Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/848d17-4804-4069-8274-abb686790c28/1/JSdR6LdO4GCDGs8DQtx_SbZqtFA.roa
File: JSdR6LdO4GCDGs8DQtx_SbZqtFA.roa (raw, json)
Hash identifier: 5WtAuyfS7q0IrmKeHbLrrYg6TKdLUXMl5HgPPlelpVs=
Subject key identifier: 25:27:51:E8:B7:4E:E0:60:83:1A:CF:03:42:DC:7F:49:B6:6A:B4:50
Certificate issuer: /CN=464bca6cb69f210bc2948fc2e435bc219a70a718
Certificate serial: 018442940938413D99931B9E4A5BDBC9DB35
Authority key identifier: 46:4B:CA:6C:B6:9F:21:0B:C2:94:8F:C2:E4:35:BC:21:9A:70:A7:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkvKbLafIQvClI_C5DW8IZpwpxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/848d17-4804-4069-8274-abb686790c28/1/JSdR6LdO4GCDGs8DQtx_SbZqtFA.roa
Signing time: Fri 04 Nov 2022 12:18:28 +0000
ROA not before: Fri 04 Nov 2022 12:18:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44654
IP address blocks: 185.196.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:94:09:38:41:3d:99:93:1b:9e:4a:5b:db:c9:db:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464bca6cb69f210bc2948fc2e435bc219a70a718
Validity
Not Before: Nov 4 12:18:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=252751e8b74ee060831acf0342dc7f49b66ab450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:89:78:82:5c:20:24:97:df:0e:c0:c5:af:
a1:03:e3:73:68:a9:47:da:06:76:f6:bc:93:3f:e2:
d2:fd:1d:0f:cc:33:18:c8:cf:90:ea:6e:d7:91:dd:
8a:15:21:0c:1d:c4:4c:c4:32:33:2e:be:80:42:a1:
0c:45:89:98:3d:3c:d2:34:e4:1f:90:23:cc:00:a7:
1f:26:ee:6f:0f:ae:2e:5e:83:bf:06:57:e0:9b:a3:
45:e7:05:97:93:82:1c:d0:61:f2:e2:f9:c0:f8:96:
e0:94:2a:3b:bb:e3:1c:9d:10:f2:b8:74:44:ff:25:
e9:44:c4:9d:14:78:5a:4d:80:46:fe:e8:a0:22:4f:
2c:cd:be:1f:ac:06:df:d2:18:54:85:3b:04:85:2a:
1a:67:24:be:08:11:ad:65:51:a4:ea:f8:7d:9a:21:
d8:59:77:ad:63:89:c3:85:70:88:e2:09:7d:a1:16:
3f:ef:27:33:e2:b8:f0:c1:ef:1d:ec:56:5a:cd:76:
b6:19:d7:d2:71:eb:4a:8f:13:dc:6a:fe:91:29:82:
47:1a:a0:06:d4:64:d4:70:19:7e:13:af:4e:85:26:
e0:54:8b:b1:73:02:29:70:07:7c:c7:3c:97:4a:0a:
3f:d4:3c:32:60:2d:2e:4e:12:6f:a7:12:a3:c0:cd:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:27:51:E8:B7:4E:E0:60:83:1A:CF:03:42:DC:7F:49:B6:6A:B4:50
X509v3 Authority Key Identifier:
keyid:46:4B:CA:6C:B6:9F:21:0B:C2:94:8F:C2:E4:35:BC:21:9A:70:A7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkvKbLafIQvClI_C5DW8IZpwpxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/848d17-4804-4069-8274-abb686790c28/1/JSdR6LdO4GCDGs8DQtx_SbZqtFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/848d17-4804-4069-8274-abb686790c28/1/RkvKbLafIQvClI_C5DW8IZpwpxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.88.0/22
Signature Algorithm: sha256WithRSAEncryption
13:f9:06:eb:9c:b0:1d:36:58:d5:9d:59:c2:ef:db:a0:3f:ff:
30:e2:34:f6:76:5b:a3:63:d7:83:46:f0:c9:31:fe:94:a0:8c:
30:cf:77:bd:1d:17:07:e2:d4:57:7e:6e:39:a2:57:2d:ef:d8:
65:2c:e9:76:ef:b4:91:f4:e4:ef:af:b6:cf:4b:9f:ce:4b:d1:
bd:0a:ac:00:1c:10:90:fe:f6:cf:aa:14:ec:3e:9e:0b:a2:a3:
c5:d4:b4:38:c6:56:10:f7:b3:0b:ab:b0:3e:97:cf:4e:02:31:
ed:45:c7:31:c0:df:07:bf:f7:a6:36:f9:41:55:95:1c:ab:b9:
4e:4a:a5:0c:06:06:e3:6d:29:43:47:c7:b2:1f:17:1b:00:94:
b8:fb:51:28:ff:a5:1f:c6:f5:9f:bf:2b:53:d8:8b:be:34:6f:
bc:f2:20:5e:39:9f:1f:c9:fe:61:e4:02:7b:bc:f0:e0:69:9a:
ab:31:4c:f7:3f:36:94:d1:d7:42:61:ad:b9:41:57:8b:e1:a0:
aa:ab:d6:9a:ac:db:17:62:33:09:e4:dc:80:ad:fa:81:39:5a:
ab:28:68:15:8e:af:a7:f4:03:d8:51:d5:7a:31:bf:cb:0b:09:
33:7b:00:0b:d5:46:3b:7a:85:07:ff:6f:63:9b:06:b3:0b:db:
54:c3:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org