Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/n1_XsSWu0O01boqrftt3Tj5kW-Q.roa
File: n1_XsSWu0O01boqrftt3Tj5kW-Q.roa (raw, json)
Hash identifier: kHe3LvMm1Q+9trR/P6altk1cVJjrdVHK8aEDEcoM24o=
Subject key identifier: 9F:5F:D7:B1:25:AE:D0:ED:35:6E:8A:AB:7E:DB:77:4E:3E:64:5B:E4
Certificate issuer: /CN=bead22d530ad2e5fa8a5124bd05a803c1876accd
Certificate serial: 0ADDED48
Authority key identifier: BE:AD:22:D5:30:AD:2E:5F:A8:A5:12:4B:D0:5A:80:3C:18:76:AC:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vq0i1TCtLl-opRJL0FqAPBh2rM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/n1_XsSWu0O01boqrftt3Tj5kW-Q.roa
Signing time: Sat 01 Jan 2022 00:55:23 +0000
ROA not before: Sat 01 Jan 2022 00:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198252
IP address blocks: 185.173.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182316360 (0xadded48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bead22d530ad2e5fa8a5124bd05a803c1876accd
Validity
Not Before: Jan 1 00:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f5fd7b125aed0ed356e8aab7edb774e3e645be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:2f:74:fe:59:74:70:3d:5c:ae:76:a0:12:
a1:84:03:b1:8e:71:83:d7:e7:a1:0c:b7:77:61:21:
7d:73:39:99:00:13:9c:78:a6:3b:fb:7e:95:d0:c5:
da:24:11:77:2e:e4:b9:f0:f6:c0:25:b1:04:5e:72:
a6:23:69:be:a7:d2:69:fd:b7:58:18:fe:cb:91:b8:
54:46:02:ce:a0:6c:7a:59:4a:a5:c0:33:15:8a:58:
f8:ab:bf:32:60:72:c7:ca:ba:62:9f:0c:01:fe:4c:
a5:89:9e:ba:c2:56:29:b4:d2:a8:8b:df:d8:a9:14:
a7:08:86:8f:f7:44:1c:67:a4:f1:2a:b3:d7:28:24:
c8:4e:05:a5:e9:36:c6:5c:d5:ff:1a:da:7a:53:33:
fe:e4:98:cb:27:76:a2:95:3f:2f:79:a2:4e:9d:8a:
77:13:a6:6b:ab:f0:81:30:23:e2:e9:db:15:eb:c3:
78:c0:f5:0e:c3:55:db:b8:ce:4c:c4:21:e0:f7:95:
52:e3:87:a9:6f:ef:4f:a8:4b:b4:ae:dd:e1:13:2a:
e7:0e:2b:62:a4:25:cd:87:a5:05:13:8c:34:4e:9f:
15:a8:91:0f:67:97:22:bf:76:6f:ee:74:47:bb:79:
a2:e1:82:53:f5:85:a3:97:28:53:33:89:b2:68:ec:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5F:D7:B1:25:AE:D0:ED:35:6E:8A:AB:7E:DB:77:4E:3E:64:5B:E4
X509v3 Authority Key Identifier:
keyid:BE:AD:22:D5:30:AD:2E:5F:A8:A5:12:4B:D0:5A:80:3C:18:76:AC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vq0i1TCtLl-opRJL0FqAPBh2rM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/n1_XsSWu0O01boqrftt3Tj5kW-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/vq0i1TCtLl-opRJL0FqAPBh2rM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:6f:3e:d3:c9:bb:44:22:c7:8a:14:84:86:c7:c2:13:f2:26:
4d:5d:16:84:24:9c:5d:44:af:37:cc:45:cc:00:7c:46:62:67:
b1:a2:2f:0f:19:37:10:1a:2b:70:e9:80:f0:05:37:67:44:80:
ae:ac:01:ef:c9:4c:5e:f1:29:40:49:82:13:87:ac:7f:70:db:
b9:e4:4e:11:bd:3f:6a:e6:68:89:f8:16:99:b3:1a:17:18:4e:
45:1b:7c:56:04:2d:80:ba:ea:8a:98:52:9d:ab:2b:72:87:09:
50:e3:d3:af:9a:fe:c6:0e:89:ec:80:1f:a4:25:d1:13:f7:4b:
f5:ed:8b:5c:69:20:60:19:f2:a3:57:c1:93:bc:f5:91:a6:3e:
59:dd:61:a2:c1:d0:9c:b0:3d:ae:ed:11:a9:5b:41:83:c3:f8:
71:b2:0d:a8:57:e7:69:71:c4:9e:67:d7:b3:c1:81:42:e7:47:
69:39:b4:d5:0a:9a:0b:b9:9f:73:12:3c:05:a5:97:97:9d:93:
ad:85:ef:bb:d7:5f:1e:2d:de:a1:63:d8:2f:4d:1b:b3:92:71:
70:85:d4:2c:4f:9a:60:30:df:38:0d:6f:08:90:9d:b0:4a:92:
c6:0c:3d:b6:ad:04:94:09:83:94:1b:43:1a:56:d7:46:ab:fb:
6b:dd:65:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org