Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c758a2-e70c-4e3e-a6b2-dcef869046ca/1/RKS3CMleoZCPxwgkvEpZ5lwDQZc.roa
File: RKS3CMleoZCPxwgkvEpZ5lwDQZc.roa (raw, json)
Hash identifier: svgEil1AK8ljz7nqDormRvUTLiV2vUqbCryE34S904w=
Subject key identifier: 44:A4:B7:08:C9:5E:A1:90:8F:C7:08:24:BC:4A:59:E6:5C:03:41:97
Certificate issuer: /CN=0f61618fcd4ac64240b15c1dfa36e671031759ad
Certificate serial: 01856D9D2D745F8B422A9604446179C5572F
Authority key identifier: 0F:61:61:8F:CD:4A:C6:42:40:B1:5C:1D:FA:36:E6:71:03:17:59:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Fhj81KxkJAsVwd-jbmcQMXWa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c758a2-e70c-4e3e-a6b2-dcef869046ca/1/RKS3CMleoZCPxwgkvEpZ5lwDQZc.roa
Signing time: Sun 01 Jan 2023 13:54:55 +0000
ROA not before: Sun 01 Jan 2023 13:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204938
IP address blocks: 185.224.0.0/24 maxlen: 24
185.224.1.0/24 maxlen: 24
185.224.2.0/24 maxlen: 24
185.224.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:2d:74:5f:8b:42:2a:96:04:44:61:79:c5:57:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f61618fcd4ac64240b15c1dfa36e671031759ad
Validity
Not Before: Jan 1 13:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44a4b708c95ea1908fc70824bc4a59e65c034197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:a9:f8:15:de:bc:68:b4:84:ac:ad:12:bf:
0c:77:da:6c:09:95:49:aa:db:b6:b7:5d:a2:d8:28:
af:70:de:f5:96:5b:79:ee:52:50:36:36:92:9a:88:
08:6e:9a:2b:72:d1:55:ae:55:a7:5d:8a:e6:67:fb:
9d:41:c5:92:2c:74:19:fe:f6:19:da:af:7c:aa:05:
c1:59:63:46:37:d0:a0:b1:45:ad:62:63:a9:9b:04:
b0:b8:35:75:70:34:03:45:b5:1c:60:df:16:ad:66:
48:75:8f:b3:90:a5:a4:eb:d0:60:d2:20:63:d3:96:
63:90:f4:e9:02:b7:71:5d:0b:80:04:c4:77:ad:67:
21:75:a2:19:a6:cb:03:ac:95:ce:59:1c:8d:a4:16:
da:56:f1:f2:e4:bf:58:56:44:42:f7:dd:ef:cd:79:
b1:f7:7b:9e:3e:7f:ed:91:e4:80:f3:6d:f4:c3:6f:
31:a3:33:6a:d2:b4:f3:32:a5:6f:6f:a9:3f:c4:e1:
52:fa:fb:d1:74:c0:b4:9b:95:4b:f1:5b:d0:50:52:
2a:4d:d1:01:aa:90:36:2b:83:99:98:c1:40:69:0b:
10:b4:c9:45:0b:d4:e4:97:2d:ca:ef:c0:9b:40:ab:
97:9e:70:52:5a:22:4a:4d:e6:97:c7:5a:42:af:b0:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A4:B7:08:C9:5E:A1:90:8F:C7:08:24:BC:4A:59:E6:5C:03:41:97
X509v3 Authority Key Identifier:
keyid:0F:61:61:8F:CD:4A:C6:42:40:B1:5C:1D:FA:36:E6:71:03:17:59:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Fhj81KxkJAsVwd-jbmcQMXWa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c758a2-e70c-4e3e-a6b2-dcef869046ca/1/RKS3CMleoZCPxwgkvEpZ5lwDQZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c758a2-e70c-4e3e-a6b2-dcef869046ca/1/D2Fhj81KxkJAsVwd-jbmcQMXWa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.0.0/22
Signature Algorithm: sha256WithRSAEncryption
26:76:b7:ea:be:d0:cb:eb:6b:de:51:ef:8d:d3:8f:85:8d:82:
f3:74:7b:00:03:ce:1b:21:d6:f5:f6:e7:e0:a1:bb:46:7b:10:
f6:d1:d9:0a:f1:d9:2e:de:7c:6a:4d:df:28:70:b7:a3:bd:66:
9d:12:ac:33:53:1a:47:4c:9a:47:7a:f1:87:14:1a:32:15:87:
57:4a:18:5b:f7:0d:bb:86:23:f6:f3:b2:61:82:7b:3d:09:57:
3a:3a:ec:1b:6b:f0:a4:70:eb:bc:31:96:e2:42:ee:0b:7b:ba:
9d:2e:c8:10:2b:f8:5b:45:8e:c6:01:f1:2d:2a:85:dc:86:bc:
8d:2c:45:e4:55:80:8a:6f:00:ae:03:0e:c9:f8:eb:28:da:c0:
48:92:f0:0b:80:d3:6f:2a:14:3d:6c:86:13:60:41:a4:e3:a4:
52:d8:95:bb:ad:63:aa:a4:68:55:a5:fc:be:31:4b:2a:9e:2f:
e9:ea:4a:4d:c4:2d:0e:db:cb:cd:02:06:c2:94:25:01:e7:49:
74:83:4c:34:de:ba:6f:52:2f:aa:9c:f4:53:2a:1e:55:5b:8b:
47:83:4a:9b:73:99:7c:38:35:b3:51:6d:c6:98:6a:f2:f4:bb:
ed:c9:86:41:27:c0:e4:0c:cd:82:5a:f4:b4:67:a2:97:ba:f4:
b6:dc:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 06:37:22 2023 by rpki-client on console-fra.rpki-client.org