Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/tMg4QDS7DA9PoJ29RBGunVTYeQA.roa
File: tMg4QDS7DA9PoJ29RBGunVTYeQA.roa (raw, json)
Hash identifier: AByCPBZmv+DRmL3uNofZ6KIfMVT3b8g3+JURX5GGqTE=
Subject key identifier: B4:C8:38:40:34:BB:0C:0F:4F:A0:9D:BD:44:11:AE:9D:54:D8:79:00
Certificate issuer: /CN=e55dd9da42a7c50bd7689b88d409b576caca4d01
Certificate serial: 018B4949CFEA588B3FCA7389BED51C6DEF5A
Authority key identifier: E5:5D:D9:DA:42:A7:C5:0B:D7:68:9B:88:D4:09:B5:76:CA:CA:4D:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/tMg4QDS7DA9PoJ29RBGunVTYeQA.roa
Signing time: Thu 19 Oct 2023 18:54:15 +0000
ROA not before: Thu 19 Oct 2023 18:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60118
IP address blocks: 185.150.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:49:cf:ea:58:8b:3f:ca:73:89:be:d5:1c:6d:ef:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55dd9da42a7c50bd7689b88d409b576caca4d01
Validity
Not Before: Oct 19 18:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4c8384034bb0c0f4fa09dbd4411ae9d54d87900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:c5:f5:40:9b:d0:ef:8e:ac:69:75:c3:81:
f8:c6:3b:99:f2:a0:d7:e0:c2:06:60:8f:be:02:04:
3c:4b:8c:4f:b2:d9:66:57:8b:49:de:a3:5e:dc:5f:
57:41:6a:5c:05:76:6a:0b:e9:a0:91:bd:c7:8c:42:
a1:1a:83:f9:03:9d:13:0f:a3:ce:d2:b9:43:19:dd:
d3:5b:e1:1c:b1:af:a9:da:90:29:0d:41:f9:f2:b5:
41:40:02:e3:b0:35:ac:e7:12:57:d4:94:e2:fa:04:
59:cb:34:7a:38:d9:9d:0b:dd:76:7e:e0:24:cd:50:
1d:a9:79:07:ee:72:f5:fa:72:8e:eb:d8:89:d7:6d:
00:3f:8a:0f:3e:34:33:9a:70:23:f4:7f:c5:e1:b7:
d6:4e:06:03:a0:5b:8e:c5:90:79:99:bc:f2:4e:36:
10:12:37:d5:55:44:28:49:83:a1:54:59:b7:9e:ba:
47:a8:e3:23:f7:a8:36:6a:0b:f4:a5:ae:44:4f:ba:
bf:64:21:fd:90:e1:63:d2:60:d1:fd:8f:5f:03:94:
68:07:c4:7c:3e:de:4c:7e:2e:1d:98:88:1f:26:93:
83:bc:0f:1d:e9:f4:73:6a:32:c7:60:7d:36:39:e9:
27:89:ed:c5:d1:ea:a7:b2:89:1f:bd:ef:bb:1b:20:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C8:38:40:34:BB:0C:0F:4F:A0:9D:BD:44:11:AE:9D:54:D8:79:00
X509v3 Authority Key Identifier:
keyid:E5:5D:D9:DA:42:A7:C5:0B:D7:68:9B:88:D4:09:B5:76:CA:CA:4D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/tMg4QDS7DA9PoJ29RBGunVTYeQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/27dad2-e611-4f0c-94f7-eb76f8110c7f/1/5V3Z2kKnxQvXaJuI1Am1dsrKTQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.17.0/24
Signature Algorithm: sha256WithRSAEncryption
41:64:f7:47:a8:b2:fe:46:07:ac:f4:ad:81:f0:71:b5:f0:fd:
ce:a9:4e:61:5e:45:b7:23:26:14:6b:84:d1:21:e2:1d:48:de:
ec:76:53:72:8d:5c:e5:99:dc:28:d1:f1:21:cb:a0:f7:bd:07:
c1:e8:08:4c:41:33:bd:ae:4b:2f:59:8e:f3:d0:fb:08:61:19:
6b:9d:cf:8e:55:94:03:9b:f8:8a:ad:09:0c:21:57:84:2d:1e:
ed:30:17:53:cf:40:ac:53:d1:7f:69:de:ea:65:fc:5f:71:9d:
67:7d:c4:67:ab:6c:49:b9:fe:6c:5c:4a:87:98:65:77:c2:a9:
09:f6:cd:23:22:05:eb:08:cb:52:3b:67:ef:aa:92:8f:c0:95:
fe:a1:9f:8c:fd:e1:8e:4d:c9:7a:5c:50:b1:21:48:3c:63:8d:
38:43:05:3c:ee:ce:d0:21:c2:42:d1:c2:25:58:11:fa:49:dd:
fa:bc:72:15:aa:8a:4c:f2:44:25:86:55:f7:83:0c:ca:3c:a2:
ed:94:16:72:fe:75:b7:37:bb:c5:59:60:14:b8:48:51:1d:72:
cb:d6:5e:25:66:8c:40:f4:40:ef:a2:c0:11:0d:98:1a:65:42:
14:a6:77:fd:a7:01:f7:ce:96:2d:76:4a:a7:78:b1:7d:a4:b5:
97:99:27:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:44 2024 by rpki-client on console-fra.rpki-client.org