Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/w8EVloWTKiaU84qI7u2f28QaotM.roa
File: w8EVloWTKiaU84qI7u2f28QaotM.roa (raw, json)
Hash identifier: G6roLUQ889WGWPj93YfjGO7a0bOw0Gd6ln/ULIXQFsI=
Subject key identifier: C3:C1:15:96:85:93:2A:26:94:F3:8A:88:EE:ED:9F:DB:C4:1A:A2:D3
Certificate issuer: /CN=4c0dad1bf18215a2fa808691a7bc5f9e702f99e2
Certificate serial: 01878A5D480157EEF88D70D7633B5D2D1AB7
Authority key identifier: 4C:0D:AD:1B:F1:82:15:A2:FA:80:86:91:A7:BC:5F:9E:70:2F:99:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TA2tG_GCFaL6gIaRp7xfnnAvmeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/w8EVloWTKiaU84qI7u2f28QaotM.roa
Signing time: Sun 16 Apr 2023 13:59:41 +0000
ROA not before: Sun 16 Apr 2023 13:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207607
IP address blocks: 185.115.204.0/24 maxlen: 24
2a12:f280::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8a:5d:48:01:57:ee:f8:8d:70:d7:63:3b:5d:2d:1a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0dad1bf18215a2fa808691a7bc5f9e702f99e2
Validity
Not Before: Apr 16 13:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3c1159685932a2694f38a88eeed9fdbc41aa2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:17:cb:af:34:d0:33:b0:58:35:69:bf:b8:
a6:0f:53:77:9c:7d:39:57:a0:15:88:60:e7:c4:a6:
44:45:1c:cd:4d:d3:10:a8:5c:97:08:09:ad:9d:2b:
35:3a:7a:b9:ee:f0:32:38:00:a7:ed:b3:1d:4e:d6:
53:2a:48:e8:21:d4:3f:1a:3c:02:9d:75:48:3c:67:
3f:83:27:85:7b:1e:fa:1c:02:ad:2b:0b:76:4a:57:
dd:fd:61:d5:e9:fd:fe:e9:a2:a2:01:5d:2f:3c:7d:
69:b4:13:08:22:1b:10:bc:7f:10:b8:66:a6:48:bd:
a5:08:68:eb:c2:23:7e:73:58:4e:45:1b:db:9e:77:
1d:34:78:0d:c7:28:a1:73:c2:c5:e0:a6:24:ae:b4:
5a:71:f3:b3:e3:4d:0a:c5:83:35:ad:0b:e6:2b:82:
e6:78:87:30:44:03:c7:b3:a1:38:65:58:c8:11:f8:
58:cb:ad:df:0e:7d:84:d4:88:7b:9e:84:5c:fb:e8:
48:c1:39:f1:a5:ec:b9:1b:52:66:61:5b:75:29:25:
1d:b5:6a:e8:42:d7:ea:71:3a:85:bf:32:c3:f2:d6:
a0:ee:07:8c:8b:7f:17:85:90:c7:65:47:94:ba:8a:
1d:eb:99:1b:94:ff:f9:7e:14:85:32:be:ac:1b:c9:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C1:15:96:85:93:2A:26:94:F3:8A:88:EE:ED:9F:DB:C4:1A:A2:D3
X509v3 Authority Key Identifier:
keyid:4C:0D:AD:1B:F1:82:15:A2:FA:80:86:91:A7:BC:5F:9E:70:2F:99:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TA2tG_GCFaL6gIaRp7xfnnAvmeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/w8EVloWTKiaU84qI7u2f28QaotM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/TA2tG_GCFaL6gIaRp7xfnnAvmeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.204.0/24
IPv6:
2a12:f280::/29
Signature Algorithm: sha256WithRSAEncryption
11:c2:16:24:70:e0:81:88:e4:f4:82:a3:51:52:48:1f:6a:9c:
53:5d:47:6b:89:fa:d2:c0:97:f2:82:4e:c6:9f:97:d0:13:99:
37:d7:54:70:d1:ab:0b:1b:6a:93:c4:a1:13:e5:e6:2f:5d:25:
b5:94:03:0a:a4:39:5e:ff:0c:94:2a:f8:6c:39:d5:3d:5c:d6:
58:b0:e7:5b:86:47:f8:5d:2c:fa:87:f2:d1:bf:aa:53:57:a5:
eb:50:be:e9:b9:d1:22:e6:00:93:8d:ed:96:b3:3f:e8:4b:d9:
34:67:59:78:2b:8d:cd:b3:f5:b6:a2:3e:c4:40:cd:10:d2:a7:
3f:d6:78:80:9a:dc:2d:f6:ca:70:83:90:ca:5e:76:bb:f7:af:
55:ce:7f:b1:fb:3c:7d:12:06:0e:49:f2:20:b0:a6:76:92:83:
f3:8f:d5:ee:33:96:b3:cf:53:e4:a8:df:a2:be:83:88:ae:13:
25:b0:94:8a:26:8e:9c:54:c2:3a:5f:5c:ad:0b:a6:73:18:27:
57:f2:f0:f6:18:6e:0b:72:88:ec:5d:e5:48:0b:59:01:39:68:
90:1a:f4:4e:74:8c:4d:33:b7:94:e0:49:97:b6:52:c0:a0:0e:
af:63:cf:12:f9:a7:59:19:b8:7d:58:6f:42:95:dd:db:78:0e:
36:9e:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:08 2024 by rpki-client on console-fra.rpki-client.org