Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/P6Z_we9aTQ9uluZxAelS1HhoaPI.roa
File: P6Z_we9aTQ9uluZxAelS1HhoaPI.roa (raw, json)
Hash identifier: 1EV+4s1WHjUnXrVgpDGOWUUmKPJuYOiubeUSr8SXDog=
Subject key identifier: 3F:A6:7F:C1:EF:5A:4D:0F:6E:96:E6:71:01:E9:52:D4:78:68:68:F2
Certificate issuer: /CN=3c653d592d91cbc738c69180186277e8783238af
Certificate serial: 38822D25
Authority key identifier: 3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/P6Z_we9aTQ9uluZxAelS1HhoaPI.roa
Signing time: Sat 01 Jan 2022 10:57:27 +0000
ROA not before: Sat 01 Jan 2022 10:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8227
IP address blocks: 185.23.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948055333 (0x38822d25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c653d592d91cbc738c69180186277e8783238af
Validity
Not Before: Jan 1 10:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fa67fc1ef5a4d0f6e96e67101e952d4786868f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:8c:e3:ba:50:21:30:c2:62:c8:2b:af:74:
da:89:92:b7:2e:22:3c:b0:de:53:f9:bc:68:97:33:
ad:ca:43:48:68:0c:60:86:a0:8b:e4:f1:23:83:06:
3f:80:f0:92:62:90:90:43:69:0e:57:b6:8d:e7:10:
0a:a7:3d:98:94:c6:b0:b9:31:5f:0c:f8:bf:5d:7a:
b2:ec:2c:b3:d5:f8:1f:ac:14:61:20:02:9b:ba:d2:
88:a2:79:c7:1d:23:4a:97:c5:28:55:72:c3:49:d1:
dd:48:a0:a7:d7:f4:3a:7c:69:75:71:b1:62:79:1f:
8b:ac:84:f9:28:71:8e:dc:92:dc:5d:71:9b:8b:a8:
07:11:f5:73:8e:15:a4:7f:cb:c1:4d:58:d5:95:f1:
36:76:b9:b2:7a:00:4f:2a:d9:5a:86:7c:f2:49:d8:
c5:89:61:49:e3:7d:83:f9:a3:12:d5:ab:df:c9:f6:
4c:1d:f1:59:a8:99:ad:1a:c2:6b:b2:23:f1:ca:88:
7e:86:46:0e:09:f4:48:b4:5a:76:e4:84:cb:8c:65:
c4:80:48:3f:5b:e0:27:72:16:bd:c8:a5:61:ed:0f:
00:ca:53:d4:70:2f:c7:1c:ba:b7:97:29:20:c9:49:
93:c6:e4:4f:63:7b:6d:05:aa:6c:cb:d8:2c:a9:5f:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:7F:C1:EF:5A:4D:0F:6E:96:E6:71:01:E9:52:D4:78:68:68:F2
X509v3 Authority Key Identifier:
keyid:3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/P6Z_we9aTQ9uluZxAelS1HhoaPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.244.0/22
Signature Algorithm: sha256WithRSAEncryption
25:f1:19:f0:eb:19:2d:59:97:46:da:1a:7a:3a:a2:a2:ee:7f:
7b:bc:bd:57:5e:f8:2a:9c:d3:74:df:07:4b:e5:d1:8a:bd:d4:
21:f0:68:2a:e6:a9:76:67:29:a4:b6:cb:51:2c:1a:f3:92:74:
72:27:bb:48:d7:36:ab:b2:74:d0:e6:c3:8d:78:d7:6a:a9:f5:
de:11:2b:db:52:84:04:d7:2e:79:9f:02:7a:d6:64:3d:a1:6a:
46:9c:ad:db:8f:4c:2d:67:1e:ae:4b:3e:87:1d:c5:f9:5e:ef:
e2:72:c1:a0:c6:bc:82:3e:ea:24:bd:09:a5:e1:9b:f9:8b:16:
e5:d1:44:35:a4:6c:ea:e8:31:94:eb:39:55:9f:ff:d6:03:59:
6e:43:60:75:c3:30:db:4d:3d:44:b5:28:94:eb:02:2f:44:c6:
53:82:06:f5:56:ca:b3:f2:9a:0d:96:fe:24:7a:dc:bf:3c:90:
8c:b3:ab:01:2a:12:f6:cf:65:76:a4:5e:43:ad:56:fa:b0:8b:
aa:1b:fe:8f:96:31:e6:b1:0d:ff:49:db:7b:92:75:30:c8:d9:
fe:3a:45:c1:73:46:a2:c6:5b:42:64:a3:9d:07:d6:43:fc:58:
95:6e:95:e4:f9:bd:d6:72:99:d9:29:35:79:5d:74:69:34:5f:
54:a5:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:18 2024 by rpki-client on console-ams.rpki-client.org