Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/vVg6TtxbEAMUBF2jWGAsO6XqM5I.roa
File: vVg6TtxbEAMUBF2jWGAsO6XqM5I.roa (raw, json)
Hash identifier: 64bHQoxjiSO+wL5lTLJxRRKkMzmzpLtDN6o/ESZuOAY=
Subject key identifier: BD:58:3A:4E:DC:5B:10:03:14:04:5D:A3:58:60:2C:3B:A5:EA:33:92
Certificate issuer: /CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
Certificate serial: 012DC739
Authority key identifier: 14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/vVg6TtxbEAMUBF2jWGAsO6XqM5I.roa
Signing time: Sat 01 Jan 2022 05:03:09 +0000
ROA not before: Sat 01 Jan 2022 05:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.149.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19777337 (0x12dc739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
Validity
Not Before: Jan 1 05:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd583a4edc5b100314045da358602c3ba5ea3392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:2c:bf:45:3c:f6:b0:3e:ac:b7:85:1b:03:
1f:ba:34:c1:25:03:cb:6c:83:9a:fc:ea:51:12:56:
d0:b3:63:49:29:72:1a:88:f4:5a:a3:ed:4a:43:55:
80:31:89:e0:f9:76:9b:c4:3b:87:69:42:c5:b8:5a:
48:a3:d8:2c:47:02:e2:2f:b3:ca:b6:94:56:38:e1:
b4:db:7e:69:38:c7:1f:8c:77:5b:e7:0c:c5:a4:68:
78:41:78:e2:a0:8e:cd:86:2d:fd:58:78:b3:ff:5e:
20:f3:2c:eb:1e:ae:19:56:7f:96:4b:2d:4c:c3:2c:
b7:72:19:d3:b1:63:63:cd:f0:43:b8:b9:0d:7f:68:
ce:95:05:4e:ad:6c:4f:e8:b5:89:6a:c7:05:6c:e2:
f4:b0:48:67:e7:9c:62:04:91:f3:f6:d1:04:a2:a8:
7d:d1:73:3a:69:4f:12:a8:05:b9:ed:91:8a:50:d6:
f1:8c:65:70:c8:38:28:86:70:0a:51:84:a7:6d:c0:
22:ec:72:07:db:61:b5:cb:9f:0b:5a:8d:d9:9e:c4:
40:28:e9:55:55:7b:60:a9:71:24:5a:a4:89:49:25:
6f:2a:66:45:ec:54:4e:3b:10:82:7d:15:2d:a6:0e:
d0:ff:3d:a7:8f:59:79:85:01:22:11:3b:47:af:ae:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:3A:4E:DC:5B:10:03:14:04:5D:A3:58:60:2C:3B:A5:EA:33:92
X509v3 Authority Key Identifier:
keyid:14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/vVg6TtxbEAMUBF2jWGAsO6XqM5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.148.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a9:6d:45:ca:3a:9c:fc:d0:4b:e2:5b:ea:26:e6:78:61:ae:
5e:2e:54:01:4b:60:3b:8a:10:b2:a1:47:02:cd:27:99:65:e6:
6d:96:1d:ef:ab:c6:64:af:99:95:ec:66:b2:1b:18:62:bf:ff:
58:bd:35:1d:53:80:76:4f:7b:7b:f0:6f:25:62:dc:f7:3c:78:
a8:a0:e2:63:df:22:ff:bb:c6:a1:f1:ae:0a:03:1b:16:53:b8:
e3:1a:40:f1:ad:ec:c1:0e:b5:e1:6c:8b:27:c9:17:65:30:f2:
91:dd:da:ee:e7:b8:a0:35:19:e8:94:a2:1c:06:f3:86:c3:a1:
5c:77:df:8b:b1:d1:1f:36:c6:83:64:ea:58:ab:09:13:86:ca:
c4:df:4d:9b:af:7c:1d:30:2a:a4:21:65:92:8e:a3:b3:cc:16:
d4:af:29:ec:33:77:d7:0c:83:e0:a6:c1:65:6c:f8:81:fc:d3:
52:d0:30:d8:b8:73:a6:19:94:69:75:bf:ce:26:20:15:f6:e6:
2f:d1:e0:c7:f6:76:75:7f:d7:6b:53:53:b8:5a:ba:89:1e:80:
52:6e:5c:ad:16:fe:3a:70:56:82:fd:67:32:67:e3:1a:fa:13:
b3:fb:13:78:15:64:2d:b0:71:90:77:2e:2a:b4:4e:20:e5:37:
37:18:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:58 2023 by rpki-client on console-ams.rpki-client.org