Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/maLREyanRKopYsnNxQNanOj1o2U.roa
File: maLREyanRKopYsnNxQNanOj1o2U.roa (raw, json)
Hash identifier: Mg2T1pxZqtmyl/kLL/g89gPZSZX3sfrFdTcup6F6BU0=
Subject key identifier: 99:A2:D1:13:26:A7:44:AA:29:62:C9:CD:C5:03:5A:9C:E8:F5:A3:65
Certificate issuer: /CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
Certificate serial: 01869DEAE709FE95A10DFE2D95BBA6CE7A3E
Authority key identifier: 14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/maLREyanRKopYsnNxQNanOj1o2U.roa
Signing time: Wed 01 Mar 2023 16:04:22 +0000
ROA not before: Wed 01 Mar 2023 16:04:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200010
IP address blocks: 185.149.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:ea:e7:09:fe:95:a1:0d:fe:2d:95:bb:a6:ce:7a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
Validity
Not Before: Mar 1 16:04:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99a2d11326a744aa2962c9cdc5035a9ce8f5a365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:77:9e:ca:3f:d3:fa:52:2a:fe:2c:49:e4:
f3:30:7b:05:92:dd:e4:bf:3b:9c:49:12:21:46:37:
30:71:ec:61:c8:e4:9f:1b:a5:be:b9:d3:9f:a6:39:
c4:a3:f8:50:0d:ed:23:dc:ae:9b:1b:50:95:a6:c9:
d9:74:db:e2:e8:52:80:6a:c7:f7:d6:19:e2:36:58:
ba:94:34:35:49:cb:c8:fa:96:82:a3:c5:56:58:0f:
36:37:6f:cc:9c:36:c1:40:c3:47:47:62:3a:91:de:
47:25:b8:68:0c:11:62:df:de:e8:63:5b:26:c3:86:
2d:53:49:f6:9f:1a:5d:57:fd:07:fb:ff:91:1a:3f:
5d:95:2c:08:dc:4c:bb:73:d9:e2:01:e0:13:03:ad:
8b:c1:06:45:9a:ce:71:92:20:43:27:a0:88:f1:40:
71:27:a3:ff:e8:dc:c4:ab:95:22:03:d5:4f:4d:f1:
2c:4a:e6:7b:cb:7f:83:a7:9e:db:d6:3d:11:18:e6:
6a:7a:85:5e:9b:d7:5c:ef:60:30:2a:db:49:c8:ff:
37:57:76:79:24:e3:1d:0e:c6:29:e4:04:47:18:2f:
ae:49:d3:17:a0:f5:d1:92:b5:19:03:09:63:f0:2e:
7d:54:aa:6f:5a:8c:12:cf:0f:49:81:55:24:10:a0:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A2:D1:13:26:A7:44:AA:29:62:C9:CD:C5:03:5A:9C:E8:F5:A3:65
X509v3 Authority Key Identifier:
keyid:14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/maLREyanRKopYsnNxQNanOj1o2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:70:62:7b:69:33:c7:06:c9:10:10:3e:ad:b3:bc:9d:c7:2e:
b1:a0:b8:7b:69:e9:8d:e0:e0:cd:4f:af:4f:b0:d3:6d:5a:bb:
8b:72:64:aa:2a:0d:3e:81:54:d3:13:f2:40:04:c9:a7:5d:82:
a5:4b:94:e1:c4:1b:1c:93:7e:08:1c:98:cb:6c:93:af:cd:78:
2e:46:11:16:3d:6b:65:e8:cf:c4:51:d6:a3:35:74:64:39:05:
db:ce:73:b0:18:68:f8:55:fb:4a:b3:15:4d:82:d6:b0:54:7b:
49:73:f8:d2:4f:cb:27:77:ae:e3:3a:e8:f2:73:39:7b:57:c5:
ac:59:81:a7:58:12:ce:45:a5:11:30:a0:76:e0:3b:f9:ad:04:
99:fc:66:3e:95:16:87:fd:ca:32:f2:a4:ec:89:81:eb:22:ca:
89:69:56:37:6e:65:f9:dc:71:be:57:ee:91:11:65:7a:d6:dd:
1a:72:f0:7d:40:8b:79:05:9c:b3:c3:9f:68:67:cf:28:22:4a:
49:f2:ff:cd:0b:2e:f9:52:f0:fd:91:48:4e:a4:51:21:7a:ec:
a1:67:35:65:2d:a7:18:a0:21:8a:fa:b0:a6:cb:42:d2:0c:f9:
e3:e7:af:e8:ef:37:4d:59:8a:09:7b:87:08:1d:04:1e:60:51:
0b:ee:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:53 2024 by rpki-client on console-ams.rpki-client.org