Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/1s8VPTbjZ6v0lj0j9MOtiwTFZhI.roa
File: 1s8VPTbjZ6v0lj0j9MOtiwTFZhI.roa (raw, json)
Hash identifier: nrL+gmoCbBMLx8Q4yBJURnifuAkv6/YdwoqYJmw+sy4=
Subject key identifier: D6:CF:15:3D:36:E3:67:AB:F4:96:3D:23:F4:C3:AD:8B:04:C5:66:12
Certificate issuer: /CN=c026567dcb0295bde7709c2a7d601afaea64ee31
Certificate serial: 01856FD51A31DAC7A77547331E275987CE6C
Authority key identifier: C0:26:56:7D:CB:02:95:BD:E7:70:9C:2A:7D:60:1A:FA:EA:64:EE:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCZWfcsClb3ncJwqfWAa-upk7jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/1s8VPTbjZ6v0lj0j9MOtiwTFZhI.roa
Signing time: Mon 02 Jan 2023 00:15:14 +0000
ROA not before: Mon 02 Jan 2023 00:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 185.206.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:1a:31:da:c7:a7:75:47:33:1e:27:59:87:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c026567dcb0295bde7709c2a7d601afaea64ee31
Validity
Not Before: Jan 2 00:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6cf153d36e367abf4963d23f4c3ad8b04c56612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:52:1f:ae:41:72:b6:55:fe:f4:a9:cd:45:
61:bb:e0:85:6b:85:cd:97:ad:30:61:a9:ef:f3:4d:
d3:dc:49:9d:f3:f5:79:c0:e3:c6:f5:14:87:24:48:
ee:10:83:3e:0f:3c:6c:47:85:ac:2b:21:3e:e7:a8:
f5:f1:ce:3a:52:e3:cb:d4:0b:5f:a5:2f:b3:c7:22:
9e:fb:b8:8a:75:d1:f2:af:4b:37:1a:e2:34:fd:40:
04:6d:4c:21:e9:71:b0:a0:60:fc:cf:96:3f:b9:2c:
f6:68:e5:74:57:c5:48:d7:6c:38:f0:43:db:b5:47:
66:b0:25:a2:58:14:93:a2:0d:ba:97:58:a9:47:94:
9c:60:c7:84:35:24:4c:ce:52:87:22:0b:73:47:d5:
56:07:ea:1d:ba:33:03:9d:4e:b8:13:23:d3:69:7b:
7b:e3:91:33:13:e9:78:dc:c8:59:7a:11:71:a9:99:
d5:8b:ad:60:57:04:a6:58:cd:3f:ca:e5:74:d1:73:
e0:0b:d5:89:a6:8f:b1:4b:46:4a:1f:74:1c:a6:fe:
01:d7:dd:01:b7:dd:b2:30:94:01:a8:89:48:f0:bc:
5c:70:38:72:60:d5:97:10:bd:c3:b0:83:b0:b7:b1:
89:aa:7c:a5:9d:ff:77:b3:49:10:10:bb:33:18:cf:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CF:15:3D:36:E3:67:AB:F4:96:3D:23:F4:C3:AD:8B:04:C5:66:12
X509v3 Authority Key Identifier:
keyid:C0:26:56:7D:CB:02:95:BD:E7:70:9C:2A:7D:60:1A:FA:EA:64:EE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCZWfcsClb3ncJwqfWAa-upk7jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/1s8VPTbjZ6v0lj0j9MOtiwTFZhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/wCZWfcsClb3ncJwqfWAa-upk7jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.231.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f1:c3:23:4e:cc:2b:d8:f1:38:04:6a:c0:3d:bc:df:a0:ff:
e2:86:cb:e3:50:cc:c6:36:0f:ad:6a:c9:6b:04:2c:3f:e3:0d:
a3:e4:71:1e:9a:09:5d:84:4c:87:8e:bc:a4:a9:72:8a:c8:7b:
d8:b7:2f:57:98:33:c0:a4:62:05:f4:79:7b:6e:d9:a6:d7:f7:
da:6b:10:c1:f8:aa:4c:e9:99:81:f1:4e:70:b4:ed:d1:1d:39:
ae:72:90:d4:97:63:85:0e:85:28:c4:5b:9f:ef:d5:dd:8a:58:
89:d5:85:84:26:82:5a:45:52:d3:c5:ee:96:f2:e5:05:e7:90:
00:88:7e:7f:48:37:6d:de:4a:08:5b:85:6f:18:43:3f:14:cf:
5b:4c:4b:23:a1:a5:1b:02:f8:60:b6:c0:24:02:74:d1:0a:56:
8f:79:fc:2c:f7:4a:9d:00:01:31:ed:f9:4c:f0:e0:08:ed:7b:
e8:d5:42:12:65:78:f1:d1:53:31:9f:50:04:dd:21:fd:3f:2e:
fc:d2:60:37:30:d1:2f:03:4a:30:2b:e8:9e:61:bc:bf:50:f0:
95:56:55:11:06:76:64:04:f9:38:35:65:50:fc:82:85:7c:6f:
51:64:a1:fa:72:7e:1c:c7:c6:ab:cd:f6:8e:45:3a:c7:fc:a5:
9b:fe:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:25 2023 by rpki-client on console-fra.rpki-client.org