Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/rSec68UsN99GAyeQbNfJ9OijioA.roa
File: rSec68UsN99GAyeQbNfJ9OijioA.roa (raw, json)
Hash identifier: afDFdgC2k86qOppojNmcZljp/xNsO1UhyyUu9hs8Ntw=
Subject key identifier: AD:27:9C:EB:C5:2C:37:DF:46:03:27:90:6C:D7:C9:F4:E8:A3:8A:80
Certificate issuer: /CN=3ab79a94103c03e99b5201a798d338865be63574
Certificate serial: 01856E8B5205569E3AB371EB8596DE3A3FF3
Authority key identifier: 3A:B7:9A:94:10:3C:03:E9:9B:52:01:A7:98:D3:38:86:5B:E6:35:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OrealBA8A-mbUgGnmNM4hlvmNXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/rSec68UsN99GAyeQbNfJ9OijioA.roa
Signing time: Sun 01 Jan 2023 18:15:02 +0000
ROA not before: Sun 01 Jan 2023 18:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 185.140.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:52:05:56:9e:3a:b3:71:eb:85:96:de:3a:3f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab79a94103c03e99b5201a798d338865be63574
Validity
Not Before: Jan 1 18:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad279cebc52c37df460327906cd7c9f4e8a38a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:82:e0:74:a0:c2:4f:83:2d:f8:ca:9b:ba:
22:25:b2:ac:3b:f5:6b:c9:e5:7c:20:d1:99:03:56:
d3:f5:e3:9e:b1:9e:30:7d:ea:3c:e6:5c:fe:a5:0f:
ef:ea:95:16:f9:f6:29:a0:a5:ee:72:61:d2:9d:90:
02:d2:b2:cc:ee:63:4a:12:65:6a:ce:f6:74:b9:6a:
63:05:88:12:dc:eb:28:f9:5a:aa:74:5b:da:2a:ec:
e7:9c:13:c2:0c:43:06:c6:84:63:1b:82:7e:cd:e9:
c3:2b:2e:63:64:ac:d0:77:17:7d:5e:d8:a8:84:b7:
9f:f1:52:41:55:33:8d:cb:e4:20:fc:32:ba:18:2b:
52:72:e1:bb:e9:fb:36:88:85:78:36:42:26:f7:60:
bc:ed:1b:b1:08:67:27:78:f6:e2:38:56:89:f2:1f:
72:09:b8:8d:e8:b2:64:c3:86:63:d0:c2:89:2a:b6:
af:14:71:11:8b:11:3c:2e:ce:6e:48:f9:2a:0a:c1:
d1:f8:e4:3e:4b:9e:77:59:e8:8e:db:da:3c:19:8d:
4f:4b:ef:69:5c:0a:8c:a7:d0:17:38:28:20:a0:4c:
3e:4c:12:56:56:c4:91:f0:d1:0e:37:4e:f8:29:5b:
df:99:61:06:c0:e4:9d:fe:4a:51:8c:20:cb:a1:5b:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:27:9C:EB:C5:2C:37:DF:46:03:27:90:6C:D7:C9:F4:E8:A3:8A:80
X509v3 Authority Key Identifier:
keyid:3A:B7:9A:94:10:3C:03:E9:9B:52:01:A7:98:D3:38:86:5B:E6:35:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OrealBA8A-mbUgGnmNM4hlvmNXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/rSec68UsN99GAyeQbNfJ9OijioA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/91dd41-0090-4679-9dbf-ee3b581aaa07/1/OrealBA8A-mbUgGnmNM4hlvmNXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d4:ae:ac:6c:63:ca:19:fa:db:00:a2:1d:4c:da:c6:97:8f:
07:74:ca:92:de:0a:4f:84:3e:bc:4e:47:e1:12:e7:f5:a7:07:
9c:0b:d1:5d:98:51:df:6c:19:55:a7:1c:49:40:78:3b:52:04:
04:7c:d5:ec:d8:f5:c0:22:84:62:a7:f9:fb:fd:4b:ad:04:b1:
f4:1b:c9:c4:f4:fa:0c:f0:39:a8:25:f4:c7:56:df:f4:ae:0e:
20:43:cf:67:dc:9f:6b:fa:59:1a:b8:12:03:fc:6f:3c:27:99:
0c:ba:fb:d1:a6:14:3c:13:a6:82:71:9f:74:89:a7:ea:50:12:
92:05:5b:db:a4:eb:58:7e:c2:ab:22:db:78:42:81:e1:49:9d:
c1:78:19:8a:df:16:09:b8:66:d2:54:a5:ec:54:74:af:30:13:
28:c6:d1:9a:e9:38:af:57:74:44:8c:4f:5c:cb:ef:d3:fd:b3:
0c:56:73:7c:77:5d:10:c7:a8:ba:dd:95:09:2a:4e:d5:8b:2c:
79:8e:00:e5:03:78:77:73:61:74:5b:52:45:40:63:bd:7a:d7:
5b:3d:5d:ac:e2:35:58:46:7d:99:08:e7:bd:dc:13:d1:ef:1d:
78:a6:fa:a3:c0:c3:92:05:9f:da:59:1b:6f:b2:a9:85:5d:f5:
fa:99:5c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:26 2024 by rpki-client on console-ams.rpki-client.org