Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/ifIiMtoA_aS0Bfo3F1tOk1gG8WA.roa
File: ifIiMtoA_aS0Bfo3F1tOk1gG8WA.roa (raw, json)
Hash identifier: AelI8UB6gg7r5fKtgOkkb+Qe/hp+ufCdiT9YktTJn04=
Subject key identifier: 89:F2:22:32:DA:00:FD:A4:B4:05:FA:37:17:5B:4E:93:58:06:F1:60
Certificate issuer: /CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Certificate serial: 0187971B4D1FD25CEB1822DE159260C983B5
Authority key identifier: CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/ifIiMtoA_aS0Bfo3F1tOk1gG8WA.roa
Signing time: Wed 19 Apr 2023 01:22:41 +0000
ROA not before: Wed 19 Apr 2023 01:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.136.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:97:1b:4d:1f:d2:5c:eb:18:22:de:15:92:60:c9:83:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Validity
Not Before: Apr 19 01:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89f22232da00fda4b405fa37175b4e935806f160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:0a:23:d8:cb:a8:e0:76:bc:77:7d:17:cc:
51:57:fa:4b:9d:f8:4d:7f:dd:62:16:1d:2d:b0:77:
2e:9b:10:2e:65:f0:8e:38:77:aa:f9:d8:c2:81:f3:
4e:1c:da:af:6a:ff:4f:a5:9a:a1:ed:26:21:c0:33:
c5:cc:6e:ca:23:18:29:bc:06:b5:26:15:79:5b:f6:
e5:a7:6b:c3:8e:35:00:0a:a7:77:71:87:07:68:03:
9a:c1:fd:af:30:0b:d3:99:d2:41:5e:38:ef:1f:2c:
2d:2c:13:ea:a0:ff:3e:a1:d3:9a:00:6b:ed:fa:87:
c3:30:27:29:ed:e9:8b:e8:d3:31:44:3b:a9:b1:52:
2a:db:8e:09:e6:c8:9f:bb:0f:ab:4f:56:3a:d8:b3:
7e:98:e5:66:39:b7:f2:e4:aa:9f:86:22:8b:bb:b4:
c0:85:d7:f4:f2:2e:54:8d:43:09:8c:97:ef:a7:c6:
a8:64:1d:ea:00:48:a5:eb:19:25:b6:1f:74:49:d8:
e2:6d:81:5a:97:16:7c:0e:b5:21:95:ee:83:ca:30:
9a:21:76:8b:09:af:d1:3e:8b:e7:c9:83:55:88:7b:
be:fe:de:5d:27:51:a9:f1:1d:31:3a:24:71:4f:c3:
17:b7:02:2f:90:26:20:1c:08:5b:89:9d:84:be:77:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F2:22:32:DA:00:FD:A4:B4:05:FA:37:17:5B:4E:93:58:06:F1:60
X509v3 Authority Key Identifier:
keyid:CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/ifIiMtoA_aS0Bfo3F1tOk1gG8WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:cc:67:59:d9:84:0d:4f:4d:84:cc:05:a8:b8:64:de:f5:d9:
b1:09:11:1f:35:3c:99:b5:f7:c4:47:57:c0:e8:25:af:97:3a:
c4:e9:60:35:96:18:79:69:1b:8d:d9:aa:4e:13:e7:e8:2f:cd:
ad:33:89:3f:1e:ba:83:a4:ce:82:e9:88:20:a2:3c:41:fb:b3:
b9:cb:eb:8e:95:ca:1d:f6:a8:ce:b4:25:fd:c7:41:ea:f2:a2:
02:64:68:da:d7:cc:cb:d0:82:1a:82:f0:f3:f3:6a:08:18:6c:
d3:14:07:43:bb:cc:ac:b1:72:f6:bb:c2:34:9c:54:ef:58:fd:
e9:93:4c:b0:19:05:2e:0f:81:59:72:42:e8:f0:b0:1b:34:98:
36:f4:35:bb:17:ce:82:4e:c5:80:d0:fe:88:52:e7:16:fc:86:
31:71:45:da:60:3a:1e:86:c5:16:0b:14:17:49:e3:d0:75:82:
21:2a:ba:c1:5f:d6:71:a9:b6:07:53:b2:c6:7b:b2:13:58:51:
4b:b4:3b:c0:f8:b1:2a:17:1f:06:d4:99:86:39:36:5c:b4:37:
38:fd:df:ea:30:4c:27:13:59:45:55:05:44:be:1c:6f:c7:37:
60:c6:55:29:90:ea:9a:8c:19:84:85:54:91:18:0a:0e:f6:aa:
71:e1:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:11 2025 by rpki-client