Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/jXJgZFJgds_btHcX4JUAMFNHoqs.roa
File: jXJgZFJgds_btHcX4JUAMFNHoqs.roa (raw, json)
Hash identifier: lZ05pIJqSasZv6yqUobVz4l6AQWlN3DzvuS3oCyErls=
Subject key identifier: 8D:72:60:64:52:60:76:CF:DB:B4:77:17:E0:95:00:30:53:47:A2:AB
Certificate issuer: /CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
Certificate serial: 9004DD
Authority key identifier: E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/jXJgZFJgds_btHcX4JUAMFNHoqs.roa
Signing time: Sat 01 Jan 2022 01:55:54 +0000
ROA not before: Sat 01 Jan 2022 01:55:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394337
IP address blocks: 185.188.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9438429 (0x9004dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
Validity
Not Before: Jan 1 01:55:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d726064526076cfdbb47717e09500305347a2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:4b:14:e1:d0:04:41:60:26:39:29:97:5d:
15:ba:d3:a3:cc:37:9b:75:fe:57:b8:dc:61:1c:8e:
7b:c2:16:d2:7d:a2:36:ab:74:81:b5:69:51:1e:bf:
fb:e4:8b:44:ca:43:fb:6a:75:6e:78:1d:8c:4a:22:
59:c3:ca:9c:6d:90:a9:70:69:7b:57:f8:cd:5b:5f:
e9:ba:2e:81:e6:b8:a4:90:e7:62:48:9c:41:13:5d:
42:fc:25:0d:39:2a:a7:0c:c0:6e:9e:e0:88:34:82:
e6:70:0d:4d:af:ca:35:18:ba:70:26:ce:a3:07:2a:
19:90:d3:ac:ab:eb:16:5d:5c:4a:cb:d6:5d:8d:f9:
53:05:05:7d:e8:1a:7c:27:05:2a:bb:5e:3f:51:15:
76:39:39:05:7b:a6:bc:92:a5:c9:89:d2:81:74:24:
8a:05:7a:0d:dd:cd:74:54:28:52:27:e9:6a:e9:40:
65:87:44:0e:fd:40:81:ef:6b:96:90:3a:5a:77:cf:
2b:66:7f:2d:d2:34:1e:e7:2f:34:37:8e:00:71:15:
72:e1:b9:1a:47:74:59:1d:4c:25:f3:f8:66:2b:29:
7b:e6:3e:5d:ec:d6:38:db:b9:62:2c:fb:b4:06:b0:
3d:a7:90:e4:28:46:80:b4:92:2e:2c:1b:57:7c:75:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:72:60:64:52:60:76:CF:DB:B4:77:17:E0:95:00:30:53:47:A2:AB
X509v3 Authority Key Identifier:
keyid:E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/jXJgZFJgds_btHcX4JUAMFNHoqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.28.0/22
Signature Algorithm: sha256WithRSAEncryption
34:ed:32:a5:8a:4e:8c:22:6c:e2:e3:b2:ac:f7:35:34:ae:28:
e7:77:98:91:59:85:b1:03:1d:43:10:73:41:0e:a9:f7:58:2e:
65:45:bb:6d:08:e1:75:93:a3:b7:02:e6:cd:87:a6:a5:37:61:
b8:1c:d3:bb:27:2d:fb:78:5e:9a:1e:e1:04:ad:28:5c:09:87:
e4:47:dc:f4:ab:d4:df:53:32:c4:68:51:48:4f:7d:e8:3f:09:
b9:61:d0:26:08:63:3a:f4:e4:84:29:2a:a3:62:26:87:d2:ae:
9c:2c:82:c5:92:01:17:f2:70:f3:32:99:f3:7e:1b:6b:bb:0a:
03:12:c0:11:8c:c6:08:8f:05:e1:4d:77:40:ba:59:ba:bd:fc:
47:49:69:40:d3:e8:57:1f:a7:f8:98:50:2b:62:a2:da:54:96:
58:a9:1b:5d:14:9c:fd:eb:b3:cc:16:6f:6c:20:0d:ed:f7:c4:
70:39:3b:ca:04:5c:8d:0b:b0:ba:a4:3a:05:49:dd:27:bd:89:
7e:e3:6e:c9:cf:35:ee:43:d8:1d:df:2b:d4:61:ff:a5:6f:07:
bd:4c:2a:0a:4b:ec:86:fb:34:e4:1c:1d:19:0d:0f:e4:42:be:
77:f0:69:d5:63:4a:7a:75:eb:81:64:35:12:af:f5:39:86:33:
50:aa:91:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:11 2024 by rpki-client on console-ams.rpki-client.org