Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/8_M_bHpC1LAyzlZTTXSuY19mRd0.roa
File: 8_M_bHpC1LAyzlZTTXSuY19mRd0.roa (raw, json)
Hash identifier: 0uFKY2QzFNsyNOj4T5xlPuj9ZaqY3FBwOHz364P98PU=
Subject key identifier: F3:F3:3F:6C:7A:42:D4:B0:32:CE:56:53:4D:74:AE:63:5F:66:45:DD
Certificate issuer: /CN=d370d67d0d2d584e6c46a309a37a545ab175dd0c
Certificate serial: 018CC94E592C27E91AB02FD690C28B423FCF
Authority key identifier: D3:70:D6:7D:0D:2D:58:4E:6C:46:A3:09:A3:7A:54:5A:B1:75:DD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03DWfQ0tWE5sRqMJo3pUWrF13Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/8_M_bHpC1LAyzlZTTXSuY19mRd0.roa
Signing time: Tue 02 Jan 2024 08:33:24 +0000
ROA not before: Tue 02 Jan 2024 08:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.187.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:59:2c:27:e9:1a:b0:2f:d6:90:c2:8b:42:3f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370d67d0d2d584e6c46a309a37a545ab175dd0c
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3f33f6c7a42d4b032ce56534d74ae635f6645dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:37:da:d8:bc:15:7c:45:66:8d:82:0c:10:
6c:e6:b8:06:07:20:6b:f2:05:68:5f:ea:ca:66:65:
92:92:79:79:74:be:c2:6b:77:ee:0a:3e:7e:f8:45:
56:69:f6:d2:ea:b5:d2:ca:28:17:5e:8d:3b:b3:4b:
45:a4:57:58:57:e3:de:3f:36:09:64:66:a3:01:d4:
e8:23:e0:2a:84:d6:85:a8:f5:89:72:82:03:42:60:
5c:bc:28:32:be:db:d9:82:28:44:49:74:b2:40:13:
82:dd:ba:01:d8:ba:7d:62:e3:e4:bf:59:4e:34:15:
47:6f:6d:93:80:18:d2:8c:65:3a:13:98:35:8d:8f:
1a:8e:58:2d:05:9b:47:69:57:92:91:52:ee:6a:8d:
ff:21:4b:6c:9c:35:2c:90:8e:6c:d6:e6:72:1a:75:
1d:2a:6d:10:fb:55:c0:15:89:4a:96:f1:48:27:44:
d2:63:df:79:0b:3b:15:4f:99:ca:e0:72:ef:8f:cf:
da:3a:12:f2:7a:01:91:6b:a1:1d:77:91:01:24:34:
04:b0:71:b2:f4:a6:ce:1d:7d:f0:10:22:78:b7:1a:
97:e3:c6:58:0f:fc:84:55:f5:cf:34:d3:aa:be:7e:
9a:53:c9:f6:c4:11:fe:59:30:0b:9b:44:fc:43:aa:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F3:3F:6C:7A:42:D4:B0:32:CE:56:53:4D:74:AE:63:5F:66:45:DD
X509v3 Authority Key Identifier:
keyid:D3:70:D6:7D:0D:2D:58:4E:6C:46:A3:09:A3:7A:54:5A:B1:75:DD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03DWfQ0tWE5sRqMJo3pUWrF13Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/8_M_bHpC1LAyzlZTTXSuY19mRd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/03DWfQ0tWE5sRqMJo3pUWrF13Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
22:fe:c5:2f:6a:2f:87:39:dd:e1:bd:de:c3:7c:f5:7a:a5:52:
2e:d1:4e:99:95:4f:1e:ae:f4:93:e8:d5:22:5f:9c:67:97:14:
98:a5:b7:19:1e:14:61:45:5f:3f:2b:c7:3e:47:ce:3b:0d:27:
1e:c8:33:d7:8e:28:49:0a:66:2a:1f:d7:50:22:a9:f5:ea:cc:
a4:22:d3:a8:87:db:5e:71:87:e3:81:f6:bf:bc:ce:b7:6e:ef:
f1:55:56:50:aa:1b:35:9a:3b:43:40:93:b9:83:e1:2d:39:f6:
f5:3f:be:c7:8e:ab:30:01:9c:9f:f4:54:3e:d1:d8:39:6d:1e:
81:33:42:40:8f:1f:cb:09:f5:60:77:e0:2c:4e:a9:70:6f:a9:
73:21:4a:ab:8f:20:06:3b:d0:3b:b9:51:24:4d:02:af:5c:d2:
26:aa:51:ef:bf:6a:73:93:a7:bc:9c:04:d4:f6:d9:f3:c8:77:
e2:70:36:95:cd:ce:0d:4a:b6:a7:01:b4:5b:22:e0:74:a5:ae:
0a:65:15:1e:d7:10:0c:9f:da:0b:90:30:31:e7:a8:02:ab:b7:
1f:cd:68:5b:84:d2:02:82:0e:4f:c8:cd:e9:93:1f:c7:e4:9b:
d3:9f:8f:41:4e:84:b5:02:dd:0d:dc:c7:92:54:00:bd:e7:23:
53:e6:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:51 2024 by rpki-client on console-fra.rpki-client.org