Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/714f44-fc37-45a0-b67d-722150cddd98/1/h-AwnG-qMOr7J_V28o377fNfG2Q.roa
File: h-AwnG-qMOr7J_V28o377fNfG2Q.roa (raw, json)
Hash identifier: /C+2r0QppeB9xC/t/gyNqAP7ndlHsk0zt0lXB7wpoGo=
Subject key identifier: 87:E0:30:9C:6F:AA:30:EA:FB:27:F5:76:F2:8D:FB:ED:F3:5F:1B:64
Certificate issuer: /CN=fc6fa9111449a693e8419d2344a1edaad8c7e096
Certificate serial: 05C14957
Authority key identifier: FC:6F:A9:11:14:49:A6:93:E8:41:9D:23:44:A1:ED:AA:D8:C7:E0:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_G-pERRJppPoQZ0jRKHtqtjH4JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/714f44-fc37-45a0-b67d-722150cddd98/1/h-AwnG-qMOr7J_V28o377fNfG2Q.roa
Signing time: Sat 01 Jan 2022 15:05:35 +0000
ROA not before: Sat 01 Jan 2022 15:05:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211373
IP address blocks: 185.124.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96553303 (0x5c14957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6fa9111449a693e8419d2344a1edaad8c7e096
Validity
Not Before: Jan 1 15:05:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87e0309c6faa30eafb27f576f28dfbedf35f1b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:88:6f:94:53:30:d0:2e:e1:10:d0:b7:1e:
e8:1d:3b:e4:a8:03:8a:e4:af:a0:43:d5:69:dd:dc:
5a:12:55:40:7c:f2:60:de:49:b6:9b:44:8c:cd:2a:
2b:cb:3d:6a:d1:b2:bf:f0:4d:a8:96:64:1a:ea:0f:
1c:4c:4a:d5:5d:3c:a1:54:f7:01:39:91:e3:ff:09:
05:20:df:f4:dd:d7:a4:14:1f:4a:d5:5f:f0:07:a0:
2f:82:51:13:f2:65:50:80:fe:c9:5e:bf:64:9c:ec:
ea:6a:90:26:42:e6:ad:78:ce:74:35:1a:a3:34:a8:
26:16:0b:e9:7e:f2:f2:c3:32:00:98:15:15:59:32:
14:f3:93:b1:f8:44:6a:87:72:68:b0:5a:0b:31:54:
13:c8:6e:7a:72:eb:be:c0:ee:70:04:e3:e4:8b:f0:
8a:22:ba:27:84:13:53:38:32:4d:3f:77:02:98:e0:
c2:4e:33:38:cb:be:b1:79:9e:2f:48:b3:7c:95:61:
15:ec:e7:b0:00:28:58:28:d1:6f:7a:84:25:22:a0:
6b:7a:b2:2c:f0:8b:60:63:94:cc:86:6b:3f:ec:d8:
23:0a:b3:57:be:70:0b:77:92:90:1d:a4:cf:53:61:
bc:1c:03:40:ad:43:1f:c8:32:eb:ce:86:3c:0e:29:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E0:30:9C:6F:AA:30:EA:FB:27:F5:76:F2:8D:FB:ED:F3:5F:1B:64
X509v3 Authority Key Identifier:
keyid:FC:6F:A9:11:14:49:A6:93:E8:41:9D:23:44:A1:ED:AA:D8:C7:E0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_G-pERRJppPoQZ0jRKHtqtjH4JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/714f44-fc37-45a0-b67d-722150cddd98/1/h-AwnG-qMOr7J_V28o377fNfG2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/714f44-fc37-45a0-b67d-722150cddd98/1/_G-pERRJppPoQZ0jRKHtqtjH4JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.241.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c9:91:0a:0c:74:d8:fd:15:31:58:2a:60:f9:09:7c:d6:77:
57:36:a6:61:e0:e2:eb:0f:cc:c8:0a:1f:b0:42:80:e5:79:11:
7a:8a:54:7e:c3:40:0a:3e:b7:de:db:28:8c:89:b9:57:a9:49:
60:bd:93:26:ea:cc:06:55:aa:bb:55:7c:64:19:1f:40:ac:39:
98:5d:7a:b7:cc:2e:f9:8a:d0:fd:97:b4:77:4f:49:aa:48:a7:
6c:2d:f5:10:43:61:cb:08:e3:e3:6d:23:53:b0:d6:83:a8:19:
ce:e0:ad:77:fc:ff:7b:4a:27:6c:9a:52:4c:b3:e8:4d:1b:99:
ac:ed:f4:21:12:73:d4:e8:99:19:d4:54:d7:f2:eb:47:3c:a8:
f3:56:27:9b:c4:b9:e3:c9:fb:d3:e3:8b:d7:3d:49:88:b3:7d:
bf:7c:29:17:31:ca:9f:e3:70:29:35:a7:79:4b:cc:98:01:34:
7c:c2:9b:21:4b:22:3c:80:e2:cc:ed:38:99:b2:a3:1d:8e:21:
2a:1c:e1:e1:cc:a2:ff:89:7d:e2:82:50:bb:3a:db:04:c6:f1:
78:62:36:52:fa:d3:0e:29:30:65:79:75:ba:66:b9:ee:b8:29:
b2:8d:f5:65:dd:f7:b2:19:39:37:52:9d:c7:93:5d:6f:ee:51:
74:7f:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:55 2024 by rpki-client on console-ams.rpki-client.org