Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/PCs3UUygHB_BpRh9DYA_col61XE.roa
File: PCs3UUygHB_BpRh9DYA_col61XE.roa (raw, json)
Hash identifier: d1AMTZWJZpBqiZUQJVkCvVmPJvrRW+dkQqjDJbXRnhE=
Subject key identifier: 3C:2B:37:51:4C:A0:1C:1F:C1:A5:18:7D:0D:80:3F:72:89:7A:D5:71
Certificate issuer: /CN=bca5e8ced539520a461dc8272ef97c807c97afd6
Certificate serial: 01866F43C30765F536EA4906D8F075D76567
Authority key identifier: BC:A5:E8:CE:D5:39:52:0A:46:1D:C8:27:2E:F9:7C:80:7C:97:AF:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKXoztU5UgpGHcgnLvl8gHyXr9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/PCs3UUygHB_BpRh9DYA_col61XE.roa
Signing time: Mon 20 Feb 2023 14:39:17 +0000
ROA not before: Mon 20 Feb 2023 14:39:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 185.184.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:43:c3:07:65:f5:36:ea:49:06:d8:f0:75:d7:65:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca5e8ced539520a461dc8272ef97c807c97afd6
Validity
Not Before: Feb 20 14:39:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c2b37514ca01c1fc1a5187d0d803f72897ad571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:d0:42:48:b0:a2:00:2c:96:cb:65:bc:06:
6d:43:1d:8b:06:6f:19:2e:93:51:90:1d:a3:1b:51:
e6:00:61:61:89:20:74:9c:3d:e0:31:a9:dc:ca:55:
e2:3d:ed:c4:fd:4a:dc:1f:ae:10:1e:f9:ba:c9:74:
ec:db:01:c0:56:24:77:77:8b:ec:65:8e:85:f5:f1:
75:32:58:29:14:33:46:e1:23:e7:a4:aa:df:61:2f:
b3:95:fc:75:11:35:ba:8d:90:4e:45:9c:83:3a:fd:
27:31:0d:6a:76:80:ad:44:d9:4c:57:77:7e:41:c0:
03:e0:3b:35:ee:5d:0a:39:7e:8c:2c:2e:71:ba:3d:
5f:fa:b7:28:7a:5d:48:b1:db:9c:7e:12:a7:b7:0c:
8e:05:b9:b7:52:8f:db:c9:45:31:a9:33:30:70:4b:
3b:8f:d2:66:1c:64:68:13:6b:e6:04:b0:21:8b:d2:
e6:6f:c6:c5:18:0d:1c:26:24:a9:31:e7:15:51:0b:
57:a5:c4:9e:88:57:de:49:a0:0b:06:fc:bd:6f:9d:
a5:0f:0a:6e:5e:fa:5e:37:11:19:88:a0:d8:6d:7f:
b5:7b:e1:fc:a6:fd:1c:00:cc:6a:2a:c9:e1:1c:e0:
47:ff:e3:71:ea:1a:1f:b4:4f:c0:36:af:09:9f:8f:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:37:51:4C:A0:1C:1F:C1:A5:18:7D:0D:80:3F:72:89:7A:D5:71
X509v3 Authority Key Identifier:
keyid:BC:A5:E8:CE:D5:39:52:0A:46:1D:C8:27:2E:F9:7C:80:7C:97:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKXoztU5UgpGHcgnLvl8gHyXr9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/PCs3UUygHB_BpRh9DYA_col61XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/vKXoztU5UgpGHcgnLvl8gHyXr9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.219.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5c:7c:e9:d8:64:b0:af:d4:3c:a3:23:2e:2f:29:7b:de:a9:
d5:03:22:7d:a4:0b:1b:04:4d:4e:5d:fb:aa:85:aa:9e:3c:2e:
cf:e8:fa:71:db:34:2b:e5:67:c7:62:fa:70:64:76:71:95:c6:
66:72:7e:1a:ad:29:c9:27:66:ad:c8:27:c0:91:c9:66:5e:2a:
37:63:aa:22:54:c0:2f:cd:4c:2d:02:e3:62:3a:2b:88:06:d0:
70:10:5e:48:cc:6e:bd:10:c5:a7:d4:36:d5:f8:44:fa:6a:52:
e6:49:ab:53:0b:45:b7:d8:00:54:d0:96:c6:15:a0:4e:2a:be:
a3:b7:03:4d:c1:21:06:0a:43:84:15:93:3b:b8:36:97:04:da:
4d:df:39:30:bd:27:e7:37:c5:a5:b9:ae:b5:58:2e:2e:f8:ca:
6f:25:9c:98:ab:91:89:57:c5:e7:f6:61:a6:ef:4d:df:43:4d:
2c:dd:ad:73:34:dd:ae:89:fd:11:9d:cb:b1:77:1a:f5:d6:c9:
31:3b:ce:bc:90:b5:ca:4c:6c:43:56:1a:36:cd:dd:60:4a:f0:
bc:67:35:7d:ba:6f:b8:b0:02:c2:76:46:2e:64:db:ac:1e:a3:
a6:db:6c:8c:f7:cf:8b:ea:73:71:fc:44:7a:46:83:14:62:45:
b7:9a:c1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:22 2024 by rpki-client on console-ams.rpki-client.org