Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/OzhygOuF9d4cEmcItZhlJcXhayg.roa
File: OzhygOuF9d4cEmcItZhlJcXhayg.roa (raw, json)
Hash identifier: Q/pwXUpHjGbPpE1zhLVZ95X1xE9OthCqX0RXfHgQP14=
Subject key identifier: 3B:38:72:80:EB:85:F5:DE:1C:12:67:08:B5:98:65:25:C5:E1:6B:28
Certificate issuer: /CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Certificate serial: 01856D6F8B3E6CB8B8917D87AD89253CA6A9
Authority key identifier: 60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/OzhygOuF9d4cEmcItZhlJcXhayg.roa
Signing time: Sun 01 Jan 2023 13:05:04 +0000
ROA not before: Sun 01 Jan 2023 13:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31727
IP address blocks: 185.144.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:8b:3e:6c:b8:b8:91:7d:87:ad:89:25:3c:a6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d3ac4825dca7eec97005dba3b0bff27904f58a
Validity
Not Before: Jan 1 13:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b387280eb85f5de1c126708b5986525c5e16b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:b3:ad:05:b2:36:38:e4:be:79:eb:1a:d8:
49:37:36:4a:77:7d:7b:86:78:9f:12:03:42:8d:3b:
2e:a2:7d:49:01:fc:10:a4:14:94:1d:17:9a:d9:1c:
9f:00:e7:cb:41:c3:9f:35:40:f6:50:9b:ef:73:8d:
66:5b:a6:e8:6f:23:8b:1d:c7:16:01:ba:ea:5d:b1:
37:2e:82:6d:cf:6d:24:14:c2:e1:25:53:69:cc:f0:
7a:0a:06:18:c1:86:6a:5c:dd:bc:2e:da:0e:a8:23:
94:f9:4b:8f:4c:02:95:0d:43:f9:5a:c4:e4:ce:26:
99:ae:3a:0a:40:e0:c4:fa:9a:b3:01:0b:81:c0:0a:
a2:a8:76:c9:27:18:5c:51:ce:e3:1f:f5:e6:26:56:
4d:6a:9e:97:27:ed:85:35:43:e0:8f:d3:e7:bd:d3:
a6:50:04:de:c8:7d:c3:89:c5:ef:59:c6:88:33:59:
b5:be:2f:d7:9d:7b:c0:79:9d:a0:26:44:19:25:af:
02:12:1a:22:0c:20:64:e5:4c:36:07:36:2e:d9:7e:
bc:7a:24:16:73:97:88:7c:4b:23:eb:af:92:76:a9:
d4:2a:8e:3f:ed:de:65:c8:cd:3b:ad:fd:a1:0d:a1:
6e:bf:6a:1a:ef:7e:b6:95:24:3e:ee:6e:23:70:28:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:72:80:EB:85:F5:DE:1C:12:67:08:B5:98:65:25:C5:E1:6B:28
X509v3 Authority Key Identifier:
keyid:60:D3:AC:48:25:DC:A7:EE:C9:70:05:DB:A3:B0:BF:F2:79:04:F5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/OzhygOuF9d4cEmcItZhlJcXhayg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b4765f-a60f-4356-982a-1afd2649b299/1/YNOsSCXcp-7JcAXbo7C_8nkE9Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:40:61:9e:b8:aa:e9:06:00:7a:db:be:23:82:70:3b:1c:90:
6a:ab:4e:26:90:cf:70:d0:28:1b:34:1f:83:a6:80:34:91:ac:
3e:e1:d7:35:7e:4d:c0:1e:a2:6c:11:8f:f2:e3:6d:23:a2:b4:
74:0f:e3:ed:00:29:2c:66:9b:31:01:de:5e:e7:a7:e6:a0:33:
a2:5d:84:e7:53:1c:03:3d:38:70:51:59:bd:10:fc:b0:7b:90:
80:f1:39:62:b7:ae:f8:fa:0d:b0:9d:e5:60:ea:a4:f1:70:9e:
00:2f:a9:3b:df:b6:ec:e2:43:55:92:f5:d6:29:af:fb:f8:28:
c5:46:59:b4:cf:3e:ed:5f:11:7c:ad:84:d3:c0:62:24:69:06:
50:6d:c0:b5:58:fd:66:17:6e:d7:42:4d:2b:37:2c:69:6e:10:
b5:21:cb:74:b2:e0:20:67:29:88:32:ec:d3:b9:8a:bf:c2:24:
f6:39:8e:84:7a:4d:d8:18:73:12:6a:f3:9a:3f:07:66:54:11:
6e:bc:d9:bd:38:fe:90:b0:a0:04:41:37:63:f4:ed:e0:fc:26:
bc:77:90:3a:ce:d5:c7:9d:93:d3:68:27:e1:40:1b:03:ca:ca:
b4:80:df:ce:2e:1c:0f:31:eb:b7:b5:49:c1:14:1c:d3:00:79:
45:5a:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org