:22:1a:2d:88:89:e5:10:a7:d4:d5:79:50:e8:
bc:bf:4e:f9:24:f4:65:ac:3b:2c:06:23:60:14:79:
d9:90:c8:f8:59:3b:c8:7a:de:bc:de:73:de:15:1f:
4d:65:35:92:a6:4b:b6:a3:96:b6:55:87:2f:d5:b3:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:80:65:C1:E5:6E:3D:2C:E9:1E:E9:DB:CF:5D:62:6B:BD:29:69:6A
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/_IBlweVuPSzpHunbz11ia70paWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.205.0/24
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fd:c0:79:6a:c9:20:bf:f1:2c:f4:25:e8:a2:51:ce:bb:a3:
0f:2c:3a:55:00:f3:7f:a8:38:10:5c:ef:50:14:08:81:36:d5:
d8:85:77:e5:0d:54:b2:e0:2b:58:ad:47:f5:22:53:64:e5:0a:
f1:2c:e6:3a:36:38:78:a6:d2:1b:70:ce:4f:51:d3:33:be:23:
da:4a:c0:b6:d9:94:64:81:51:19:0b:ce:6e:e7:5c:09:4d:de:
ac:cc:0f:6e:5e:a2:b8:3e:90:fd:68:1e:90:a2:1c:3d:8b:6e:
dc:d7:06:a7:20:96:a1:37:2c:be:2a:58:f5:ef:52:4e:2b:bf:
dd:59:bb:5b:4b:b6:86:8b:bf:76:3c:78:5b:e6:df:8c:95:39:
06:69:c2:41:0f:b2:99:55:7d:96:7b:c5:34:b8:28:c9:92:8e:
4d:b5:a9:a7:d0:9a:ba:c4:dd:a2:f4:99:90:f6:75:41:6a:82:
4e:76:0b:68:e6:62:71:c0:df:4b:a5:38:10:f9:c1:62:b3:32:
b2:05:32:87:a4:50:e3:80:7f:f8:e3:e9:14:9a:41:85:00:ae:
ad:d4:5b:55:20:8b:a2:71:2b:ae:6b:53:dc:46:c9:f6:38:f1:
32:e0:3b:c5:7a:a5:6b:58:ee:64:a7:e5:02:93:9a:3d:85:51:
94:7b:d8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org