Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/1k4W-al_xv9PvGDYWKQOzTQRKSI.roa
File: 1k4W-al_xv9PvGDYWKQOzTQRKSI.roa (raw, json)
Hash identifier: bOKHaZNt1RI6+xhfQfwGIupCckwH8bVa+w0TUeT4F0Q=
Subject key identifier: D6:4E:16:F9:A9:7F:C6:FF:4F:BC:60:D8:58:A4:0E:CD:34:11:29:22
Certificate issuer: /CN=adbdd53e5687d8c7e718c459bdc4e28e553cdcce
Certificate serial: 01210C99
Authority key identifier: AD:BD:D5:3E:56:87:D8:C7:E7:18:C4:59:BD:C4:E2:8E:55:3C:DC:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb3VPlaH2MfnGMRZvcTijlU83M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/1k4W-al_xv9PvGDYWKQOzTQRKSI.roa
Signing time: Sat 01 Jan 2022 04:52:49 +0000
ROA not before: Sat 01 Jan 2022 04:52:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205537
IP address blocks: 185.214.206.0/24 maxlen: 24
185.214.204.0/24 maxlen: 24
185.214.205.0/24 maxlen: 24
185.214.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18943129 (0x1210c99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbdd53e5687d8c7e718c459bdc4e28e553cdcce
Validity
Not Before: Jan 1 04:52:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d64e16f9a97fc6ff4fbc60d858a40ecd34112922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:d3:53:c4:19:e2:33:80:98:93:ac:53:e4:
6d:0a:19:42:9c:1f:65:1d:92:2d:59:05:b7:41:67:
c5:c6:67:87:3d:ce:1b:5e:93:4a:e0:80:cb:04:bb:
1f:0c:63:85:c3:c7:5e:c3:61:7d:6b:c0:ca:7f:f5:
68:03:36:c2:17:73:e9:18:e1:5b:dc:68:7e:03:a1:
15:24:28:4b:6a:ec:4a:5c:6e:9e:28:ac:67:07:9c:
f8:39:7b:38:29:c1:f1:e5:e7:22:5a:50:37:a0:87:
95:23:37:de:d6:95:cb:c0:03:b2:82:d0:7f:6a:31:
ff:a7:fd:1c:d3:96:95:d6:20:32:bb:73:72:3e:32:
8a:03:50:d6:45:8a:59:f2:7f:53:4b:ef:30:4a:0d:
b1:75:fb:69:f6:6f:a0:8e:52:dc:19:46:95:ec:4e:
de:65:2f:60:7c:1c:56:ff:37:71:b0:3d:f2:78:bc:
68:9b:60:ae:68:a8:7f:68:a4:f4:d9:de:f8:8c:46:
88:86:12:d8:cd:a5:29:a1:a0:b4:a9:ce:01:de:4a:
95:a2:fe:b0:eb:0f:6e:aa:99:f0:54:c6:be:af:24:
3b:d0:ad:06:c8:9a:d9:5a:e2:6c:c4:21:50:af:e3:
b1:bb:c0:62:1e:b7:06:3a:35:e6:b1:26:01:3d:75:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4E:16:F9:A9:7F:C6:FF:4F:BC:60:D8:58:A4:0E:CD:34:11:29:22
X509v3 Authority Key Identifier:
keyid:AD:BD:D5:3E:56:87:D8:C7:E7:18:C4:59:BD:C4:E2:8E:55:3C:DC:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb3VPlaH2MfnGMRZvcTijlU83M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/1k4W-al_xv9PvGDYWKQOzTQRKSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4c8738-ff3f-428f-8ddc-f29462f7872a/1/rb3VPlaH2MfnGMRZvcTijlU83M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.204.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:a2:e0:c1:28:05:1e:4c:32:8c:d6:7e:2b:d8:4e:e7:dc:e6:
11:1f:5f:a4:62:3f:b7:50:97:b7:cb:a0:bf:71:65:22:52:9e:
78:59:a8:6e:7f:55:89:d1:a7:97:81:ac:64:e9:a2:a5:fd:4a:
9e:3b:17:67:7a:2f:84:59:ab:18:f6:de:e8:0b:b8:27:c7:de:
4f:43:6f:5a:82:81:bc:89:a2:ca:1b:1f:74:ca:bf:1a:8d:b4:
c4:69:4d:53:36:84:17:4b:75:e0:4d:d4:d7:d5:09:9a:f9:13:
8b:fb:81:0e:ac:bf:a8:45:bf:66:fa:22:6d:86:87:f4:e4:5a:
3a:ab:39:44:4c:6b:fd:d7:f4:ce:6a:7c:f0:02:aa:56:dc:74:
5a:9b:14:7f:00:bc:fc:66:fe:33:20:32:1f:3d:de:d5:f3:27:
a0:48:f1:9d:6e:d6:52:89:8d:b4:67:4f:69:41:95:66:95:d6:
3c:58:a4:7a:44:82:c4:b6:9e:64:02:87:49:3a:b6:a2:c1:f1:
5f:4e:27:2b:91:b7:b4:b1:79:07:6c:34:f4:d6:67:5b:4d:6c:
23:80:d2:ef:aa:ce:0b:24:18:e6:72:f1:8f:c7:35:07:5b:20:
b0:c6:a7:13:d6:bc:14:5b:41:85:86:53:53:0d:7a:c3:e6:55:
1e:72:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:23 2024 by rpki-client on console-ams.rpki-client.org