Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/t8aKTouTRM3_q5Kzenauuai4xhs.roa
File: t8aKTouTRM3_q5Kzenauuai4xhs.roa (raw, json)
Hash identifier: ksGDEdZ5dGbcXjTs2bbKXpTj2I8zTfPSO/Te88Xnyvk=
Subject key identifier: B7:C6:8A:4E:8B:93:44:CD:FF:AB:92:B3:7A:76:AE:B9:A8:B8:C6:1B
Certificate issuer: /CN=bcf81437457cbc32dfa2732848243a89ee538708
Certificate serial: 018CC9BBBAE5D1C445EDB295D8E66A957C29
Authority key identifier: BC:F8:14:37:45:7C:BC:32:DF:A2:73:28:48:24:3A:89:EE:53:87:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPgUN0V8vDLfonMoSCQ6ie5Thwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/t8aKTouTRM3_q5Kzenauuai4xhs.roa
Signing time: Tue 02 Jan 2024 10:32:52 +0000
ROA not before: Tue 02 Jan 2024 10:32:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48551
IP address blocks: 185.238.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ba:e5:d1:c4:45:ed:b2:95:d8:e6:6a:95:7c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf81437457cbc32dfa2732848243a89ee538708
Validity
Not Before: Jan 2 10:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7c68a4e8b9344cdffab92b37a76aeb9a8b8c61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:6f:d3:74:6e:d7:d6:05:90:3c:3a:20:47:
fe:77:c8:e9:65:73:68:80:a4:2a:bd:37:59:8d:71:
50:7e:49:51:aa:3a:1b:bf:38:ff:ec:ef:fd:6c:09:
62:3b:74:a6:21:54:7a:20:0d:79:0a:c9:38:f9:62:
6f:d4:95:66:83:1b:57:da:2a:f3:88:82:59:aa:bd:
2d:cd:fb:08:fe:07:f4:69:2b:cf:6b:8b:5a:9e:3b:
27:9e:90:84:84:19:e9:25:11:9d:3b:ac:6a:b6:25:
a7:be:7f:ec:3e:2c:76:fd:a5:74:02:09:a9:9f:de:
3c:16:36:68:b1:71:8c:1b:e8:cb:c3:2d:bd:12:dc:
d8:a0:67:09:63:9e:21:47:aa:0a:c1:02:16:8a:0c:
9e:d2:6f:a8:71:3f:5c:67:22:fe:77:6f:d2:8f:3d:
b9:9f:9e:ee:2c:a4:41:d5:1b:df:85:5b:81:eb:82:
4a:9c:ca:c3:e5:ae:d5:84:7b:13:68:de:1f:43:86:
5f:69:18:cf:08:bd:7c:4d:61:43:b7:05:e8:e6:8a:
31:6b:f8:2e:58:81:cc:a3:06:d7:42:b9:82:fe:b6:
a2:0a:34:b3:4f:65:28:0a:2d:be:28:6b:72:cc:08:
0f:54:82:a0:68:01:80:e4:6a:03:5d:54:78:ec:a2:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:8A:4E:8B:93:44:CD:FF:AB:92:B3:7A:76:AE:B9:A8:B8:C6:1B
X509v3 Authority Key Identifier:
keyid:BC:F8:14:37:45:7C:BC:32:DF:A2:73:28:48:24:3A:89:EE:53:87:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPgUN0V8vDLfonMoSCQ6ie5Thwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/t8aKTouTRM3_q5Kzenauuai4xhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/vPgUN0V8vDLfonMoSCQ6ie5Thwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.143.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:12:a1:65:0d:c6:33:15:6b:a7:1c:24:22:da:78:a3:2f:8e:
fe:f1:80:25:cb:c5:f0:1d:ec:82:23:52:86:29:eb:6a:71:40:
6d:38:73:bd:c7:37:4d:ac:3f:60:dd:28:d2:df:db:d4:86:59:
e5:4f:5a:ae:53:68:f7:31:3f:00:92:8f:bc:17:72:d3:8b:16:
46:b8:f3:e2:ed:c0:32:6e:38:0b:81:f0:12:61:07:b7:1b:3b:
58:8f:a2:1e:c0:cc:94:e9:d9:bf:a5:9f:31:07:a6:90:8c:20:
6c:a9:dc:ac:a9:eb:49:a0:75:85:2b:cb:07:00:a3:54:db:00:
05:e6:cb:79:80:fe:7e:9d:17:26:25:d7:18:b8:dd:f2:04:88:
2f:76:ab:d7:a9:3e:5b:cb:0e:bc:5a:bf:b7:83:8f:60:04:20:
46:29:32:23:73:78:29:cb:2d:8f:f6:38:01:36:71:20:d6:59:
7b:09:68:dd:a1:98:a6:32:2e:e0:34:ec:74:36:d3:5f:10:e2:
81:d0:5f:90:0f:d6:c5:0c:93:25:57:7b:58:66:25:43:c5:e3:
eb:e8:e7:d2:9c:b4:15:72:ca:aa:d0:d9:3d:90:71:1c:b9:0c:
12:33:80:6b:7f:39:c0:f1:5b:28:ad:8b:15:f0:fa:34:23:ba:
b4:c1:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 18:39:26 2024 by rpki-client on console-ams.rpki-client.org