Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/z2QhJcz56pkHTfDavL9lqt5QqWk.roa
File: z2QhJcz56pkHTfDavL9lqt5QqWk.roa (raw, json)
Hash identifier: YsgR+uBcnZM2ub9SWXpiWvAgeT+py6wCID9E48YXojI=
Subject key identifier: CF:64:21:25:CC:F9:EA:99:07:4D:F0:DA:BC:BF:65:AA:DE:50:A9:69
Certificate issuer: /CN=f62cb707c297f0bce43af4f4cbacbb8a636ccc61
Certificate serial: 01873BC6378A51CFE69A64C179F1FF5F2B70
Authority key identifier: F6:2C:B7:07:C2:97:F0:BC:E4:3A:F4:F4:CB:AC:BB:8A:63:6C:CC:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iy3B8KX8LzkOvT0y6y7imNszGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/z2QhJcz56pkHTfDavL9lqt5QqWk.roa
Signing time: Sat 01 Apr 2023 07:44:18 +0000
ROA not before: Sat 01 Apr 2023 07:44:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.248.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3b:c6:37:8a:51:cf:e6:9a:64:c1:79:f1:ff:5f:2b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62cb707c297f0bce43af4f4cbacbb8a636ccc61
Validity
Not Before: Apr 1 07:44:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf642125ccf9ea99074df0dabcbf65aade50a969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:3b:ec:a8:de:90:4a:d3:62:75:19:dd:15:
df:5d:50:82:2f:8d:34:70:56:04:34:be:ee:5b:cf:
cb:a2:87:7a:69:d1:b0:df:ed:74:32:44:bd:bc:db:
b9:2c:b5:0e:4d:bd:b9:0c:19:bb:3f:80:d7:64:b5:
45:6e:33:8c:0a:50:c6:f0:1a:4e:6e:ca:6b:93:f3:
51:66:d1:f2:f3:5f:27:dc:1c:f8:d1:f2:fb:79:c8:
23:eb:98:bc:21:63:9d:d5:e2:e9:3a:85:f2:dc:42:
f8:b9:7e:a4:42:08:3c:be:12:67:b7:18:df:64:cc:
75:38:67:d8:a9:0d:19:93:14:4a:e2:25:7f:08:e5:
15:b2:64:96:bb:89:11:21:cd:ab:62:56:5b:09:67:
d4:d0:4b:a2:a2:de:de:2d:78:4e:cd:b9:22:49:95:
69:7f:03:1f:e5:c9:8a:8a:74:dd:44:9b:2a:4d:df:
74:5a:01:b7:5a:33:28:7c:b3:8e:0b:45:ed:50:c8:
ee:20:73:31:d2:ca:8a:c0:01:01:2f:0b:14:74:84:
e9:d2:bb:08:fb:de:f6:ad:23:2b:73:7c:33:51:1c:
c1:0c:66:3d:08:1d:67:c0:21:b5:92:b5:73:c4:e7:
33:3d:75:93:24:53:e5:34:6a:5b:60:38:18:ad:1c:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:64:21:25:CC:F9:EA:99:07:4D:F0:DA:BC:BF:65:AA:DE:50:A9:69
X509v3 Authority Key Identifier:
keyid:F6:2C:B7:07:C2:97:F0:BC:E4:3A:F4:F4:CB:AC:BB:8A:63:6C:CC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iy3B8KX8LzkOvT0y6y7imNszGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/z2QhJcz56pkHTfDavL9lqt5QqWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/9iy3B8KX8LzkOvT0y6y7imNszGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.135.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3e:b0:0d:e9:da:52:18:86:e0:ec:a7:08:67:66:ce:e5:15:
50:57:fa:8f:73:4f:a4:8e:f4:45:cd:bb:1a:5d:e8:ce:19:45:
48:97:ec:eb:fe:1c:59:0e:80:81:b1:76:c9:c0:3c:6b:0d:b1:
56:a6:4e:4b:43:1c:e9:f3:54:e5:7b:be:ea:26:86:d1:e7:d8:
f5:05:8a:3f:cf:32:18:ae:01:db:c2:4a:ff:bb:9d:12:bc:eb:
2b:c8:00:ad:d8:81:13:42:8c:92:31:38:83:f4:5a:e2:0f:14:
37:a4:f7:83:11:b0:cf:ff:8e:d4:6f:77:3e:20:a3:62:3b:1b:
b4:fa:0d:06:b0:b7:dc:61:e6:ed:56:d0:a0:7e:02:cb:63:bb:
93:8d:52:00:37:39:60:ea:3b:7c:6e:ae:91:f5:f9:ba:61:4b:
3e:64:e8:67:e0:4f:52:03:ba:06:2a:b2:d5:ee:76:2c:a0:ff:
80:ea:6d:e3:9b:da:79:3a:a3:bd:ed:e8:b6:c5:a1:9c:5a:3f:
9c:aa:fb:09:86:20:45:ea:10:fe:16:f8:39:b5:a4:7b:9b:4b:
e2:d5:85:aa:9d:f7:d5:79:99:f2:43:00:54:c8:d5:8f:6a:36:
38:d0:4d:05:4f:0e:a4:c2:d7:ce:b2:4a:66:d9:b2:86:0f:5b:
23:15:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:53 2024 by rpki-client on console-ams.rpki-client.org