Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/EfCG091A98xrM4Dz0GbjCWrSCXk.roa
File: EfCG091A98xrM4Dz0GbjCWrSCXk.roa (raw, json)
Hash identifier: Oe6kwNR28gJsUm+Kl9BW1Bb6TdgchBQ1TbX2ky6gnV8=
Subject key identifier: 11:F0:86:D3:DD:40:F7:CC:6B:33:80:F3:D0:66:E3:09:6A:D2:09:79
Certificate issuer: /CN=f62cb707c297f0bce43af4f4cbacbb8a636ccc61
Certificate serial: 01869D32FB3584B75CC8D1B60E2E4F8EA4FA
Authority key identifier: F6:2C:B7:07:C2:97:F0:BC:E4:3A:F4:F4:CB:AC:BB:8A:63:6C:CC:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iy3B8KX8LzkOvT0y6y7imNszGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/EfCG091A98xrM4Dz0GbjCWrSCXk.roa
Signing time: Wed 01 Mar 2023 12:43:29 +0000
ROA not before: Wed 01 Mar 2023 12:43:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60707
IP address blocks: 185.248.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:32:fb:35:84:b7:5c:c8:d1:b6:0e:2e:4f:8e:a4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62cb707c297f0bce43af4f4cbacbb8a636ccc61
Validity
Not Before: Mar 1 12:43:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11f086d3dd40f7cc6b3380f3d066e3096ad20979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a7:27:c8:04:18:95:71:4c:eb:1b:56:2f:fd:
1b:65:a7:44:f2:a8:2b:ae:fd:e4:28:a0:70:1b:3d:
16:26:3d:48:c6:cc:e3:76:0f:73:4e:38:b0:f4:cd:
85:0e:bc:cf:c1:1a:4f:e9:a9:8b:ce:3d:db:07:48:
be:08:48:34:36:15:f7:04:33:19:61:c9:44:9a:72:
d3:b9:e1:76:66:d6:e8:79:65:dc:09:d8:58:79:79:
3a:3c:23:03:d9:73:0c:8f:d0:5f:7b:ab:9b:f6:ce:
da:70:ce:7e:e2:25:58:d5:6e:27:2b:e4:19:68:50:
d8:1b:6a:e9:04:8c:0a:9e:83:b8:5d:b6:eb:0f:db:
f3:e4:21:be:3e:88:22:7b:02:8e:4b:62:41:fc:11:
b4:49:69:6e:11:4e:82:d8:98:e4:8a:8a:f6:b2:e0:
87:7d:28:eb:e1:fe:7a:26:84:34:da:5b:16:30:10:
db:6e:10:36:78:95:c2:4e:ec:6a:ba:89:13:46:44:
94:24:f5:df:f7:d7:c5:53:be:16:56:17:20:38:3b:
b0:ef:17:4c:d0:b8:19:07:94:1b:52:16:05:5d:6f:
23:8e:2e:a6:b5:75:11:59:ee:c8:8f:f7:29:1a:ef:
e8:5e:d4:18:70:50:48:94:00:b8:7e:da:52:f8:c0:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F0:86:D3:DD:40:F7:CC:6B:33:80:F3:D0:66:E3:09:6A:D2:09:79
X509v3 Authority Key Identifier:
keyid:F6:2C:B7:07:C2:97:F0:BC:E4:3A:F4:F4:CB:AC:BB:8A:63:6C:CC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iy3B8KX8LzkOvT0y6y7imNszGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/EfCG091A98xrM4Dz0GbjCWrSCXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/9iy3B8KX8LzkOvT0y6y7imNszGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:94:23:69:4b:12:b4:d7:9d:0c:18:4b:94:02:1b:8d:83:c8:
30:b6:06:6c:f1:f4:b5:60:d1:22:4c:b4:ab:7d:6b:9a:6e:70:
48:6f:44:34:d2:b8:a1:42:6a:e1:64:ba:95:0a:8f:53:0d:4e:
f4:65:96:4b:5f:52:83:2b:f6:dd:68:06:ac:09:20:b2:8b:e0:
c5:47:43:1e:93:0b:50:dd:8c:06:e3:3c:b0:11:c6:2b:68:fd:
08:e5:a2:c5:6f:ad:37:3f:8e:32:a4:2c:94:af:3c:21:dc:f7:
e6:c3:db:43:97:4f:4c:ba:bf:cc:c0:79:23:9f:c1:4a:29:73:
38:94:12:16:fa:c8:1a:0c:23:e0:2b:17:d0:8d:27:60:64:53:
29:4a:6e:7d:23:fc:05:56:98:f4:14:8a:03:6e:8b:4d:f1:f6:
26:e5:17:15:a2:9b:4e:a0:80:23:5b:4f:48:5e:0a:c2:ce:ae:
6f:ce:00:29:47:ec:9c:4f:5b:95:c0:aa:b2:0a:90:6d:50:1c:
a2:7c:53:1b:c0:8c:32:ec:12:d3:ac:63:f8:a7:97:9a:18:ea:
ca:5f:f9:86:e7:27:2d:70:ec:50:14:f6:70:51:39:a6:fe:ae:
4d:10:3d:09:63:d5:4d:67:ad:50:4a:71:9b:27:60:4d:87:d0:
30:86:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:53 2024 by rpki-client on console-fra.rpki-client.org