Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/PI5APxZOiMCRIjIRhDhZjcTm37I.roa
File: PI5APxZOiMCRIjIRhDhZjcTm37I.roa (raw, json)
Hash identifier: naq/NMEoSeh5hpIWKmZjaEj8Df43eKIDCRaH/Dxa1HI=
Subject key identifier: 3C:8E:40:3F:16:4E:88:C0:91:22:32:11:84:38:59:8D:C4:E6:DF:B2
Certificate issuer: /CN=78bc7ccc151657694f5d27aee131704bf1fb89b2
Certificate serial: 01E5E2
Authority key identifier: 78:BC:7C:CC:15:16:57:69:4F:5D:27:AE:E1:31:70:4B:F1:FB:89:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLx8zBUWV2lPXSeu4TFwS_H7ibI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/PI5APxZOiMCRIjIRhDhZjcTm37I.roa
Signing time: Thu 24 Mar 2022 11:35:21 +0000
ROA not before: Thu 24 Mar 2022 11:35:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205888
IP address blocks: 185.202.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124386 (0x1e5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78bc7ccc151657694f5d27aee131704bf1fb89b2
Validity
Not Before: Mar 24 11:35:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c8e403f164e88c0912232118438598dc4e6dfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:86:b6:2a:5c:ae:7c:13:f3:ef:46:6c:a8:
43:45:15:b1:35:3b:64:b0:92:b1:e2:e8:98:85:e0:
ed:a1:8e:95:fe:de:93:d7:ac:e8:55:ae:07:d7:29:
1d:40:47:f2:38:92:c5:5f:7a:a4:e4:8b:8f:8c:8f:
82:f2:6b:88:0b:56:d7:af:2b:8c:82:c5:dd:3d:42:
59:b0:c7:95:cb:d4:4a:3d:44:8d:59:0a:da:25:21:
e0:e4:01:75:81:c0:82:6d:cf:70:1d:16:8b:b1:5d:
4a:cc:ce:5d:56:f1:da:94:05:c8:98:ae:2d:d8:97:
40:61:26:29:d0:1a:81:b8:cd:86:45:22:c3:77:71:
15:43:55:c2:71:7c:0f:96:ef:18:76:ee:b9:62:62:
f2:dd:93:7c:2d:96:da:0f:e7:1a:bc:b4:07:0a:bd:
1c:e9:2e:29:33:52:b3:0b:2f:a9:47:d1:56:47:e4:
03:b0:92:e4:aa:51:96:70:ec:cd:22:13:ae:37:33:
81:10:17:f2:2c:45:ff:6a:70:05:48:53:81:ff:3c:
84:07:40:7f:d8:81:d1:5b:ce:bc:f4:70:b1:99:0d:
8d:64:81:ff:17:69:91:34:fc:d8:65:f7:d0:36:72:
86:e5:ef:fa:83:97:67:cf:e1:8b:4f:6e:ca:b5:f8:
4f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8E:40:3F:16:4E:88:C0:91:22:32:11:84:38:59:8D:C4:E6:DF:B2
X509v3 Authority Key Identifier:
keyid:78:BC:7C:CC:15:16:57:69:4F:5D:27:AE:E1:31:70:4B:F1:FB:89:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLx8zBUWV2lPXSeu4TFwS_H7ibI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/PI5APxZOiMCRIjIRhDhZjcTm37I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/eLx8zBUWV2lPXSeu4TFwS_H7ibI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:6d:64:20:69:5b:b5:f6:f3:0a:f5:63:8f:b5:e5:53:6b:ac:
27:84:7c:1c:6a:c2:fe:9a:98:67:10:9d:0d:7b:25:8f:09:e0:
2e:6f:ab:15:2d:39:9b:22:86:9e:59:c0:3e:a4:8c:53:de:f7:
78:9b:e9:16:ec:58:01:07:91:8f:80:74:0e:9b:57:b8:36:77:
a9:ef:e7:e7:5f:d0:49:00:52:cb:52:9d:dd:4e:9a:c1:95:01:
5e:fa:bd:5a:6a:31:aa:f5:c1:4c:e2:29:d5:7e:e6:f7:5e:54:
82:00:62:78:9c:1b:68:a6:a3:d9:e5:10:46:02:e3:e7:ab:d8:
1b:67:f9:19:f5:fc:15:b8:aa:d1:7e:a4:11:a5:bb:e8:fe:5e:
72:7b:1d:94:4d:cb:86:a7:6b:a9:3c:50:ef:0b:90:ab:56:77:
73:62:6b:ac:2e:16:2d:96:06:86:ae:a1:15:83:0c:d4:07:2b:
d5:49:5c:bf:ca:6c:be:2e:cf:11:01:5a:d6:eb:ed:8e:28:2a:
e5:eb:85:cb:f6:57:2f:27:c7:98:07:f5:36:6b:95:9d:fb:58:
a6:64:55:f6:cf:ff:b4:c3:af:ae:08:12:08:33:b6:e3:22:bd:
85:eb:e4:41:63:98:0b:8c:e4:84:d8:6c:1a:09:b4:b1:50:63:
22:4e:d2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:38 2024 by rpki-client on console-fra.rpki-client.org