Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/UR9TEef280M5PP2VVAqZn0aAkCs.roa
File: UR9TEef280M5PP2VVAqZn0aAkCs.roa (raw, json)
Hash identifier: 2jlYhla8e+PHfkiG5OT7Gw6kga80uaHg/XomO7yvf9o=
Subject key identifier: 51:1F:53:11:E7:F6:F3:43:39:3C:FD:95:54:0A:99:9F:46:80:90:2B
Certificate issuer: /CN=e0ca7d33285adb742950087f2e765922ff3edfce
Certificate serial: 05452D81
Authority key identifier: E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp9Myha23QpUAh_LnZZIv8-384.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/UR9TEef280M5PP2VVAqZn0aAkCs.roa
Signing time: Sat 01 Jan 2022 15:02:44 +0000
ROA not before: Sat 01 Jan 2022 15:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203726
IP address blocks: 185.231.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88419713 (0x5452d81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca7d33285adb742950087f2e765922ff3edfce
Validity
Not Before: Jan 1 15:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=511f5311e7f6f343393cfd95540a999f4680902b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:94:1f:ed:19:e8:9c:69:0d:87:a9:77:71:
74:c9:18:ae:34:ac:1f:d6:c3:d8:de:77:e7:9c:96:
fd:71:2e:d0:c5:68:10:3b:dc:cb:91:73:a8:eb:6c:
e9:d3:df:73:54:06:0c:ea:2d:b3:c3:e6:25:12:2c:
5c:31:1a:12:ae:78:ff:8c:df:0a:ac:b3:4f:72:14:
f0:33:5e:a6:6b:37:0f:1c:f8:b3:fe:85:6e:70:11:
5c:ee:e0:19:8b:b4:19:12:7c:e7:4b:f7:a3:00:24:
83:5a:68:aa:93:f4:8f:9c:79:38:09:c7:c8:4e:57:
ae:10:04:47:94:15:bf:96:c3:c5:7b:4b:23:d0:a2:
35:21:a9:3f:ea:14:44:0b:f1:a0:00:0b:7c:dd:6d:
2e:45:8e:e6:52:92:72:8b:02:1d:6b:8e:a9:9a:61:
ff:6a:6e:20:53:30:81:50:25:17:e6:99:6e:65:a9:
90:bb:b3:af:cf:58:5a:8d:5d:83:53:93:37:b7:b8:
57:2c:da:2c:f7:67:65:54:55:b3:e8:8b:8b:f3:98:
f7:cf:eb:42:f6:dd:75:d9:69:f4:0d:1a:f0:77:68:
2f:c2:ec:27:d7:f9:d9:51:ba:2a:fa:25:fb:e3:84:
1e:f6:d4:7d:7e:bb:c9:a8:2d:5d:9b:c5:b7:5c:c3:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1F:53:11:E7:F6:F3:43:39:3C:FD:95:54:0A:99:9F:46:80:90:2B
X509v3 Authority Key Identifier:
keyid:E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp9Myha23QpUAh_LnZZIv8-384.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/UR9TEef280M5PP2VVAqZn0aAkCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/4Mp9Myha23QpUAh_LnZZIv8-384.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.36.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:0d:ee:d3:91:60:f9:38:39:98:09:21:de:54:54:90:6e:ea:
51:a5:72:9a:ec:0b:52:89:33:76:bf:c2:91:aa:2f:52:00:65:
75:b6:20:ab:af:4e:b9:3b:20:fc:cc:76:eb:76:ce:3e:0d:cd:
77:25:e0:53:e4:ef:c4:d8:de:ac:63:8d:8b:a0:db:17:f6:aa:
47:03:91:ce:0b:75:06:37:8d:0f:36:c2:dc:04:2d:1e:4d:ab:
ae:1b:85:c2:51:fe:c1:77:6c:34:e7:6b:cc:fe:4e:d5:d0:ad:
d1:b6:66:21:ad:e8:fc:2a:ad:96:ff:7f:a3:ae:e4:ef:3f:14:
a7:9b:02:7a:b9:b6:a6:b3:07:ed:40:8e:db:83:eb:67:2d:bd:
14:c1:f6:d8:f8:1d:1a:7e:e6:e5:5d:03:86:54:32:14:c8:f8:
f9:4a:21:8e:47:9f:c8:d9:85:9d:bb:27:c5:35:ab:f0:a1:e3:
26:47:78:44:1c:f0:e2:b0:68:5a:21:68:07:f0:7b:5d:d8:1f:
82:cd:7f:b5:7c:9b:bb:ef:c3:0c:3c:4f:52:6b:21:c3:86:6e:
3e:24:c3:79:f3:f6:6d:db:b8:7b:87:28:33:1f:ec:c8:20:c6:
51:bd:4b:3b:ab:aa:35:bb:b4:ea:d4:98:aa:b1:dc:73:e8:9c:
b5:78:ba:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:33 2024 by rpki-client on console-ams.rpki-client.org