Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/aZTFZb-PEEXReiHtKu06UMT11Cs.roa
File: aZTFZb-PEEXReiHtKu06UMT11Cs.roa (raw, json)
Hash identifier: I5juFwdVKQXx1oD4ZBksiKWe8qSf9t8mxslYLjEDWvU=
Subject key identifier: 69:94:C5:65:BF:8F:10:45:D1:7A:21:ED:2A:ED:3A:50:C4:F5:D4:2B
Certificate issuer: /CN=d891befbb3bb33c52762ea044d0227443549f7a8
Certificate serial: 018459A395F901129B3E32C20EC894BDC7C4
Authority key identifier: D8:91:BE:FB:B3:BB:33:C5:27:62:EA:04:4D:02:27:44:35:49:F7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JG--7O7M8UnYuoETQInRDVJ96g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/aZTFZb-PEEXReiHtKu06UMT11Cs.roa
Signing time: Tue 08 Nov 2022 23:46:43 +0000
ROA not before: Tue 08 Nov 2022 23:46:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 185.180.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:59:a3:95:f9:01:12:9b:3e:32:c2:0e:c8:94:bd:c7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d891befbb3bb33c52762ea044d0227443549f7a8
Validity
Not Before: Nov 8 23:46:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6994c565bf8f1045d17a21ed2aed3a50c4f5d42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:f3:1d:5c:00:89:73:c4:66:f6:f2:a5:4b:
fe:d0:80:53:e9:10:00:22:ec:9c:15:30:4e:b5:c0:
a1:bb:54:62:30:ee:f4:47:87:b6:5b:48:71:50:77:
45:58:28:79:5d:d5:7c:45:06:18:38:de:25:8e:36:
10:42:b1:e7:6e:76:63:f1:44:f0:35:cb:d5:49:92:
63:ed:a0:31:ca:85:42:0f:71:1a:1f:6a:48:b0:97:
80:52:84:5e:21:58:ec:35:34:7c:41:25:39:05:d8:
e7:c6:3d:8e:0e:9e:2c:56:6e:d1:06:74:42:22:e7:
6c:06:e3:7b:67:41:11:4e:a7:18:9d:5a:ee:e7:8c:
e8:15:67:94:62:c0:2b:c8:c0:1e:14:26:8a:95:d3:
c9:0e:d1:b8:4d:a7:89:80:3c:8e:f9:58:f7:f6:10:
24:a8:78:5e:52:77:df:de:e4:35:23:c7:be:d1:fb:
17:92:54:b6:75:b4:1c:79:48:34:a4:72:8a:49:21:
34:00:d0:ed:36:64:c2:ea:0f:8b:ef:c9:ec:a4:d9:
7a:1f:80:92:ad:3a:12:d9:1e:88:6e:85:87:f6:c4:
53:49:17:d8:88:97:14:6f:7f:fb:2d:64:eb:c0:1d:
7b:a8:96:e7:c8:51:76:22:20:33:fa:71:2b:0a:c6:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:94:C5:65:BF:8F:10:45:D1:7A:21:ED:2A:ED:3A:50:C4:F5:D4:2B
X509v3 Authority Key Identifier:
keyid:D8:91:BE:FB:B3:BB:33:C5:27:62:EA:04:4D:02:27:44:35:49:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JG--7O7M8UnYuoETQInRDVJ96g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/aZTFZb-PEEXReiHtKu06UMT11Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2549db-37c9-4e14-81de-353407774870/1/2JG--7O7M8UnYuoETQInRDVJ96g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:63:62:9b:30:75:75:a5:e6:97:f9:9d:7f:29:04:f1:94:b0:
83:78:8d:75:f5:99:36:8f:5e:de:43:12:24:88:a4:21:77:cd:
cd:b9:92:e3:b0:84:e8:ba:51:b3:96:8d:0c:8b:07:c0:b0:91:
41:c3:83:cb:4e:68:c2:ac:79:e7:c5:7f:45:bf:49:b4:de:2c:
58:ad:78:8e:20:d5:e0:dc:44:0b:1a:77:23:f7:4e:dd:b1:b1:
5b:d3:15:29:1c:29:03:c8:70:06:60:a3:4b:5f:07:86:76:db:
bf:b3:9c:5d:8e:74:17:22:17:75:2c:40:7e:9e:e6:08:23:08:
2b:06:61:b8:75:0a:6f:c6:dc:98:b2:07:85:9d:02:13:74:bd:
bb:b2:41:e3:19:4d:b2:b4:bd:69:0f:a3:5e:84:29:18:ef:eb:
04:33:cf:4a:81:87:a5:d2:1b:d8:c2:3a:c0:36:26:25:93:ff:
fd:9c:42:07:0a:39:c6:f6:8a:15:48:27:ee:14:1a:cb:1a:8b:
37:bd:9e:3b:d5:b5:f2:07:bb:08:cf:c7:09:ff:2d:8c:69:27:
96:99:7f:7b:28:97:b6:27:17:a8:10:24:06:7a:d5:35:70:dc:
6f:70:d4:09:0f:86:67:83:f9:bf:98:d4:61:ee:21:8e:dd:95:
66:79:43:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:03 2023 by rpki-client on console-ams.rpki-client.org