Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/4Hc3IcJ3EF-Mw7DR1txjzzg1byc.roa
File: 4Hc3IcJ3EF-Mw7DR1txjzzg1byc.roa (raw, json)
Hash identifier: b48wACST+bPwbCdYkTgO6JNvRbMmWqqTx/kia91Kh/0=
Subject key identifier: E0:77:37:21:C2:77:10:5F:8C:C3:B0:D1:D6:DC:63:CF:38:35:6F:27
Certificate issuer: /CN=415f3fee2eb60bd001c3eb1e8f90854580f9e110
Certificate serial: 018364ADB1CA424B56CAFBC876DEA42B4282
Authority key identifier: 41:5F:3F:EE:2E:B6:0B:D0:01:C3:EB:1E:8F:90:85:45:80:F9:E1:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QV8_7i62C9ABw-sej5CFRYD54RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/4Hc3IcJ3EF-Mw7DR1txjzzg1byc.roa
Signing time: Thu 22 Sep 2022 10:10:48 +0000
ROA not before: Thu 22 Sep 2022 10:10:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60675
IP address blocks: 185.252.8.0/24 maxlen: 24
185.252.8.0/22 maxlen: 22
185.252.9.0/24 maxlen: 24
185.252.10.0/24 maxlen: 24
185.252.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:ad:b1:ca:42:4b:56:ca:fb:c8:76:de:a4:2b:42:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415f3fee2eb60bd001c3eb1e8f90854580f9e110
Validity
Not Before: Sep 22 10:10:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0773721c277105f8cc3b0d1d6dc63cf38356f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:39:e2:d0:cc:9c:6d:25:d8:ca:c9:55:20:
c3:f5:6b:4c:7a:ed:e2:05:d6:57:48:46:4e:81:d9:
23:74:1d:25:16:f1:c6:f5:40:42:b1:93:2d:70:ff:
c8:09:82:90:74:da:67:cf:f0:85:9f:df:3d:b4:dc:
6a:11:74:a5:2d:7a:4a:3c:b6:c0:fc:f9:32:0f:38:
88:e8:47:22:d6:79:d4:ea:b0:11:32:4b:62:32:42:
4a:06:24:fa:d9:43:3b:11:1c:fb:8b:da:ae:10:61:
ec:45:2c:17:4b:1a:44:73:7a:ab:2e:95:ce:08:c8:
79:51:4d:ad:00:78:7b:68:87:f9:77:d0:bb:7e:5b:
a7:25:2a:80:78:bd:51:14:e6:31:72:d6:3b:55:00:
00:e9:12:b4:e4:a9:46:3c:a6:52:f3:85:a2:b2:1e:
0a:e7:d8:d0:08:a8:53:83:ed:07:b3:ab:69:2d:0d:
3e:43:ed:97:87:de:21:80:d4:50:9b:d2:b8:b0:30:
53:f4:be:70:7d:9c:c9:11:03:2f:20:05:6e:01:28:
eb:14:33:d3:6d:9b:3a:18:ec:e0:c6:ba:14:87:52:
b5:ea:b7:a0:69:ca:a8:8b:70:11:9a:8a:c8:24:9a:
14:ca:5b:24:70:95:83:91:4b:7a:b0:e2:51:65:a7:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:77:37:21:C2:77:10:5F:8C:C3:B0:D1:D6:DC:63:CF:38:35:6F:27
X509v3 Authority Key Identifier:
keyid:41:5F:3F:EE:2E:B6:0B:D0:01:C3:EB:1E:8F:90:85:45:80:F9:E1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QV8_7i62C9ABw-sej5CFRYD54RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/4Hc3IcJ3EF-Mw7DR1txjzzg1byc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4fc7d4-2efa-4fc6-80ea-ee7673440e3f/1/QV8_7i62C9ABw-sej5CFRYD54RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:11:c3:30:25:b8:b4:8b:d0:3a:ca:e2:a1:26:a8:46:91:e1:
3a:9c:81:99:67:be:10:01:1d:eb:9d:79:a5:1e:7d:76:28:89:
94:2d:08:8d:36:a6:68:0c:44:14:28:51:53:9c:4e:2a:7c:cc:
1e:bf:ea:43:13:fa:85:1a:3e:fc:ec:7a:eb:b9:9c:8a:4a:e8:
3e:09:44:f5:b9:30:62:08:30:90:1f:99:4d:9d:92:58:f4:0a:
f2:ff:64:12:79:bc:d9:9e:30:66:09:fb:98:e7:83:10:28:98:
3c:d6:8d:67:f5:7b:cf:df:2e:ee:6d:d0:b8:09:73:9d:bd:0a:
db:cb:f7:40:2b:c3:8c:d7:08:4e:d1:1a:c1:ef:dd:58:ac:95:
9e:1d:ac:63:19:15:a3:46:9d:bd:08:0f:b7:a6:62:61:06:7b:
04:21:ed:58:49:a2:e5:ac:14:f6:1d:41:97:80:15:78:9d:0c:
0e:c0:dc:e4:4a:f4:8a:a8:8b:fb:79:30:0d:67:95:39:6c:3d:
7c:94:82:6f:b3:e1:c1:ef:08:af:2c:c9:ed:83:1f:65:cf:dc:
68:8a:8d:8f:10:93:16:29:3e:e2:dc:06:55:c1:42:c6:9b:27:
17:e6:9a:02:d6:56:b2:8d:2b:b3:2c:a6:66:3e:ba:f3:8d:6c:
a3:cf:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:34 2024 by rpki-client on console-ams.rpki-client.org