Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f82d76-c339-45cd-9bd2-94b1bbe2f2fc/1/AOPmvnPT0rqz0mCFF-N8z1nJ3eM.roa
File: AOPmvnPT0rqz0mCFF-N8z1nJ3eM.roa (raw, json)
Hash identifier: riBj920lGwlWag2Snp5nm8lGAGllRDNWfbUIYs63Ros=
Subject key identifier: 00:E3:E6:BE:73:D3:D2:BA:B3:D2:60:85:17:E3:7C:CF:59:C9:DD:E3
Certificate issuer: /CN=89fee86b27fb267864eb0f1210831e9b44d98b4f
Certificate serial: 02FAEC55
Authority key identifier: 89:FE:E8:6B:27:FB:26:78:64:EB:0F:12:10:83:1E:9B:44:D9:8B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/if7oayf7Jnhk6w8SEIMem0TZi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f82d76-c339-45cd-9bd2-94b1bbe2f2fc/1/AOPmvnPT0rqz0mCFF-N8z1nJ3eM.roa
Signing time: Sat 01 Jan 2022 15:05:11 +0000
ROA not before: Sat 01 Jan 2022 15:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200738
IP address blocks: 185.170.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49998933 (0x2faec55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89fee86b27fb267864eb0f1210831e9b44d98b4f
Validity
Not Before: Jan 1 15:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00e3e6be73d3d2bab3d2608517e37ccf59c9dde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:37:0e:c8:1c:e3:1b:2c:f4:c7:22:4f:fc:
14:74:d6:b0:be:f2:c3:a8:5e:33:03:04:33:ba:fd:
67:51:92:a6:e4:d5:58:20:05:8e:a8:60:0b:3e:f8:
f0:83:84:af:fc:c2:a8:a2:b3:a0:8d:79:c7:dd:de:
bb:52:75:dd:bd:f3:3e:17:e4:9e:d3:b6:5f:3e:c7:
cb:b0:f9:e7:71:f6:4b:49:fe:1c:f8:2c:f8:8a:bc:
1f:a9:3b:9c:22:f4:55:15:1f:cb:fe:96:29:ad:79:
e5:55:3b:f9:0e:fb:e3:8e:93:d9:b1:d8:02:d7:c2:
b3:84:3a:6e:e5:68:d1:17:d2:56:4c:b0:04:4f:29:
56:a7:cf:9d:08:a2:88:fb:ae:3c:dd:4a:0d:55:72:
f8:7d:dd:6c:70:9f:94:02:a4:34:a8:43:67:ca:f5:
8c:96:e4:10:1c:0b:ae:8f:53:0a:ee:6c:30:e2:41:
23:47:f2:24:e3:26:b3:4a:2d:76:38:a9:2f:fd:a4:
e4:86:4b:ce:05:96:ca:3f:41:19:df:7f:0c:93:f8:
da:9e:38:40:31:09:bc:ca:2a:4d:20:ba:91:d0:23:
ae:0a:73:29:a3:ad:c1:97:e1:ab:cf:e9:11:b2:93:
46:c4:7a:1e:8c:70:7b:17:32:25:89:3a:0e:8d:81:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E3:E6:BE:73:D3:D2:BA:B3:D2:60:85:17:E3:7C:CF:59:C9:DD:E3
X509v3 Authority Key Identifier:
keyid:89:FE:E8:6B:27:FB:26:78:64:EB:0F:12:10:83:1E:9B:44:D9:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if7oayf7Jnhk6w8SEIMem0TZi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f82d76-c339-45cd-9bd2-94b1bbe2f2fc/1/AOPmvnPT0rqz0mCFF-N8z1nJ3eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f82d76-c339-45cd-9bd2-94b1bbe2f2fc/1/if7oayf7Jnhk6w8SEIMem0TZi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:85:9a:7a:cf:b7:8b:03:b9:30:9e:88:be:23:9c:fe:be:4c:
d7:c8:98:81:5e:11:77:a4:cb:3a:3b:ec:37:8f:6d:66:bb:53:
b9:32:b6:24:bf:e4:81:02:be:9a:1c:34:bf:d7:05:69:f6:80:
ba:28:13:1b:1d:ff:28:31:93:3a:23:57:03:1e:bc:15:21:76:
05:00:ed:04:7b:bb:d1:b0:85:ea:e8:3d:45:6a:95:39:3a:26:
f2:82:ce:d2:de:6b:45:b0:7e:66:8f:d6:59:3a:cc:3f:70:76:
87:97:93:6a:b0:2f:f5:03:df:91:1e:50:40:c7:a8:56:f5:5e:
a8:d9:db:03:15:b0:9b:7c:8c:70:33:95:e6:37:c1:48:7d:0f:
d3:46:6f:ab:22:d6:b6:80:16:f1:6d:64:4c:2d:93:67:88:9c:
6d:5f:83:f7:b2:a8:3f:49:5f:81:28:f8:9a:ef:c2:30:15:95:
6b:dd:88:72:26:49:dc:67:94:82:02:31:da:ad:72:d8:96:4c:
84:dd:cd:05:db:ab:2f:93:45:96:a5:27:dd:a4:8f:58:1a:fd:
79:6e:a4:c9:55:1a:69:6e:dd:70:35:63:5c:94:77:8b:89:9c:
99:3c:58:67:10:10:09:bc:c5:85:89:56:66:56:ee:f1:4d:22:
5f:24:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:05 2024 by rpki-client on console-fra.rpki-client.org