Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/z7PPMfJz4b65Px83RQYVVBsvKQY.roa
File: z7PPMfJz4b65Px83RQYVVBsvKQY.roa (raw, json)
Hash identifier: 6GCxxClABDCzmHmEnIschPALLpgSyPsdrbOkZaEGfgM=
Subject key identifier: CF:B3:CF:31:F2:73:E1:BE:B9:3F:1F:37:45:06:15:54:1B:2F:29:06
Certificate issuer: /CN=e0ca7d33285adb742950087f2e765922ff3edfce
Certificate serial: 01856ECB7BF9E59AB48804886B4E24B624BB
Authority key identifier: E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp9Myha23QpUAh_LnZZIv8-384.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/z7PPMfJz4b65Px83RQYVVBsvKQY.roa
Signing time: Sun 01 Jan 2023 19:25:07 +0000
ROA not before: Sun 01 Jan 2023 19:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203726
IP address blocks: 185.231.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:7b:f9:e5:9a:b4:88:04:88:6b:4e:24:b6:24:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca7d33285adb742950087f2e765922ff3edfce
Validity
Not Before: Jan 1 19:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfb3cf31f273e1beb93f1f37450615541b2f2906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9c:8a:84:76:c2:d9:7b:e8:8d:7b:51:bf:2f:
d9:3b:ef:61:e5:e7:4f:78:c2:38:b5:34:fb:d7:ae:
b5:bf:15:14:05:a7:09:37:e3:b7:b8:8e:04:d8:83:
b6:b5:24:5f:1c:a8:cb:fa:d9:7b:57:e2:23:f4:aa:
c4:29:1b:2a:6d:3a:14:27:4a:bf:da:17:53:e9:7b:
60:03:cd:b6:5d:5e:af:e0:92:1a:ea:04:11:0e:77:
32:34:14:54:72:d8:71:49:86:d6:8f:32:d2:20:7c:
17:aa:46:d0:29:a5:80:1e:06:fe:55:fa:2d:78:90:
6a:0d:a2:66:24:e4:45:1e:ba:6f:e2:e2:02:54:82:
4d:67:bb:e7:00:5f:5e:09:7a:eb:43:44:b6:17:96:
f0:63:80:d7:e0:c1:d5:cb:ec:cd:8e:7d:29:aa:bc:
71:66:a2:d8:bf:ca:9d:36:24:a1:0a:f1:2d:59:0c:
94:73:df:eb:e8:67:e4:60:45:8b:0c:75:0a:83:ce:
c9:61:2c:90:a8:39:96:2f:a4:56:39:2a:af:80:aa:
a6:30:fa:76:9f:67:c1:f9:1c:97:5a:8d:c9:e9:7a:
ca:ea:e5:b8:71:6c:00:1d:c1:c5:32:e3:8b:f3:e6:
ae:19:57:a2:df:27:5c:fa:b8:d3:d9:d8:83:93:ba:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:CF:31:F2:73:E1:BE:B9:3F:1F:37:45:06:15:54:1B:2F:29:06
X509v3 Authority Key Identifier:
keyid:E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp9Myha23QpUAh_LnZZIv8-384.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/z7PPMfJz4b65Px83RQYVVBsvKQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/4Mp9Myha23QpUAh_LnZZIv8-384.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.36.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:8c:2d:df:c6:17:fd:56:40:c0:fb:bc:12:2d:a8:8d:b4:5f:
1a:98:e2:58:e2:9d:1b:7c:38:63:dc:f1:4f:17:e2:80:1b:75:
33:9c:6f:a8:8e:a9:40:64:86:5c:1b:0c:6a:9c:bc:db:ac:4b:
05:fe:7f:83:5a:47:56:f7:ec:24:77:87:5f:86:7f:01:43:ec:
5e:ea:0b:d6:fd:82:e5:c3:e0:86:0a:00:3b:5d:79:3d:b9:89:
9e:fa:67:0e:0a:a2:fa:be:8c:01:c5:92:7e:6a:75:af:40:d0:
9d:4a:79:b8:e1:9d:27:be:22:09:1a:9d:ff:29:c6:85:97:6f:
b7:15:cb:e1:f4:bf:75:1c:fb:65:45:ba:df:24:93:f1:93:ff:
d0:9a:77:ec:c2:39:73:c9:ae:a4:c7:3c:f3:2c:32:ca:51:e2:
24:e4:be:a9:03:42:0f:39:42:21:55:c3:cb:a7:d1:f8:77:b7:
34:36:e3:99:f1:ca:44:ce:5e:0f:4c:da:50:e7:22:3e:82:65:
75:f1:3d:7b:0b:1e:f6:17:7f:48:e7:4c:fc:6e:5b:a7:33:e3:
ce:86:03:35:fb:c3:1a:ed:26:a8:dd:aa:4f:d8:f2:32:43:4e:
78:72:fa:6c:cf:5e:94:06:20:83:a2:88:41:8b:86:ab:46:9e:
99:be:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:24 2023 by rpki-client on console-ams.rpki-client.org