Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/7bca26-200b-4a12-bc86-886ad2ad47ae/1/vVJaTyuPxJdWuTHsBN4h9G3GACI.roa
File: vVJaTyuPxJdWuTHsBN4h9G3GACI.roa (raw, json)
Hash identifier: TJrGwq+6lM7E8BYP5RripUlIIaLTGvlUW33Lt8GEKeU=
Subject key identifier: BD:52:5A:4F:2B:8F:C4:97:56:B9:31:EC:04:DE:21:F4:6D:C6:00:22
Certificate issuer: /CN=b88f7019d27dd377706e79087256d5a7937b2ab5
Certificate serial: 0185737A7C8D21F2F853704A9588A4580224
Authority key identifier: B8:8F:70:19:D2:7D:D3:77:70:6E:79:08:72:56:D5:A7:93:7B:2A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uI9wGdJ903dwbnkIclbVp5N7KrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/7bca26-200b-4a12-bc86-886ad2ad47ae/1/vVJaTyuPxJdWuTHsBN4h9G3GACI.roa
Signing time: Mon 02 Jan 2023 17:14:45 +0000
ROA not before: Mon 02 Jan 2023 17:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206079
IP address blocks: 185.168.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:7c:8d:21:f2:f8:53:70:4a:95:88:a4:58:02:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88f7019d27dd377706e79087256d5a7937b2ab5
Validity
Not Before: Jan 2 17:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd525a4f2b8fc49756b931ec04de21f46dc60022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:d0:c3:cb:3c:09:a7:57:e4:7e:34:bc:74:
9e:4a:19:32:a9:62:37:2e:58:6a:a5:80:fd:71:aa:
75:53:94:cd:6c:a0:ec:36:6f:62:4b:d2:95:ee:a8:
c4:ff:8f:93:f0:19:86:7e:39:6e:de:01:b1:53:3e:
8a:5e:d2:97:05:72:40:b5:37:8b:b8:7b:da:9e:d9:
98:d2:39:8a:9a:dd:98:0e:7e:f8:5d:fa:dc:af:ad:
bf:c4:10:10:ca:ec:f1:e9:6d:52:ca:e3:a2:8a:d7:
d0:a8:8d:28:4d:2f:93:6c:25:4c:a6:4c:5b:b9:a6:
ca:2d:95:53:f3:29:a8:5d:2e:35:db:35:a4:d8:86:
d5:b7:ae:85:d6:01:82:71:41:3e:ba:a9:82:0a:a3:
0e:37:f5:87:eb:02:0c:fe:c2:01:d4:22:d5:6f:aa:
12:1f:d8:38:a5:36:12:5f:2a:d1:28:52:79:5a:04:
2f:67:9d:56:03:be:0a:d1:46:82:88:83:e1:8d:21:
5c:e3:1c:bb:fb:24:8f:94:2c:af:b4:5d:41:97:95:
fe:d0:90:ef:5b:00:6c:68:8d:50:47:b1:1f:64:3a:
b4:12:42:23:5e:49:00:5b:11:d3:18:52:c5:0f:0d:
fa:df:42:6e:68:a0:3d:3c:76:a5:9d:cc:5d:f6:b7:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:52:5A:4F:2B:8F:C4:97:56:B9:31:EC:04:DE:21:F4:6D:C6:00:22
X509v3 Authority Key Identifier:
keyid:B8:8F:70:19:D2:7D:D3:77:70:6E:79:08:72:56:D5:A7:93:7B:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI9wGdJ903dwbnkIclbVp5N7KrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/7bca26-200b-4a12-bc86-886ad2ad47ae/1/vVJaTyuPxJdWuTHsBN4h9G3GACI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/7bca26-200b-4a12-bc86-886ad2ad47ae/1/uI9wGdJ903dwbnkIclbVp5N7KrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.180.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:aa:da:a8:62:1b:ac:a8:4b:e5:e7:f7:64:15:0b:95:32:cf:
44:ea:49:ff:6f:50:f5:8a:1a:07:b8:a3:15:e4:b5:fb:6e:ea:
3f:97:70:3a:ad:f5:62:1a:7d:a6:d2:7d:fc:1a:b7:7b:cf:25:
df:10:13:1b:9e:32:98:70:d4:a4:8f:1f:89:86:d6:48:36:2b:
81:dd:0d:8f:ba:20:ba:03:36:92:02:aa:4c:0e:86:42:24:c2:
5f:41:d0:26:c9:04:cf:ff:04:0d:79:3d:95:03:70:34:7f:6a:
81:1e:52:6a:cb:87:9b:d3:45:46:29:c5:3a:87:02:6b:b3:80:
8e:e7:f1:a8:1d:16:4e:25:42:f5:82:3f:07:fa:0c:ba:30:cc:
1e:c9:6b:70:b4:5f:9c:35:a7:fe:1a:2a:ad:06:77:c1:7c:9c:
bb:4f:e2:a4:da:48:c7:88:53:ca:23:eb:44:c5:9d:62:6b:42:
54:55:89:53:13:20:7a:6b:be:12:17:d1:11:77:29:f2:35:ae:
e1:7a:12:a0:d4:7b:e1:4e:a3:4f:32:a1:70:5d:88:a4:69:4c:
0a:e8:4b:05:d9:09:99:73:08:f4:11:c7:bb:53:ad:d4:a6:59:
44:de:df:7d:e2:77:da:55:29:ef:32:07:8a:01:a5:7f:b2:26:
16:7e:75:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:46 2024 by rpki-client on console-ams.rpki-client.org