Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/7s9sM2dDRDIKcn-WaoDdWM1grkw.roa
File: 7s9sM2dDRDIKcn-WaoDdWM1grkw.roa (raw, json)
Hash identifier: fixG3K98hdemXWfahkaPYLYLFdEspT6tx3MSlU+/AzY=
Subject key identifier: EE:CF:6C:33:67:43:44:32:0A:72:7F:96:6A:80:DD:58:CD:60:AE:4C
Certificate issuer: /CN=25235bec8f78418a88e7b79c2113940fa4bc2dba
Certificate serial: 2CF7A7
Authority key identifier: 25:23:5B:EC:8F:78:41:8A:88:E7:B7:9C:21:13:94:0F:A4:BC:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSNb7I94QYqI57ecIROUD6S8Lbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/7s9sM2dDRDIKcn-WaoDdWM1grkw.roa
Signing time: Wed 22 Jun 2022 19:58:32 +0000
ROA not before: Wed 22 Jun 2022 19:58:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 185.5.145.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2946983 (0x2cf7a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25235bec8f78418a88e7b79c2113940fa4bc2dba
Validity
Not Before: Jun 22 19:58:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eecf6c33674344320a727f966a80dd58cd60ae4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:cf:87:6f:db:98:b9:41:47:a2:ff:18:95:
21:de:aa:eb:43:b0:3d:69:05:c2:0c:57:48:06:fd:
80:36:7d:cd:81:b0:7e:13:11:13:9c:7c:b9:33:0a:
8f:12:c9:8d:25:0e:e2:31:92:6b:27:13:de:31:a8:
fa:cd:bc:48:0a:e3:fd:67:7c:f2:8c:62:80:0b:aa:
3f:c3:9f:5c:6f:66:92:ca:f7:31:92:3f:ea:d8:16:
0e:0a:e6:d7:4c:86:0a:08:c9:10:16:f7:e5:74:18:
c2:3d:89:aa:c3:0b:29:9f:f6:78:e5:2d:82:ba:b3:
48:9f:f1:d6:66:83:1e:c9:23:72:3c:b6:94:f0:a5:
78:fc:12:da:4c:9d:28:19:53:0b:78:2f:bc:6a:b8:
85:f8:37:1c:4d:f9:19:f1:c9:21:fe:59:50:a2:59:
ef:5a:c7:1c:74:d3:f4:c1:94:0c:65:c9:d3:aa:27:
1f:e4:0b:48:4b:03:6e:28:7b:dd:64:35:ba:51:6d:
fb:07:94:fa:6e:9e:2b:88:e0:70:ae:40:96:ff:4f:
c9:8e:b2:2b:e1:db:73:3e:cd:d5:78:42:6d:16:85:
eb:51:fc:9e:5e:dc:0f:0c:e6:3a:2c:79:d6:80:5d:
b0:dd:e0:90:e4:c7:24:d1:b4:b0:e1:29:f7:ef:0c:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CF:6C:33:67:43:44:32:0A:72:7F:96:6A:80:DD:58:CD:60:AE:4C
X509v3 Authority Key Identifier:
keyid:25:23:5B:EC:8F:78:41:8A:88:E7:B7:9C:21:13:94:0F:A4:BC:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSNb7I94QYqI57ecIROUD6S8Lbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/7s9sM2dDRDIKcn-WaoDdWM1grkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/JSNb7I94QYqI57ecIROUD6S8Lbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.145.0/24
Signature Algorithm: sha256WithRSAEncryption
01:df:4e:4f:48:6f:af:b8:d7:a1:1c:fa:20:46:f3:5d:a9:2d:
d9:e7:be:7a:78:a1:2d:60:af:58:63:93:3f:5b:0a:13:62:f2:
3d:02:cd:0f:89:3f:44:fd:f6:a0:15:c6:b0:68:8c:17:46:fe:
2a:68:6f:7e:28:1b:48:fc:fe:61:f3:26:84:c2:2e:48:56:64:
85:59:1e:40:6f:76:3b:5c:2f:f8:42:de:27:77:eb:c2:7e:02:
93:4b:6d:27:74:d6:c7:15:29:22:73:85:02:13:96:8b:40:b7:
17:ec:b0:48:36:ac:85:45:79:96:a4:a8:8c:50:01:25:53:3a:
e1:18:0e:d3:d4:0c:7b:4b:94:5e:f4:cf:fe:a4:34:61:9b:23:
15:58:06:5a:53:f9:bc:06:39:dd:2d:e9:ef:93:b3:5c:64:ab:
8f:bd:92:40:1d:67:47:a6:52:2c:d3:07:c7:3f:ff:42:b5:3c:
f6:16:c8:8f:b1:ea:ce:c9:95:38:d3:df:7a:75:0b:8c:fb:4a:
63:2d:86:21:39:62:4d:63:af:0f:a8:d5:53:7e:a5:c6:b8:86:
84:9c:db:db:69:a4:c6:69:6a:fe:57:ca:08:fe:98:3b:23:c9:
59:88:80:e8:75:09:2c:f2:ef:42:ad:99:89:22:1c:5c:c7:c8:
f1:dc:6f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:53 2024 by rpki-client on console-fra.rpki-client.org