Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/CRQuUMQnJ6cnp2JAWmdZfc3q8-M.roa
File: CRQuUMQnJ6cnp2JAWmdZfc3q8-M.roa (raw, json)
Hash identifier: ++kR4McC+hELsZQuv7AwWs3ukNnN5+Wwlpy8+5Ic+YA=
Subject key identifier: 09:14:2E:50:C4:27:27:A7:27:A7:62:40:5A:67:59:7D:CD:EA:F3:E3
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: AADF4B
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/CRQuUMQnJ6cnp2JAWmdZfc3q8-M.roa
Signing time: Fri 06 May 2022 06:02:51 +0000
ROA not before: Fri 06 May 2022 06:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.244.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11198283 (0xaadf4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: May 6 06:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09142e50c42727a727a762405a67597dcdeaf3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1a:1b:a7:40:1c:a1:fa:88:1a:a3:e5:11:70:
d5:08:d2:c6:a9:de:5d:30:bd:63:e4:cf:38:07:0c:
c4:86:0a:dd:aa:af:48:d0:cf:ac:5e:24:be:13:d1:
b3:57:f8:20:3a:56:2c:40:d7:dd:7d:23:ed:14:3b:
9a:bd:74:d8:8a:03:3b:e9:da:b1:c3:a9:39:b0:98:
da:54:71:0d:cf:6a:a8:7f:bb:11:98:8c:be:64:77:
c7:f8:36:ff:fe:e6:6f:53:e8:f0:af:90:55:51:6f:
72:e4:54:61:39:b4:9c:9b:b3:4b:56:f1:c3:4e:11:
6d:c0:f0:ca:81:b5:96:56:69:73:b1:79:49:81:30:
90:13:5a:93:ce:cc:35:28:dc:e4:3f:95:1a:d9:44:
9c:11:fe:09:3d:6d:42:62:cf:af:99:59:e1:14:62:
38:7f:32:36:2c:36:01:31:e4:70:76:54:fb:87:dd:
7a:b1:86:ff:78:80:dc:5f:73:1f:f2:80:7d:37:06:
ea:c5:dd:ae:6a:57:a6:6f:30:2c:2f:50:c9:06:8a:
34:01:df:2c:49:5f:52:54:89:9c:26:b2:13:91:b5:
84:80:e9:2b:fe:4d:dd:a1:98:90:c8:b5:d5:b4:31:
e9:59:87:d9:3c:c7:73:89:03:a3:45:94:5e:7c:72:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:14:2E:50:C4:27:27:A7:27:A7:62:40:5A:67:59:7D:CD:EA:F3:E3
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/CRQuUMQnJ6cnp2JAWmdZfc3q8-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.106.0/23
Signature Algorithm: sha256WithRSAEncryption
86:15:fb:24:95:06:23:2e:4c:d9:16:59:a0:9f:06:f8:02:24:
51:e1:18:e8:1b:cd:a5:d9:cf:62:d8:53:db:7f:4a:aa:7b:30:
5c:c6:c4:cf:1d:b1:40:0e:16:99:e1:23:c8:cf:02:23:47:08:
45:a1:8b:cb:b1:18:a5:7b:08:bf:53:a2:28:28:6c:58:16:7b:
e3:cf:6a:b4:ac:43:90:4f:65:44:75:2b:d2:0a:9b:01:b6:00:
11:ee:40:79:bc:a4:34:bd:9a:45:6d:5b:79:93:03:1e:d6:11:
b7:9b:bb:2b:97:7c:49:38:5f:ed:1f:75:06:fe:af:13:18:a5:
86:df:54:87:92:63:a1:18:72:d8:cb:60:dc:16:f0:f6:dc:f9:
a7:af:14:04:05:cb:1b:a5:d8:90:ac:57:00:a8:04:03:84:95:
86:dd:24:9f:89:42:19:40:da:c3:9e:ff:94:6e:3a:67:32:a4:
e4:74:6e:e0:83:82:06:c6:57:1a:53:52:93:3b:00:b0:31:1b:
1d:3e:38:e6:7e:65:81:cb:cf:41:13:b7:2a:6f:58:ec:0c:98:
ff:0b:13:8d:55:ba:23:35:4a:3b:3f:60:5b:97:0d:c6:cb:2b:
c8:0f:c1:84:7e:e3:bc:03:60:7f:6c:34:ec:e4:01:78:27:99:
fc:c1:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:08 2024 by rpki-client on console-fra.rpki-client.org