Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/Inc608iuvocsLfRwuMFXkjJqie8.roa
File: Inc608iuvocsLfRwuMFXkjJqie8.roa (raw, json)
Hash identifier: tXbgWvTbDJJz8XSXY0khNdlZMn/CEiuC/BQv/eCs/ew=
Subject key identifier: 22:77:3A:D3:C8:AE:BE:87:2C:2D:F4:70:B8:C1:57:92:32:6A:89:EF
Certificate issuer: /CN=fab67434afc59618046828a135e7e7d0c7ed8c9a
Certificate serial: 03A5F6EE
Authority key identifier: FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZ0NK_FlhgEaCihNefn0MftjJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/Inc608iuvocsLfRwuMFXkjJqie8.roa
Signing time: Sat 01 Jan 2022 01:50:49 +0000
ROA not before: Sat 01 Jan 2022 01:50:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62267
IP address blocks: 185.41.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61208302 (0x3a5f6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab67434afc59618046828a135e7e7d0c7ed8c9a
Validity
Not Before: Jan 1 01:50:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22773ad3c8aebe872c2df470b8c15792326a89ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:45:db:54:71:b1:e8:f1:42:a7:27:11:a2:
9a:54:91:4b:6e:9d:75:e9:53:ca:ba:81:d7:e2:aa:
81:af:16:ec:db:2d:8b:9f:29:b2:16:8e:97:29:88:
2f:43:6d:cb:6c:80:c7:e8:06:e6:06:b7:1c:60:2c:
15:f4:ba:a0:36:49:80:4a:a2:b3:41:6d:87:15:48:
8b:12:42:14:8e:0d:8b:be:33:a8:23:bd:9e:4a:45:
59:5a:0f:f7:fe:61:c9:a1:22:b6:c7:63:c3:b1:8d:
82:14:e5:d3:56:6b:18:ce:2d:28:c6:77:f7:4f:b4:
cb:39:aa:44:c5:43:88:fe:4d:a8:7e:07:0c:50:8a:
3f:3d:bf:51:85:90:52:d5:61:f8:6a:15:23:9d:39:
8f:dc:17:a3:20:29:49:44:0b:94:ca:77:bc:18:f5:
96:40:b6:67:6c:0c:e8:57:46:a6:35:7c:f2:e6:bf:
a5:54:cc:b0:01:ce:2a:6f:f6:00:41:8a:86:d3:a6:
1f:a7:54:12:88:96:23:94:b8:01:bc:2a:37:df:9e:
dc:30:73:56:28:8e:99:d5:ba:f5:c2:fb:ea:f7:14:
06:86:78:db:c3:5b:42:67:1f:a3:ef:43:7c:cc:fa:
7b:ff:d8:8f:76:01:f8:e4:37:ba:10:a7:f3:d0:30:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:77:3A:D3:C8:AE:BE:87:2C:2D:F4:70:B8:C1:57:92:32:6A:89:EF
X509v3 Authority Key Identifier:
keyid:FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZ0NK_FlhgEaCihNefn0MftjJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/Inc608iuvocsLfRwuMFXkjJqie8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/1-rZ0NK_FlhgEaCihNefn0MftjJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.228.0/22
Signature Algorithm: sha256WithRSAEncryption
81:76:25:bd:db:55:a2:e8:e2:77:96:60:d0:8c:f2:32:b8:20:
74:5b:12:09:ac:c7:33:f5:09:f9:4f:b0:e6:4e:ce:85:55:a9:
52:4a:68:44:d7:95:17:e5:12:53:30:80:78:c0:8d:10:58:05:
cf:6f:35:43:06:eb:a1:9b:99:75:b4:8e:18:41:7a:86:54:26:
53:28:a9:ee:78:30:6c:88:b2:1c:69:e2:df:32:da:9b:de:04:
38:7d:b1:11:24:85:77:60:18:4c:5f:16:53:e9:90:7a:ae:a6:
ce:10:71:f7:ce:60:ae:49:56:7d:2c:6d:9b:cd:4b:d8:20:b1:
5d:4a:20:d1:ee:a8:8d:9b:63:fb:24:79:ba:ae:c1:a1:c5:03:
0e:16:a2:7a:9e:47:d8:a9:e4:b6:c9:52:a9:8c:bb:f0:5e:69:
44:06:d5:6c:16:ff:af:0c:cc:8d:d4:5f:59:b0:82:47:21:78:
93:dc:cb:be:4b:4e:69:60:1d:d4:8c:65:84:3b:78:34:ad:e6:
f8:c1:e1:55:93:59:48:b5:89:2b:ea:38:d6:ec:5c:3c:72:ea:
80:b7:e6:21:a9:c5:11:53:62:46:72:24:88:ed:94:54:20:f1:
ff:54:3a:29:3d:80:04:f4:aa:66:45:42:b3:15:03:3e:5d:3f:
f5:fb:bf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:17 2023 by rpki-client on console-fra.rpki-client.org