Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6082dd-4978-4376-8187-45a4cea86a48/1/adTbRmyt7goGLoKs2mRY8hQOlLo.roa
File: adTbRmyt7goGLoKs2mRY8hQOlLo.roa (raw, json)
Hash identifier: t4GXTPGtdrRg5abnQ8TCi9GBLGp8doOuF0bX3lqI+Kk=
Subject key identifier: 69:D4:DB:46:6C:AD:EE:0A:06:2E:82:AC:DA:64:58:F2:14:0E:94:BA
Certificate issuer: /CN=af08fbd7e1268e859d207b113c122032b91526e7
Certificate serial: 0185704BBF867835C06C47BF126B4900A95C
Authority key identifier: AF:08:FB:D7:E1:26:8E:85:9D:20:7B:11:3C:12:20:32:B9:15:26:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwj71-EmjoWdIHsRPBIgMrkVJuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6082dd-4978-4376-8187-45a4cea86a48/1/adTbRmyt7goGLoKs2mRY8hQOlLo.roa
Signing time: Mon 02 Jan 2023 02:24:50 +0000
ROA not before: Mon 02 Jan 2023 02:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29024
IP address blocks: 185.187.252.0/22 maxlen: 24
185.187.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:bf:86:78:35:c0:6c:47:bf:12:6b:49:00:a9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af08fbd7e1268e859d207b113c122032b91526e7
Validity
Not Before: Jan 2 02:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69d4db466cadee0a062e82acda6458f2140e94ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:3b:72:00:76:04:e8:16:48:45:c2:37:ff:
b4:92:0d:49:39:8a:44:d0:f6:11:27:9c:81:ba:82:
25:ed:02:6f:3b:40:72:33:ad:5e:b6:e2:08:9c:0a:
99:a6:a5:90:8f:a8:4f:4c:a6:ed:fa:e6:ca:0b:be:
df:8d:5b:8a:c3:e5:f6:08:79:a0:a3:fd:bc:c6:d0:
a0:ef:d9:8e:9a:77:b6:d8:f9:c8:d1:a1:e4:e1:01:
b2:4f:30:26:06:68:7e:56:1e:ee:96:7c:07:03:70:
91:a5:03:d6:dd:32:67:67:2f:2f:cc:4c:8d:f4:23:
d0:93:bd:be:8d:ad:27:d2:3b:8f:93:cc:b2:19:d1:
e1:8d:b3:fa:a1:1b:09:fb:4a:60:5b:f9:a5:70:05:
3e:2a:ee:02:15:bd:89:51:cb:b8:6b:a5:31:02:8a:
da:cb:47:38:b9:20:32:4c:ef:20:d7:7c:8e:f2:83:
cf:3c:2b:f2:48:85:12:70:7b:f5:57:55:1a:81:28:
f3:78:c1:32:34:c9:61:76:93:d5:aa:3e:a0:3e:a3:
bc:15:ca:7b:7d:49:3f:e8:f4:6c:54:fd:e0:2d:04:
08:cc:e7:40:c4:ae:1d:17:fa:c8:6f:29:6b:bd:82:
e7:59:75:ff:74:a4:aa:bb:5c:7f:3b:99:9a:8a:8d:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D4:DB:46:6C:AD:EE:0A:06:2E:82:AC:DA:64:58:F2:14:0E:94:BA
X509v3 Authority Key Identifier:
keyid:AF:08:FB:D7:E1:26:8E:85:9D:20:7B:11:3C:12:20:32:B9:15:26:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwj71-EmjoWdIHsRPBIgMrkVJuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6082dd-4978-4376-8187-45a4cea86a48/1/adTbRmyt7goGLoKs2mRY8hQOlLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6082dd-4978-4376-8187-45a4cea86a48/1/rwj71-EmjoWdIHsRPBIgMrkVJuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.252.0/22
Signature Algorithm: sha256WithRSAEncryption
61:47:74:7c:a8:be:bb:75:d8:bf:37:67:ae:f1:f7:c6:11:36:
b6:35:cb:8e:5b:b8:cd:9f:e6:11:db:db:bd:61:46:4e:28:48:
88:1d:54:4e:61:a0:f8:6c:c7:ae:17:a8:57:a7:12:10:b9:1b:
86:cf:42:eb:2e:a6:9f:4f:54:2b:57:d9:ea:c8:23:3a:ba:48:
c2:f9:60:02:55:c5:d1:ce:19:b0:08:59:42:97:79:9c:ac:57:
c4:76:13:21:12:93:40:44:18:1c:13:3a:6a:95:db:39:20:f5:
20:56:5f:45:ab:ae:6e:14:16:72:a8:06:fe:03:75:9e:8a:38:
1f:be:97:3e:7d:bd:60:0e:bb:c5:4d:b6:92:a4:af:8c:8e:24:
b5:a5:9a:4b:66:d6:0a:cc:7e:34:b1:64:35:ab:64:be:88:24:
74:5b:77:09:0a:7a:55:20:3e:2c:f1:24:8d:84:9b:5a:cc:40:
79:4a:d6:0c:77:58:24:50:99:43:eb:dc:7f:ab:2d:a8:a0:4c:
ab:c1:57:f3:03:36:e4:c7:95:eb:3e:d6:2d:c4:85:79:54:b1:
84:17:57:af:27:2e:e9:d9:9e:d6:4b:27:e9:46:f6:70:de:3a:
9a:fa:d2:9c:6f:43:b0:e0:e6:5f:0d:69:e8:39:b6:c6:85:55:
42:f9:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:10 2024 by rpki-client on console-ams.rpki-client.org