Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/AZvIDRyJpEGXhPs57o86jqKmLew.roa
File: AZvIDRyJpEGXhPs57o86jqKmLew.roa (raw, json)
Hash identifier: Hx807002Hymmy1Na788XEYc2QDRk+bS82d8/NxH9m9g=
Subject key identifier: 01:9B:C8:0D:1C:89:A4:41:97:84:FB:39:EE:8F:3A:8E:A2:A6:2D:EC
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 01856C2ED18EEEB38562003BB2B1E26CB6EF
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/AZvIDRyJpEGXhPs57o86jqKmLew.roa
Signing time: Sun 01 Jan 2023 07:14:45 +0000
ROA not before: Sun 01 Jan 2023 07:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 268581
IP address blocks: 185.2.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:d1:8e:ee:b3:85:62:00:3b:b2:b1:e2:6c:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Jan 1 07:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=019bc80d1c89a4419784fb39ee8f3a8ea2a62dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:b0:f0:ff:56:30:75:fc:7c:26:04:8f:c2:
3b:02:7f:ce:1b:34:30:f2:79:e5:cf:b2:d3:9e:e9:
f1:3f:a5:52:66:7a:7f:99:78:eb:b1:46:a0:33:8c:
31:21:52:fa:d4:24:08:ca:fe:72:43:61:44:f1:88:
0b:30:34:53:3a:b2:2f:e9:a7:f6:ea:33:a8:09:e2:
23:60:68:24:fe:3a:bf:02:6f:d3:5d:70:cd:58:6b:
03:16:c4:67:8e:c2:c2:44:a7:b8:c9:08:48:cc:9d:
0f:ac:ce:b0:40:59:e1:0f:b8:35:c5:54:97:b0:0e:
7b:27:d9:9e:81:35:76:1d:76:cc:fe:5f:9e:45:4d:
73:af:8e:d3:11:ea:a9:6f:ac:d7:3d:01:19:92:ea:
e7:55:12:88:cc:0b:90:66:f6:d1:27:a3:66:0b:33:
f6:f7:28:54:f0:43:77:cb:f5:d4:e7:40:10:5c:d4:
7b:f0:51:ff:cb:c6:cc:2b:f7:04:ba:6b:e0:eb:ca:
2d:3c:ae:28:63:48:03:00:ac:cc:76:4e:32:fd:6d:
8d:c4:d0:3b:67:74:4f:1a:97:0b:d3:8b:fa:1f:e1:
dc:4f:95:a7:70:7a:d9:21:cc:86:db:d4:fe:c2:17:
98:f6:22:79:bd:f2:03:4c:b5:5f:7d:8a:aa:e6:f2:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9B:C8:0D:1C:89:A4:41:97:84:FB:39:EE:8F:3A:8E:A2:A6:2D:EC
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/AZvIDRyJpEGXhPs57o86jqKmLew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:99:f8:c4:61:de:34:10:0f:db:82:86:1e:2d:d6:57:90:5d:
45:3a:cc:cb:2c:3b:94:9b:66:c9:f4:17:6e:8d:88:13:77:2d:
b6:58:40:1f:9e:7b:4e:56:ec:f6:76:2e:b8:50:e2:a0:ba:f9:
ba:ab:23:af:f7:72:81:76:4b:df:96:1d:e8:3a:4b:4a:18:69:
1c:0c:90:f7:10:ee:2f:72:67:e2:32:50:e3:9f:c7:08:d8:dc:
6d:81:ac:fc:fc:93:9e:a5:e0:f9:fa:4a:b8:2c:e5:24:1d:38:
e1:c9:fb:cc:d6:c6:fa:88:62:08:7a:87:0c:d6:d6:84:60:83:
8a:31:e0:77:c3:8d:11:97:aa:14:3d:6e:3d:30:4c:64:88:12:
77:35:b2:7c:09:87:6e:73:d8:be:bf:55:8b:56:9b:1c:97:b4:
57:a5:4c:24:80:83:eb:ee:64:38:98:c4:37:0f:8e:b9:2f:c0:
84:db:a6:d4:f2:b3:c3:82:74:c6:6b:6d:1f:22:2d:ea:32:01:
7e:48:16:2e:85:c9:51:90:17:64:fc:42:45:f7:1f:32:b1:25:
bf:0e:1e:79:e6:bb:7e:a9:43:db:95:17:3e:03:a8:a4:04:be:
cc:cb:f3:14:0e:bf:6c:b4:d3:ed:1d:b6:d2:65:3f:29:2c:18:
e5:7c:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:14 2023 by rpki-client on console-fra.rpki-client.org