Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/F3vIvsFJwe9QxXxt8_d7LJR9KoM.roa
File: F3vIvsFJwe9QxXxt8_d7LJR9KoM.roa (raw, json)
Hash identifier: CnYikQwBzWAMw4zH0xqdhQMkmHrUedymSpK+YdR9Jf8=
Subject key identifier: 17:7B:C8:BE:C1:49:C1:EF:50:C5:7C:6D:F3:F7:7B:2C:94:7D:2A:83
Certificate issuer: /CN=441a95d11a8ac0eedf855db0107b9a628f27a6b4
Certificate serial: 79A5B2
Authority key identifier: 44:1A:95:D1:1A:8A:C0:EE:DF:85:5D:B0:10:7B:9A:62:8F:27:A6:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBqV0RqKwO7fhV2wEHuaYo8nprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/F3vIvsFJwe9QxXxt8_d7LJR9KoM.roa
Signing time: Sat 01 Jan 2022 03:54:34 +0000
ROA not before: Sat 01 Jan 2022 03:54:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204588
IP address blocks: 185.240.40.0/24 maxlen: 24
185.240.43.0/24 maxlen: 24
185.240.41.0/24 maxlen: 24
185.240.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7972274 (0x79a5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441a95d11a8ac0eedf855db0107b9a628f27a6b4
Validity
Not Before: Jan 1 03:54:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=177bc8bec149c1ef50c57c6df3f77b2c947d2a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:e0:0f:a1:45:8c:a3:76:e5:44:b2:dd:47:
bc:67:6a:6c:da:63:54:e8:81:bf:57:6b:98:9a:d7:
a6:0d:c9:ad:28:d6:c5:a5:72:10:87:00:c4:02:76:
97:94:d5:96:a5:0a:5b:1d:fd:27:c2:36:bd:65:d2:
b8:8a:55:c7:fa:6e:4e:2d:a8:d9:6d:fa:3d:39:a9:
a6:f1:60:e7:69:15:f3:2a:95:82:95:6f:90:12:36:
95:36:72:c7:4e:8e:fe:18:a1:d5:ab:32:22:56:5f:
0d:f7:77:ac:79:b0:4a:f5:80:cd:d3:95:80:79:f5:
fd:49:5f:12:3f:2c:e7:1a:ce:66:66:04:3a:4e:01:
02:e3:56:18:0d:f4:3f:e9:35:18:e8:d1:02:e0:04:
fb:d6:ba:cf:67:df:3d:30:72:ad:66:f4:ea:71:aa:
51:9b:91:19:f9:d1:4d:e4:e5:56:67:2d:0a:91:f0:
46:d1:f6:62:6f:ab:53:8e:e1:64:62:58:96:a0:0d:
ed:a6:12:e4:4e:21:51:3f:25:f2:37:f9:4f:9f:eb:
ba:eb:d4:20:be:94:09:f0:9d:86:be:67:d7:f0:27:
25:fa:c3:ed:91:68:ee:3b:fb:23:19:76:e7:73:34:
f5:cc:90:0c:a6:c6:57:be:5a:ef:1d:98:00:4b:90:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7B:C8:BE:C1:49:C1:EF:50:C5:7C:6D:F3:F7:7B:2C:94:7D:2A:83
X509v3 Authority Key Identifier:
keyid:44:1A:95:D1:1A:8A:C0:EE:DF:85:5D:B0:10:7B:9A:62:8F:27:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBqV0RqKwO7fhV2wEHuaYo8nprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/F3vIvsFJwe9QxXxt8_d7LJR9KoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/RBqV0RqKwO7fhV2wEHuaYo8nprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.40.0/22
Signature Algorithm: sha256WithRSAEncryption
83:0c:fa:8e:38:81:a0:28:13:1e:7e:bf:42:f3:8d:57:80:39:
cc:ed:47:09:63:2e:11:2c:0c:9c:27:94:5f:43:d5:ba:22:42:
63:8f:aa:3e:71:50:74:66:58:9c:ae:42:55:7e:06:af:03:1b:
7e:7f:53:08:2a:ef:d6:7e:50:33:82:2e:ab:68:08:9b:13:4e:
12:a8:9f:02:4d:5b:71:87:ce:2a:43:77:0f:83:32:05:a5:3b:
c9:2f:3f:90:1f:e9:9e:99:67:4c:43:9f:a6:de:02:43:95:4f:
39:86:98:91:29:1f:5c:cb:68:83:1b:5a:99:4b:e9:43:a6:2b:
55:d2:2f:1a:a5:48:e7:ad:97:d8:38:48:46:23:dd:df:1d:d5:
9d:27:b1:d4:15:2f:41:74:a2:b5:56:8f:05:4d:40:57:6b:91:
4d:59:4a:59:a1:1e:64:b5:24:1a:ca:5f:28:fb:be:96:30:79:
0c:7e:24:ef:e0:72:7a:33:66:eb:62:60:6c:05:3f:9f:29:bc:
17:a1:2c:26:d7:cb:65:e4:af:c5:9e:00:4c:1e:bb:4d:d9:6b:
5f:3e:b2:f2:f6:bf:be:04:ce:c2:18:02:fc:f1:d9:c7:93:e0:
e6:4a:c2:77:68:0f:3f:45:78:d3:50:11:75:4b:c5:c7:8e:c9:
e9:7c:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:50 2024 by rpki-client on console-ams.rpki-client.org