Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0exrMB1heybAaTmA3isoDVAeTnY.roa
File: 0exrMB1heybAaTmA3isoDVAeTnY.roa (raw, json)
Hash identifier: n3JLNo9Gj9a6l4jSfTE3gorf+EJ61aetVB93Cen9fxA=
Subject key identifier: D1:EC:6B:30:1D:61:7B:26:C0:69:39:80:DE:2B:28:0D:50:1E:4E:76
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01821B92D464561C88F1A68037EC0F131FB9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0exrMB1heybAaTmA3isoDVAeTnY.roa
Signing time: Wed 20 Jul 2022 12:26:23 +0000
ROA not before: Wed 20 Jul 2022 12:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201341
IP address blocks: 185.121.160.0/24 maxlen: 24
185.121.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:92:d4:64:56:1c:88:f1:a6:80:37:ec:0f:13:1f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 20 12:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1ec6b301d617b26c0693980de2b280d501e4e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f2:85:9e:0f:27:05:bd:a4:59:c5:33:ed:bb:
87:46:d2:a4:85:6f:1b:8d:04:cf:56:40:f7:87:98:
4d:d5:d4:f7:61:0f:8a:ea:ac:b0:7f:5e:0f:2f:56:
b4:1c:47:84:c4:fe:ad:57:08:b6:e5:47:99:69:f7:
ed:48:06:15:e8:3a:e2:14:db:ac:3e:0b:65:67:03:
bd:4a:5a:05:14:8d:d1:f1:bf:71:13:dd:2a:da:ea:
98:5e:ea:c6:fc:36:57:ae:17:fc:ba:a5:41:ca:b9:
9f:8d:3d:ef:d0:31:ee:ef:6c:5b:d7:c4:8b:8e:47:
00:44:54:6d:90:6c:29:8c:4e:57:cf:5e:1e:d5:00:
75:28:5c:6f:18:6e:1a:55:f1:66:85:8e:b6:ed:86:
c5:c4:49:22:5f:c4:4b:95:97:71:a3:9b:fc:cd:7f:
ea:33:19:e3:29:6a:4b:6b:d3:30:28:7e:8b:16:1b:
34:b9:e9:90:26:80:1d:f1:68:58:40:39:2c:5d:47:
7a:d9:f4:d3:08:a2:a4:41:64:78:15:7c:0b:c1:99:
92:f1:d3:78:d7:c5:aa:4c:d7:ba:87:04:7b:3c:ff:
62:21:02:a2:9f:0f:55:fa:c3:b6:2f:3e:66:d4:0a:
7e:30:f0:89:3c:97:f8:64:79:df:3b:64:1c:6b:32:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EC:6B:30:1D:61:7B:26:C0:69:39:80:DE:2B:28:0D:50:1E:4E:76
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0exrMB1heybAaTmA3isoDVAeTnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.160.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:b7:02:04:b0:30:0b:86:12:16:d9:24:c2:a2:a3:14:da:4f:
77:a6:9c:62:01:27:57:8a:f8:c1:25:1a:e2:85:25:d9:33:0f:
e8:ca:cd:d8:2e:7d:0c:0c:de:94:91:62:22:51:ce:ef:a7:e2:
ad:01:85:13:ca:f1:9c:3d:99:00:1c:87:7a:97:59:3d:63:20:
8f:56:d9:66:cb:c5:3b:3e:e0:80:55:09:e5:6c:5f:3d:7c:4f:
11:2a:e6:46:52:00:18:a3:96:04:d3:52:e6:68:46:b2:7f:75:
62:7b:b4:f0:93:d5:76:7d:5a:8e:0c:b8:11:fc:f2:4f:8c:ba:
d7:87:b7:15:ad:cb:8e:d3:ef:10:b3:00:a5:a3:d3:ff:ff:99:
6b:16:12:00:a3:87:89:6e:b8:37:ca:1d:9d:5e:1c:0f:ad:74:
1b:65:50:9b:b6:03:c4:22:59:9c:eb:2a:23:a1:15:97:f0:f2:
ff:e4:be:f9:e2:6d:8b:b4:17:fd:e5:38:62:99:6a:bd:0f:bd:
0a:ca:35:b4:3c:9e:42:6c:88:09:25:ae:83:88:d9:ac:83:6c:
7e:5b:55:e2:0f:51:c0:58:4a:e1:5c:05:08:b6:87:4b:ca:1e:
6b:8a:db:38:c9:d9:58:6e:2d:b7:cc:9c:e6:4e:39:93:38:f0:
e3:30:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:16 2023 by rpki-client on console-ams.rpki-client.org