Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/3ZZk_ijgGsX_hAOdOfogyJRyEWs.roa
File: 3ZZk_ijgGsX_hAOdOfogyJRyEWs.roa (raw, json)
Hash identifier: E0Mj0ncVOAj260nEqXBW+JVQ5Z2iwvxNiS8m9qHPGnk=
Subject key identifier: DD:96:64:FE:28:E0:1A:C5:FF:84:03:9D:39:FA:20:C8:94:72:11:6B
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 01862AAA0095EBBB5425C510D099372ED4FD
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/3ZZk_ijgGsX_hAOdOfogyJRyEWs.roa
Signing time: Tue 07 Feb 2023 06:57:09 +0000
ROA not before: Tue 07 Feb 2023 06:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.184.92.0/23 maxlen: 24
193.37.236.0/24 maxlen: 24
185.2.163.0/24 maxlen: 24
185.2.160.0/24 maxlen: 24
185.2.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2a:aa:00:95:eb:bb:54:25:c5:10:d0:99:37:2e:d4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Feb 7 06:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd9664fe28e01ac5ff84039d39fa20c89472116b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:2e:52:f5:81:8d:46:a9:0d:20:f0:8b:0e:
ef:08:dd:e5:aa:9d:30:28:d7:d6:a8:87:1e:68:af:
c9:52:b8:d8:47:e5:7d:60:e7:90:9a:5e:ea:4a:3d:
6e:9a:29:02:e0:41:9d:51:cb:c3:92:25:51:e4:8c:
21:0f:63:cc:41:16:59:46:d8:35:4f:9a:32:f5:5d:
51:f9:90:72:92:3c:22:aa:ab:35:f5:98:6b:5a:d4:
68:df:98:0a:22:68:f2:90:be:fa:86:97:84:aa:de:
81:27:bd:93:5e:cd:a8:99:1b:0e:01:6b:2f:37:91:
0a:61:e5:a7:90:79:28:1f:de:07:e7:46:b3:6c:2c:
92:0e:be:58:ac:11:a9:98:1d:cc:d8:af:3e:d0:e9:
ad:db:f6:a9:a4:eb:41:13:37:31:d6:32:ad:fb:4b:
4f:64:1f:de:cb:bc:c4:57:c6:d7:ba:0b:8c:e6:da:
f5:0e:c6:d6:93:9a:3e:97:89:f4:dd:aa:5d:ce:4d:
d2:80:57:85:ef:68:5e:c0:7b:77:26:00:bc:94:57:
d7:e1:08:b7:33:0f:4f:77:67:4a:ff:87:12:d9:3f:
f3:5c:a9:bd:66:cd:72:6b:e1:68:59:cc:4e:f1:25:
7b:18:33:a9:5a:5f:ec:92:33:dc:e1:5b:9d:41:f9:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:96:64:FE:28:E0:1A:C5:FF:84:03:9D:39:FA:20:C8:94:72:11:6B
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/3ZZk_ijgGsX_hAOdOfogyJRyEWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/24
185.2.162.0/23
193.37.236.0/24
195.184.92.0/23
Signature Algorithm: sha256WithRSAEncryption
14:bf:3a:78:7c:13:a9:73:3c:25:7a:36:66:b8:89:9e:fb:46:
e7:3d:69:df:d4:ab:e9:f4:cb:01:f7:62:ba:8f:59:f7:18:cc:
77:be:23:d3:70:88:96:85:79:0b:5c:d6:8c:ef:a4:b2:54:84:
27:00:ec:52:ff:4f:b9:cf:57:e0:f9:6a:37:d8:38:6e:6b:31:
bb:16:73:e2:df:e6:25:c0:6d:96:bc:b0:ec:58:90:87:8f:94:
4b:35:c6:06:ab:ea:66:c7:76:ed:fb:85:c4:f6:26:c9:55:02:
39:1a:df:9e:f3:6b:ef:a2:f9:7d:c1:99:da:e6:6b:73:9f:66:
d7:6d:f5:a3:f6:95:54:84:5e:df:50:fa:82:d5:04:2f:43:94:
4f:05:b7:a5:43:d5:4e:be:36:da:a2:45:8e:5c:e8:cd:e5:69:
54:47:bd:33:a8:e2:72:f3:61:ac:01:72:62:63:26:fd:1f:91:
ba:77:20:bf:5b:8f:f3:e0:83:9c:ec:29:f2:a3:7e:22:e1:b4:
17:e9:e9:95:0d:47:a2:62:82:39:6e:fd:37:34:1b:d8:45:dd:
65:71:1f:de:87:30:c3:82:7e:16:18:b3:10:d3:02:92:b6:3b:
31:c2:41:c1:ed:11:47:fc:85:1b:54:72:e2:94:e6:ef:86:a6:
31:eb:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:03 2023 by rpki-client on console-ams.rpki-client.org