Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6bf11e-bfba-4329-941e-3572bc40ee2d/1/PSoL_R39-w4HUrBYHCV8VVD3BF4.roa
File: PSoL_R39-w4HUrBYHCV8VVD3BF4.roa (raw, json)
Hash identifier: JFjh3zmRtxISWbMV3afhjkp7pXmMkmpmdMRpsnLbqrc=
Subject key identifier: 3D:2A:0B:FD:1D:FD:FB:0E:07:52:B0:58:1C:25:7C:55:50:F7:04:5E
Certificate issuer: /CN=18376823d1fc69cd224f76d77656dcd89e545d5e
Certificate serial: 01856C65C110D7E251AF65F6E4000E5656C4
Authority key identifier: 18:37:68:23:D1:FC:69:CD:22:4F:76:D7:76:56:DC:D8:9E:54:5D:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDdoI9H8ac0iT3bXdlbc2J5UXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/6bf11e-bfba-4329-941e-3572bc40ee2d/1/PSoL_R39-w4HUrBYHCV8VVD3BF4.roa
Signing time: Sun 01 Jan 2023 08:14:45 +0000
ROA not before: Sun 01 Jan 2023 08:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49020
IP address blocks: 185.139.14.0/24 maxlen: 24
185.139.12.0/24 maxlen: 24
185.139.12.0/22 maxlen: 24
185.139.15.0/24 maxlen: 24
185.139.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:c1:10:d7:e2:51:af:65:f6:e4:00:0e:56:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18376823d1fc69cd224f76d77656dcd89e545d5e
Validity
Not Before: Jan 1 08:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d2a0bfd1dfdfb0e0752b0581c257c5550f7045e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:07:7a:94:40:75:a3:db:51:e1:d7:3d:3e:
b2:0a:bb:72:9a:f5:cd:ab:ed:f3:41:67:00:a0:94:
37:c5:dd:4c:e0:de:21:fa:59:8a:df:01:c8:fc:51:
13:aa:29:25:82:0e:fc:f6:4a:23:7f:11:7f:ad:ed:
ba:86:8b:0c:0c:13:9c:ac:f7:a4:4c:9f:c8:79:b5:
9c:dd:66:f5:90:57:5b:16:da:d9:83:93:43:ec:33:
5f:8a:de:6a:19:32:2a:48:0d:88:92:f7:0d:c2:fc:
47:06:dc:ce:55:43:a8:dd:b2:b2:43:13:9c:1f:de:
5a:70:c9:8f:f3:b2:b0:9b:7e:a9:bb:45:db:d3:9e:
c7:00:6f:ec:3d:6c:15:f8:50:9b:3e:c6:76:b4:ca:
df:ca:b5:2b:2d:2b:df:48:e5:f6:4c:db:c3:f6:9c:
49:bc:ee:c1:d3:93:1d:1b:fa:fc:f1:72:e1:a0:75:
e4:0a:07:6c:20:d1:f9:ce:63:67:8b:18:24:ff:45:
9f:6d:c1:69:b5:12:b8:de:1a:a3:82:88:90:84:02:
f1:19:37:a4:e5:e0:a4:ac:9f:33:2a:ac:8a:0e:9f:
77:9c:10:20:a1:00:34:19:a6:de:b7:6e:37:b1:bc:
bb:5c:e0:ad:6d:a3:db:9a:c6:49:a4:b4:45:7c:37:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:0B:FD:1D:FD:FB:0E:07:52:B0:58:1C:25:7C:55:50:F7:04:5E
X509v3 Authority Key Identifier:
keyid:18:37:68:23:D1:FC:69:CD:22:4F:76:D7:76:56:DC:D8:9E:54:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDdoI9H8ac0iT3bXdlbc2J5UXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6bf11e-bfba-4329-941e-3572bc40ee2d/1/PSoL_R39-w4HUrBYHCV8VVD3BF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6bf11e-bfba-4329-941e-3572bc40ee2d/1/GDdoI9H8ac0iT3bXdlbc2J5UXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.12.0/22
Signature Algorithm: sha256WithRSAEncryption
48:e1:10:41:51:49:07:19:f5:46:78:32:1b:39:40:2f:a5:9f:
c1:99:a7:36:50:d6:75:32:68:61:87:c0:0f:f2:0a:7d:90:77:
20:63:dd:95:cb:be:da:04:27:7a:14:f1:92:b1:e7:0a:7c:76:
f6:bc:46:b2:d7:7a:e3:59:90:ee:fd:08:fa:f2:a4:18:56:b2:
6c:0f:48:ff:8d:fb:5d:e3:a8:48:90:a3:8b:f8:1a:76:a0:02:
29:e7:69:db:79:dc:77:84:30:c6:40:e0:e9:ba:ce:4d:39:03:
c2:92:3c:d5:ff:7d:33:37:fd:d7:30:1f:91:d1:1f:d7:a6:fd:
a3:81:be:51:32:60:c2:ca:0c:ad:2e:6b:dd:7c:f2:a2:38:10:
da:0d:da:b7:94:ef:f5:c9:da:c6:e6:69:7b:52:cc:8f:53:ce:
47:8c:39:c3:0b:d2:25:72:93:3a:4e:68:d2:17:ec:27:18:81:
7c:1b:fe:b4:25:23:b6:5e:c6:a8:c6:60:68:17:1f:24:a8:28:
67:a9:0d:27:78:99:2f:be:2b:ed:c5:8f:15:7a:5d:e7:a2:57:
ad:c2:5a:04:14:68:f9:41:07:b8:dc:d3:50:78:2b:42:e1:e6:
50:f7:4b:e0:3e:0e:1d:a8:3d:23:fe:46:0e:70:9f:fb:83:e8:
e6:3f:e1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:47 2024 by rpki-client on console-ams.rpki-client.org